Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
File:                     153D132907038920D30874D8E1EA33161B940EA6.mft (raw, json)
Hash identifier:          slBLteLWaL0HpUtaDf2KErIttPpr1Sj8wGGL5kERWQM=
Subject key identifier:   E0:75:64:F0:7A:F7:0E:97:5B:38:CD:43:F0:A0:5F:45:3D:F1:DA:B7
Authority key identifier: 15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6
Certificate issuer:       /CN=153D132907038920D30874D8E1EA33161B940EA6
Certificate serial:       24C50DF4483160A64B42CBC176B72D98C3A40A58
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 07:12:44 +0000
Manifest this update:     Sat 13 Jun 2026 07:07:44 +0000
Manifest next update:     Sun 14 Jun 2026 09:11:44 +0000
Files and hashes:         1: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: pulqmJflTAxdM7jOySuU657i95+QOMozLp6rdyTPI6U=)
                          2: 153D132907038920D30874D8E1EA33161B940EA6.crl (hash: xppDn0bxRM2RMYSyjo6/4dxW0agGhSQn10zNvYzPHPI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl
                          rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 09:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c5:0d:f4:48:31:60:a6:4b:42:cb:c1:76:b7:2d:98:c3:a4:0a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153D132907038920D30874D8E1EA33161B940EA6
        Validity
            Not Before: Jun 13 07:07:44 2026 GMT
            Not After : Jun 14 09:11:44 2026 GMT
        Subject: CN=E07564F07AF70E975B38CD43F0A05F453DF1DAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:7b:4c:23:cd:69:29:c8:ff:a8:69:bd:db:
                    60:2c:d1:fd:7c:da:44:9f:bc:52:08:58:28:25:46:
                    d0:39:9e:a5:98:a8:d5:a2:59:aa:61:21:46:23:7f:
                    de:a9:8d:d2:f0:de:97:1c:f4:59:3a:8f:39:ba:fe:
                    12:49:35:ac:6f:b5:3e:43:d7:ee:28:77:50:59:fe:
                    21:e9:e9:8c:23:70:72:84:75:1c:39:09:e2:b9:35:
                    1a:51:53:81:34:11:82:df:a5:36:67:7a:ef:30:e9:
                    bb:55:6c:7c:3f:c3:fe:26:a0:97:b6:c9:38:22:c5:
                    bc:63:fc:bf:1b:4f:45:e6:58:fb:ac:1e:c8:be:15:
                    1b:be:61:e0:49:ae:ce:58:dd:a0:40:7e:8c:89:c6:
                    e0:87:b0:78:dc:61:bb:30:a0:5b:53:b0:7a:d9:19:
                    1c:86:f6:12:d2:fe:51:31:1c:93:30:e9:51:9c:80:
                    fc:86:57:b2:3b:50:50:28:b5:84:88:20:10:eb:46:
                    06:41:cf:4e:ff:62:58:f7:da:22:be:10:c2:2c:a2:
                    35:2e:1b:bb:25:37:d8:83:46:99:8a:95:ac:2b:47:
                    0e:ea:41:ba:14:ef:94:94:ee:ef:03:d5:04:08:bf:
                    4d:be:ad:07:03:5a:a8:09:37:16:0b:cc:b8:f8:f1:
                    2b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:75:64:F0:7A:F7:0E:97:5B:38:CD:43:F0:A0:5F:45:3D:F1:DA:B7
            X509v3 Authority Key Identifier:
                keyid:15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:25:19:63:ee:04:71:40:a8:dc:da:ae:2c:f5:84:50:f2:a3:
         99:ab:a7:4f:53:3e:55:53:e1:d6:73:4c:9f:85:3d:d0:7a:a3:
         5a:89:27:a5:3d:b4:09:7a:fe:00:84:45:57:10:b8:af:8c:ac:
         75:e7:d3:48:af:cd:93:35:19:1e:39:07:1b:ef:9a:f0:90:7a:
         21:4a:fc:e9:d7:9f:55:4c:e8:13:ce:6a:8a:43:88:c0:7e:6a:
         f9:27:74:6c:52:df:7d:19:39:aa:68:37:5b:54:85:cd:1f:b4:
         e0:96:1f:24:7d:71:e8:34:89:87:ff:6b:85:1a:4c:95:56:36:
         90:b9:bc:36:09:0f:b9:fb:4f:ea:71:3c:d6:6a:05:03:ac:a6:
         0f:19:9f:04:f1:ee:58:36:a4:80:db:f9:2f:eb:42:0e:df:f2:
         f5:1e:18:d1:86:a7:f5:83:81:e6:d6:77:60:8d:ac:56:5a:6e:
         34:7d:a5:66:0d:79:d9:0b:68:fa:35:87:73:a6:26:3e:0e:76:
         d8:c8:d8:c6:de:f4:20:b1:7b:e9:fa:65:40:d1:0d:7c:9c:27:
         d6:fb:a4:5c:77:15:f6:d4:ff:c9:52:4c:dd:cf:09:a8:e8:60:
         2b:15:61:d7:92:59:9d:27:a2:ee:bd:f3:b9:2f:13:10:e5:ad:
         2e:7d:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:06:11 2026 by rpki-client