Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
File:                     D22CC628B819E164A006F58EA6CF791A3AD66A38.mft (raw, json)
Hash identifier:          CIUE0LgaC++s29/nBsosPAIMikg0XM+/ZFfjMQ0vJMM=
Subject key identifier:   F7:00:F8:A1:77:DA:D1:3E:2F:65:F0:4F:73:5A:60:C4:78:77:71:02
Authority key identifier: D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38
Certificate issuer:       /CN=D22CC628B819E164A006F58EA6CF791A3AD66A38
Certificate serial:       66FC4C12FAD438523DF56ED7A5D6C89D21B6BC9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 08:12:50 +0000
Manifest this update:     Wed 17 Jun 2026 08:07:50 +0000
Manifest next update:     Thu 18 Jun 2026 10:36:50 +0000
Files and hashes:         1: D22CC628B819E164A006F58EA6CF791A3AD66A38.crl (hash: kHyz1YKipxSnY50WMQe4LZUAVNSHI3/wHn/tQiSJ/1U=)
                          2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: dnAkfTvHw17dHWCAlbvcfqCxpaF/acXpN4SJ7+7NKIU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl
                          rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fc:4c:12:fa:d4:38:52:3d:f5:6e:d7:a5:d6:c8:9d:21:b6:bc:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D22CC628B819E164A006F58EA6CF791A3AD66A38
        Validity
            Not Before: Jun 17 08:07:50 2026 GMT
            Not After : Jun 18 10:36:50 2026 GMT
        Subject: CN=F700F8A177DAD13E2F65F04F735A60C478777102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:d2:bc:49:61:54:d6:e0:68:8d:83:84:1a:
                    29:8d:59:4d:b7:24:51:77:0c:2a:d8:79:54:b3:c3:
                    e7:3f:d1:97:ef:95:fc:fb:7d:f7:73:a3:05:0b:45:
                    a6:d6:a7:11:76:fb:a3:6f:86:5f:b9:89:0b:ef:e6:
                    5a:60:67:e9:bb:d1:d0:3b:2e:48:1f:3d:6f:11:52:
                    fa:65:bd:f2:2c:f4:8a:de:7b:37:20:da:39:01:29:
                    c1:e7:0a:a7:48:13:9d:16:12:66:af:96:dd:ba:0d:
                    1f:da:93:33:99:02:04:da:f4:b7:65:c5:7a:e4:d0:
                    11:92:22:85:4d:17:7d:12:1d:52:79:fb:3a:a5:5e:
                    cb:cf:c6:c9:e3:2e:64:94:3f:12:b0:24:d3:bd:34:
                    d1:46:f6:7f:61:35:67:f6:ca:17:19:9a:c8:48:c6:
                    23:6b:ac:e8:d6:13:02:72:0e:a7:d3:c9:9d:28:0b:
                    03:61:d0:71:92:00:00:aa:0a:a6:a2:80:32:58:79:
                    24:94:2a:f7:26:4b:f4:61:35:43:db:8c:60:36:24:
                    42:ec:ad:b0:23:84:07:fa:f4:21:26:03:df:30:8d:
                    73:63:53:6a:36:9e:82:de:26:fd:c4:19:93:55:1f:
                    06:37:1a:45:a5:27:3b:4d:04:f0:b8:e9:12:1b:2a:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:F8:A1:77:DA:D1:3E:2F:65:F0:4F:73:5A:60:C4:78:77:71:02
