Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft
File:                     5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft (raw, json)
Hash identifier:          Xz8hT1bbmr+86AeQjE+O/vYLyGM5YgIto9RFFWW/5js=
Subject key identifier:   91:A5:DD:84:7A:D3:D5:D9:69:04:7E:96:E4:01:30:B1:DC:78:1A:4A
Authority key identifier: 5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95
Certificate issuer:       /CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495
Certificate serial:       3E6125E33BDDA4C2BA684241978DD20326B7232B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 03:23:11 +0000
Manifest this update:     Sat 13 Jun 2026 03:18:11 +0000
Manifest next update:     Sun 14 Jun 2026 03:53:11 +0000
Files and hashes:         1: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: JniyB+kykIY2ndXJuy/YxGMo3Dbdi9UVhfqGmbiBAvY=)
                          2: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl (hash: pF1eDM+rhJQiZaWTEGS5Zvefrj0h2Klgmhg1yH3QB0k=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl
                          rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:25:e3:3b:dd:a4:c2:ba:68:42:41:97:8d:d2:03:26:b7:23:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495
        Validity
            Not Before: Jun 13 03:18:11 2026 GMT
            Not After : Jun 14 03:53:11 2026 GMT
        Subject: CN=91A5DD847AD3D5D969047E96E40130B1DC781A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:c8:37:1f:a2:86:c6:c2:d9:82:4d:9c:cd:
                    cf:7b:7c:7b:3c:48:07:3e:58:32:92:93:bf:44:df:
                    c2:76:05:0e:bf:67:7d:cc:b8:1d:d1:15:dd:3a:df:
                    c2:84:34:e8:c9:32:93:66:39:f7:32:e3:ac:72:b8:
                    eb:57:f8:d7:ee:65:c7:91:e4:e0:cd:07:fa:50:b6:
                    96:7b:f4:7e:86:d3:fc:ce:35:33:d6:00:49:5e:02:
                    dd:ab:85:e3:dd:02:93:6e:ea:84:b2:b4:e0:95:f6:
                    aa:14:e7:ab:1b:c7:c7:8a:da:a4:31:91:c7:17:fb:
                    56:fd:74:2d:57:86:e0:62:17:94:38:db:1d:ae:c8:
                    dd:b9:96:0e:fe:2b:cf:90:1b:69:6f:bc:bd:3d:5a:
                    10:9f:0e:71:de:29:d0:61:45:8e:84:36:5b:f7:ed:
                    c4:6f:d2:e0:e6:1b:7b:15:6a:89:19:00:d7:fe:23:
                    c1:cb:17:cd:aa:eb:c2:21:ac:ef:c0:6c:35:b6:c9:
                    f9:73:86:22:25:0f:c2:6a:b4:11:53:4a:ab:bd:2a:
                    e8:0a:62:6e:52:63:ac:d7:c5:df:99:a2:8b:2a:21:
                    9b:51:c6:fe:90:25:32:28:4b:83:57:25:9e:15:55:
                    2e:f5:fa:6d:22:45:4b:02:91:fd:98:75:5d:a8:6e:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A5:DD:84:7A:D3:D5:D9:69:04:7E:96:E4:01:30:B1:DC:78:1A:4A
            X509v3 Authority Key Identifier:
                keyid:5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ee:34:80:69:01:16:2a:ea:06:39:0e:07:f0:fc:05:85:ff:
         c4:ad:81:91:54:f0:a2:fe:09:f0:5c:78:ee:43:42:92:c6:c3:
         9b:92:88:f7:1d:3b:e2:99:ef:4c:57:ad:cf:4f:e0:48:78:81:
         5f:fd:5f:4c:2a:53:8b:af:b3:3f:f1:fb:e2:d7:04:bc:c7:93:
         55:cd:08:57:04:b4:7b:f9:df:89:1e:5c:5a:e5:e4:cb:1f:9a:
         e1:ae:9d:90:df:13:75:a6:84:4b:12:81:ee:8b:fe:26:f9:42:
         b8:45:30:dd:9c:51:ed:04:3c:b5:da:81:34:fe:1c:0f:a5:6e:
         e2:29:11:51:ad:f3:dd:09:10:50:a3:e2:e3:28:95:6c:42:7f:
         7a:35:b4:13:ed:48:d7:3f:9f:3d:bb:19:95:2a:df:db:18:fe:
         48:dc:56:12:0b:6a:62:aa:1f:29:75:ff:57:d7:17:4f:5d:0a:
         d2:44:15:0b:ba:b1:16:f8:b3:26:a3:42:36:2a:1f:4e:55:a5:
         f6:ce:18:3a:19:77:e1:13:52:a8:e7:06:bf:91:08:45:c0:a0:
         80:f3:85:e3:41:e0:3c:b7:5e:65:ab:b6:88:38:4b:79:72:53:
         41:e9:45:4d:94:51:04:50:7e:c9:e6:4f:d4:aa:cb:b1:ca:6b:
         20:9f:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:23 2026 by rpki-client