Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft
File:                     01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft (raw, json)
Hash identifier:          fg2N1UWPkNWielrGFhxoNm2EeYgqYXUGkIwaV2ZykRM=
Subject key identifier:   14:39:24:6F:61:12:E7:4D:02:AA:2A:7E:BE:33:BB:DF:FD:F5:4F:DA
Authority key identifier: 01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0
Certificate issuer:       /CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0
Certificate serial:       09C4BF5BC072111B1F6D00D475A28D4CCB64966E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 13:56:12 +0000
Manifest this update:     Tue 16 Jun 2026 13:51:12 +0000
Manifest next update:     Wed 17 Jun 2026 16:27:12 +0000
Files and hashes:         1: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ySzed5uDLDabSH9SesSAtowh1c9UjHu8DGpoOUcm2mA=)
                          2: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl (hash: iRr1O+AahmR7uP5+KN3C9Ao1p8vwRq7XUQ63+/d5N1M=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl
                          rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c4:bf:5b:c0:72:11:1b:1f:6d:00:d4:75:a2:8d:4c:cb:64:96:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0
        Validity
            Not Before: Jun 16 13:51:12 2026 GMT
            Not After : Jun 17 16:27:12 2026 GMT
        Subject: CN=1439246F6112E74D02AA2A7EBE33BBDFFDF54FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:27:96:05:ca:27:0a:23:3a:4e:89:2b:f8:
                    57:47:1a:bd:a2:9c:0f:07:d5:8c:1a:32:84:56:ee:
                    31:52:c5:55:22:a5:02:63:c4:11:98:66:67:1d:aa:
                    7d:de:58:52:7a:40:58:f1:cc:fe:4a:0f:c5:03:53:
                    b4:27:af:e1:0b:b1:6d:5d:1d:0f:c3:0f:64:33:27:
                    a5:f0:0c:4d:7e:23:5a:63:fa:6e:78:00:50:a6:fa:
                    ae:da:9d:95:c1:fe:be:d7:87:ba:b9:6b:97:10:6b:
                    91:8c:9d:94:59:79:ce:0c:6f:d0:ce:df:07:e0:4d:
                    4f:3e:0e:fe:b5:c1:96:56:16:90:de:77:0e:40:ee:
                    49:f7:0c:3c:e1:6f:7a:d7:f7:dd:fc:ec:2a:98:bb:
                    be:91:93:43:48:29:f1:e9:bc:74:3a:ef:ea:70:ac:
                    bd:49:77:c0:93:c9:83:ef:77:4d:0d:7d:07:78:f4:
                    df:33:13:96:9e:67:e4:ff:56:dc:91:07:96:6f:51:
                    91:dc:57:b6:bc:b0:2d:1c:68:39:16:6d:b7:7a:38:
                    fd:f8:1e:38:1b:da:6b:67:7e:3b:fd:76:70:7a:ac:
                    29:b2:a4:82:7d:eb:7e:72:b1:8f:18:9e:fd:98:b2:
                    e1:7d:4b:ec:65:75:c3:5b:69:3e:85:35:db:e7:66:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:39:24:6F:61:12:E7:4D:02:AA:2A:7E:BE:33:BB:DF:FD:F5:4F:DA
            X509v3 Authority Key Identifier:
                keyid:01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:b5:fc:9b:43:a2:d7:18:51:9a:ed:86:86:af:79:b7:e6:ac:
         80:78:99:ac:ea:98:8a:7e:70:12:9c:df:b7:38:90:5e:c6:77:
         a3:27:d5:e6:07:30:87:9f:b4:7d:2d:20:d1:1a:c4:1c:3a:2e:
         9c:a1:1e:23:14:83:49:3c:ed:cc:2f:f9:1d:e0:d9:3e:88:96:
         e0:ce:71:aa:5d:91:5e:98:52:f6:b5:c4:ac:21:bf:aa:95:fb:
         6b:6e:6a:f2:0c:44:c9:9b:31:6b:9e:17:6a:c2:cf:fc:c0:0e:
         93:fa:ec:fd:51:20:2d:47:28:53:11:2c:d1:97:e2:19:ab:c8:
         94:64:2c:7f:dd:ea:ac:53:e7:d3:48:b0:87:e0:d0:b2:05:7b:
         7b:8b:69:99:fb:9d:39:1c:7e:5f:33:8e:e5:94:96:49:40:20:
         71:ca:d7:6a:e8:aa:63:1a:96:fb:3e:ff:c7:02:43:66:9e:41:
         1f:2d:21:16:a8:a5:99:ff:39:99:8b:8c:d7:7e:53:4b:80:10:
         e4:89:95:e8:2b:fd:cc:a9:2e:28:df:f7:de:88:6f:c1:13:51:
         63:69:6f:5c:b9:6c:99:29:cd:47:84:50:0d:e0:2d:c2:62:fe:
         1d:06:ab:52:b9:09:04:95:a9:51:9f:5a:85:50:0b:6d:4e:d9:
         e8:39:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:48 2026 by rpki-client