Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
File:                     F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft (raw, json)
Hash identifier:          4FOF4PXUNLbkZtgxDI8zvzjOou2jyn8C0HtLScEYyCA=
Subject key identifier:   2A:0F:98:29:9A:A4:E4:17:BD:6F:1C:7E:DF:7A:E5:6E:EE:79:69:B2
Authority key identifier: F7:C8:FE:73:5E:16:A4:2B:0A:4F:E7:6A:29:68:C8:B3:72:B0:8F:E3
Certificate issuer:       /CN=F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3
Certificate serial:       52B9700A69A4716CCA1E8C515C9CDBC35F40F7F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 20:03:29 +0000
Manifest this update:     Tue 16 Jun 2026 19:58:29 +0000
Manifest next update:     Wed 17 Jun 2026 21:36:29 +0000
Files and hashes:         1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: 01F1UoKRV2E0gP5aPTGtczRefIGjQne0iajygCNTbZQ=)
                          2: F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl (hash: R8Z0P3IV7dqkhSXe1Od6G7kvvEjzO0j2X5XKDaZJUjw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl
                          rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b9:70:0a:69:a4:71:6c:ca:1e:8c:51:5c:9c:db:c3:5f:40:f7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3
        Validity
            Not Before: Jun 16 19:58:29 2026 GMT
            Not After : Jun 17 21:36:29 2026 GMT
        Subject: CN=2A0F98299AA4E417BD6F1C7EDF7AE56EEE7969B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:7f:cc:84:75:e0:25:69:e3:1b:c0:e6:94:
                    f9:dd:79:24:96:a4:6c:84:d2:59:bc:79:eb:e7:65:
                    2c:6c:50:6b:2f:1e:b3:27:63:45:60:81:75:ca:f1:
                    86:87:67:8a:a0:7f:f6:4f:d0:44:13:c4:70:57:30:
                    e2:98:86:d6:c2:8a:ff:7c:2b:a4:26:2e:27:bd:64:
                    ef:b3:44:ae:90:35:87:26:0b:f6:b6:a7:0b:32:3b:
                    42:4a:91:e7:20:bb:29:53:7b:e2:c7:f7:3a:54:52:
                    b4:12:ce:a5:21:56:5e:bc:bb:e6:71:0b:4d:9f:68:
                    4f:96:7f:ff:57:16:2a:64:b1:4e:74:cf:48:a0:29:
                    d6:3b:a0:8b:30:07:ff:d0:43:e1:d9:2d:b0:52:65:
                    b2:1c:c5:09:75:df:3b:23:43:05:d5:79:35:1b:09:
                    ac:f9:c0:ad:85:52:ec:05:b1:c6:89:57:f9:ca:3d:
                    f2:10:28:c2:9a:c9:4f:46:a2:2d:5d:9f:e6:70:13:
                    4b:ec:20:19:a2:c4:f2:a5:36:31:a0:78:6d:9b:5b:
                    06:57:8e:d9:f9:af:44:76:c0:f2:35:d1:a1:a4:66:
                    dc:a1:52:36:b0:d4:d6:9a:2a:d5:34:bd:2d:a4:ec:
                    ac:74:20:96:a5:fd:53:62:06:f3:0b:55:eb:52:43:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0F:98:29:9A:A4:E4:17:BD:6F:1C:7E:DF:7A:E5:6E:EE:79:69:B2
            X509v3 Authority Key Identifier:
                keyid:F7:C8:FE:73:5E:16:A4:2B:0A:4F:E7:6A:29:68:C8:B3:72:B0:8F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d9:a4:86:07:85:94:0d:3e:a6:5b:9c:05:fd:97:a3:bb:1b:
         6d:5b:aa:e2:af:aa:62:c3:f6:f2:4a:48:0c:8e:6f:7b:e5:f1:
         19:fc:bc:d7:7a:b5:cc:9d:51:3f:5a:80:a0:56:77:47:e5:95:
         00:c1:bf:3a:d0:d5:8f:6e:41:ce:27:b3:00:e2:83:dc:df:e3:
         37:d0:22:1f:1a:67:a9:a9:ad:bc:fb:1e:28:83:64:53:d8:c9:
         01:af:6b:2f:4b:d9:03:bb:b7:57:d3:15:57:23:e8:96:21:16:
         07:67:73:9f:cf:59:07:05:77:9d:d6:48:24:fb:dc:81:0c:7f:
         94:c2:dc:ed:b7:6f:d3:b4:33:0f:fa:76:ec:ee:11:86:54:67:
         44:b6:6f:dc:18:40:62:ab:dc:80:01:10:76:7b:61:b9:70:62:
         36:75:00:b8:45:ef:5f:50:0f:e7:02:11:2c:af:2b:bd:ec:c5:
         24:b2:5f:79:82:57:cd:ca:3c:b8:3a:ed:a5:47:20:f5:f0:11:
         c4:f3:2d:39:77:70:22:7f:14:cd:c3:72:8b:be:10:c1:51:5b:
         85:cb:a2:96:25:51:5b:f7:2c:ac:59:24:f9:1d:bf:cf:31:79:
         1c:fd:b8:59:e3:85:b6:b7:a8:aa:17:bb:12:70:01:e5:5b:74:
         5a:fb:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:41:33 2026 by rpki-client