            X509v3 Authority Key Identifier:
                keyid:D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ed:61:e2:a5:06:28:df:15:64:db:37:ba:79:7b:51:99:e6:
         37:e3:d4:a6:5a:ee:dc:61:80:d1:37:27:30:9c:7c:8a:7e:04:
         15:75:6e:1d:9e:cb:fe:86:60:a4:1d:25:f9:c7:e6:15:ec:a1:
         55:db:1b:7a:fe:61:bf:3c:6e:23:c1:b7:24:87:0b:66:b3:07:
         b6:82:fd:08:c3:53:df:a6:9e:43:7e:18:ef:55:c5:b7:c1:eb:
         6b:cb:62:7b:4c:83:3f:be:d6:85:26:8a:dc:c0:04:2e:91:3f:
         9d:3b:a6:45:ec:f5:77:4c:45:85:89:28:88:2f:fc:f1:7e:12:
         90:e1:ed:08:28:3b:de:e1:10:cd:19:dd:8e:96:3a:fd:69:9c:
         7e:85:8b:a3:3f:7b:dd:06:cd:aa:c0:a2:cf:75:f4:24:cc:1e:
         49:c1:07:cf:ea:f7:d0:a5:08:45:ee:e6:96:18:92:2d:c9:61:
         45:4b:5c:01:c4:1f:9b:46:0e:1f:fc:52:c0:05:8e:31:75:66:
         0d:84:1b:26:ed:ae:8b:dc:38:2c:83:3d:82:42:9b:4a:ef:d5:
         98:1c:9a:3d:37:b5:20:a1:c0:69:f8:92:a4:71:d8:c5:59:b1:
         6d:91:ed:81:db:a2:44:f0:82:17:fe:0a:15:86:3a:5f:90:6d:
         65:ac:15:81
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZvxMEvrUOFI99W7XpdbInSG2vJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5MUEz
QUQ2NkEzODAeFw0yNjA2MTcwODA3NTBaFw0yNjA2MTgxMDM2NTBaMDMxMTAvBgNV
BAMTKEY3MDBGOEExNzdEQUQxM0UyRjY1RjA0RjczNUE2MEM0Nzg3NzcxMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP09K8SWFU1uBojYOEGimNWU23
JFF3DCrYeVSzw+c/0Zfvlfz7ffdzowULRabWpxF2+6Nvhl+5iQvv5lpgZ+m70dA7
LkgfPW8RUvplvfIs9Ireezcg2jkBKcHnCqdIE50WEmavlt26DR/akzOZAgTa9Ldl
xXrk0BGSIoVNF30SHVJ5+zqlXsvPxsnjLmSUPxKwJNO9NNFG9n9hNWf2yhcZmshI
xiNrrOjWEwJyDqfTyZ0oCwNh0HGSAACqCqaigDJYeSSUKvcmS/RhNUPbjGA2JELs
rbAjhAf69CEmA98wjXNjU2o2noLeJv3EGZNVHwY3GkWlJztNBPC46RIbKrzRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9wD4oXfa0T4vZfBPc1pgxHh3cQIwHwYDVR0j
BBgwFoAU0izGKLgZ4WSgBvWOps95GjrWajgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGIwMTYwODUtMmY5NC00MGZmLTgwY2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhC
ODE5RTE2NEEwMDZGNThFQTZDRjc5MUEzQUQ2NkEzOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMjJDQzYyOEI4MTlFMTY0QTAwNkY1OEVBNkNGNzkxQTNBRDY2
QTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw
Y2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5
MUEzQUQ2NkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEbtYeKlBijfFWTbN7p5e1GZ5jfj1KZa7txh
gNE3JzCcfIp+BBV1bh2ey/6GYKQdJfnH5hXsoVXbG3r+Yb88biPBtySHC2azB7aC
/QjDU9+mnkN+GO9VxbfB62vLYntMgz++1oUmitzABC6RP507pkXs9XdMRYWJKIgv
/PF+EpDh7QgoO97hEM0Z3Y6WOv1pnH6Fi6M/e90GzarAos919CTMHknBB8/q99Cl
CEXu5pYYki3JYUVLXAHEH5tGDh/8UsAFjjF1Zg2EGybtrovcOCyDPYJCm0rv1Zgc
mj03tSChwGn4kqRx2MVZsW2R7YHbokTwghf+ChWGOl+QbWWsFYE=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:31:43 2026 by rpki-client