Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
File:                     A5251C27E1AF09AE2F28618250807EA4D573694B.mft (raw, json)
Hash identifier:          GY2QCLi5jNBEKZvTRN35gxA4q4cMSyuXcyTftCUxxXA=
Subject key identifier:   88:E2:53:69:82:75:DB:B7:30:E0:33:7D:B1:50:67:A5:25:40:A8:A4
Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B
Certificate issuer:       /CN=A5251C27E1AF09AE2F28618250807EA4D573694B
Certificate serial:       7A28234F05E2DE049E06693C0584F5162A539868
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
Manifest number:          3B
Signing time:             Mon 15 Jun 2026 04:21:40 +0000
Manifest this update:     Mon 15 Jun 2026 04:16:40 +0000
Manifest next update:     Tue 16 Jun 2026 04:25:40 +0000
Files and hashes:         1: A5251C27E1AF09AE2F28618250807EA4D573694B.crl (hash: 32v7uXH/r7NEOf0byYlbPFwFuYgvGZENRZMjuhU4o5s=)
                          2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: 8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl
                          rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 01:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:28:23:4f:05:e2:de:04:9e:06:69:3c:05:84:f5:16:2a:53:98:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B
        Validity
            Not Before: Jun 15 04:16:40 2026 GMT
            Not After : Jun 16 04:25:40 2026 GMT
        Subject: CN=88E253698275DBB730E0337DB15067A52540A8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:b8:cd:ea:a4:db:79:f8:d1:ec:db:ec:79:
                    54:da:c0:22:f1:78:8e:3f:9c:00:9e:69:9f:dc:c3:
                    3d:bf:a4:32:59:b5:54:ad:40:6c:68:7b:57:f8:63:
                    d4:94:fb:b1:e8:e0:4a:51:44:49:83:c7:36:7e:a1:
                    e3:9b:bb:b2:4b:54:43:7d:b9:a5:69:5e:bc:42:38:
                    e4:56:e2:dd:48:1c:0f:17:36:4c:1c:df:9d:a3:47:
                    e4:c4:d6:9b:de:d8:5c:4c:28:99:9d:b6:db:c3:83:
                    8c:64:8c:c2:ea:cd:6d:ab:c5:40:7f:58:f2:e5:63:
                    47:b4:be:fc:2f:49:94:8f:57:c7:28:19:ed:89:ef:
                    86:69:07:16:2e:09:ee:6c:d9:77:f8:86:40:e1:4a:
                    d2:47:f2:bb:93:d4:11:54:5f:66:7d:44:b4:00:c4:
                    14:ff:81:fd:55:ac:44:83:64:8c:4c:48:65:18:7e:
                    c2:84:05:28:8c:49:e1:b3:af:61:ee:52:cd:1d:80:
                    58:ec:17:3a:b8:c5:f4:ee:7b:3d:ec:b0:67:24:d9:
                    5d:ed:2a:a3:ae:a4:65:45:06:ac:fd:df:2d:e8:b8:
                    ef:66:94:50:89:61:b6:8a:aa:12:12:af:b3:da:98:
                    57:fe:a6:92:bb:59:f8:56:f1:d0:ac:0b:81:f8:63:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E2:53:69:82:75:DB:B7:30:E0:33:7D:B1:50:67:A5:25:40:A8:A4
            X509v3 Authority Key Identifier:
                keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:87:da:9d:a4:ef:6d:90:10:24:9f:00:e3:e0:d7:0d:50:
         d2:ef:f5:f9:89:5c:c2:2b:39:df:86:56:3f:c0:04:a2:2b:08:
         61:39:e7:44:a5:b6:bb:a9:7a:76:d8:74:10:25:ab:a4:57:2c:
         56:bb:26:51:5f:73:51:a8:d8:6d:58:fc:e8:44:f7:cf:31:72:
         ee:11:6b:50:fe:63:a3:85:d7:92:39:35:94:c8:32:db:21:61:
         78:42:99:f0:dd:ea:e7:87:99:e7:16:14:73:ce:f7:12:d1:8d:
         ac:a5:28:18:a7:8b:29:94:6f:50:52:7c:c9:27:50:37:6e:62:
         74:5a:e8:2f:9b:e1:b4:b1:65:12:cd:a9:08:fc:d3:1c:9f:62:
         cb:35:42:61:0c:a4:47:80:84:03:0b:35:9a:b4:31:c1:42:d3:
         8e:19:b4:ab:fc:0c:54:0d:0d:3e:54:43:1d:ce:f9:3a:07:70:
         d7:db:8e:74:42:a4:38:8e:67:cc:fe:67:36:49:e8:1a:7e:98:
         3e:82:cd:08:f4:7c:f9:50:81:7c:00:f4:0a:a7:47:15:0a:54:
         9c:81:a4:f1:b8:2d:91:2e:fa:d3:b4:ca:e5:dc:1f:87:50:85:
         82:f0:6f:18:fb:cd:2a:09:9e:f3:28:90:f9:7f:67:ba:17:cd:
         b7:97:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:41:56 2026 by rpki-client