Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
File:                     5935015AB8D2AA07565ACB7B918A50D49090AA26.mft (raw, json)
Hash identifier:          5BDnnqhvViIWZTTyQB4V4QDRWngWF7E9bOHPj1Z7qVs=
Subject key identifier:   9A:85:59:BE:C8:FB:38:CB:AA:36:16:92:C3:3F:42:C5:A1:5C:A3:E8
Authority key identifier: 59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26
Certificate issuer:       /CN=5935015AB8D2AA07565ACB7B918A50D49090AA26
Certificate serial:       2CB061A08BE078F75F0777429C24FCE9709C223D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
Manifest number:          3B
Signing time:             Sun 14 Jun 2026 20:32:06 +0000
Manifest this update:     Sun 14 Jun 2026 20:27:06 +0000
Manifest next update:     Mon 15 Jun 2026 21:56:06 +0000
Files and hashes:         1: 5935015AB8D2AA07565ACB7B918A50D49090AA26.crl (hash: tWUlL1j75fEbeUc8U3I52KBanCZGUrjy/qKMQPDWcJY=)
                          2: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: YukTsqh5CPIPhkM3TqJo0K1IkyqlUpFEdp2Xtp+n8JI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl
                          rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 21:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b0:61:a0:8b:e0:78:f7:5f:07:77:42:9c:24:fc:e9:70:9c:22:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5935015AB8D2AA07565ACB7B918A50D49090AA26
        Validity
            Not Before: Jun 14 20:27:06 2026 GMT
            Not After : Jun 15 21:56:06 2026 GMT
        Subject: CN=9A8559BEC8FB38CBAA361692C33F42C5A15CA3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:70:2f:8b:c6:7a:10:25:35:91:53:c4:93:
                    2b:3f:4c:bc:82:81:2c:39:f1:ff:d2:25:8c:db:e6:
                    00:b0:14:5d:d3:85:41:00:fc:df:71:dc:52:9c:3a:
                    23:7f:15:88:ae:59:6d:ca:16:12:a4:b6:e2:7b:5a:
                    47:68:6d:be:47:fd:3d:c3:23:0f:6a:64:6f:d1:18:
                    10:16:09:5f:5f:90:a6:00:8b:8f:32:50:0c:87:b8:
                    56:8b:c9:24:66:11:5f:5e:c6:ea:dd:85:cf:e5:59:
                    46:86:05:2d:6f:5a:6d:cc:5b:93:4d:41:be:f6:91:
                    3e:7c:12:ad:d2:13:6d:04:f5:d9:fb:e7:9f:fb:85:
                    02:58:be:a3:e6:76:ba:32:fc:5e:9a:62:5d:69:77:
                    01:63:57:96:2b:f1:39:6c:8b:2e:45:b2:56:70:b9:
                    24:9f:bb:aa:1c:3e:5d:df:01:92:fa:30:e5:9a:62:
                    0d:9f:10:cb:78:94:37:c6:2f:74:aa:ca:56:f9:62:
                    07:ad:3e:fc:02:64:dc:3e:29:3f:25:93:45:7e:4e:
                    5b:98:1f:4b:48:8c:e5:e3:a2:b1:f8:dd:bd:81:ae:
                    58:fe:1f:c3:82:df:d3:d0:8b:18:cb:cf:92:e7:07:
                    af:47:0e:93:cd:4b:c6:5d:cc:fe:cc:e2:85:cd:0b:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:85:59:BE:C8:FB:38:CB:AA:36:16:92:C3:3F:42:C5:A1:5C:A3:E8
            X509v3 Authority Key Identifier:
                keyid:59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4f:69:f9:83:99:76:0e:ef:b3:82:ac:da:a4:6d:5e:2d:91:
         05:5a:a3:39:54:c9:7f:7e:dd:a2:48:09:0d:83:21:45:48:3c:
         80:7a:ee:94:a6:ae:27:b0:f6:93:7a:3f:19:9a:36:0d:85:fe:
         3f:41:da:4d:d5:f9:68:d4:d4:ed:8a:fc:11:a6:a2:4a:4a:96:
         6a:09:84:56:82:2d:2c:46:2c:f7:15:f7:41:78:c8:3c:c8:de:
         c5:93:ca:5c:19:c3:9c:f6:7c:75:76:14:b0:75:37:ac:d3:7f:
         83:5b:9e:53:a5:e1:cf:c3:f7:bc:e7:0e:e7:af:45:f4:2e:96:
         6c:14:f3:c3:d0:71:07:05:ee:81:c5:5d:8c:23:f3:4c:ff:a1:
         4a:a2:dc:48:51:b6:2a:01:df:61:39:7c:24:31:8c:bf:e9:3b:
         14:ee:9a:47:b8:ad:00:74:64:96:b2:e2:39:30:11:ff:03:18:
         7d:5d:e4:72:27:c8:be:dc:4e:64:6f:a5:f3:47:48:07:af:4b:
         0f:1a:9c:48:70:96:23:0a:7f:ec:7f:21:57:40:68:f2:ed:1a:
         18:3d:38:84:92:67:d0:ed:7d:cc:e1:30:7c:5c:fa:1f:99:b1:
         0a:51:fe:b5:3a:38:43:9c:7d:2e:d0:fb:ea:2f:de:12:9d:3b:
         bf:fb:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 14:10:52 2026 by rpki-client