Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
File:                     80DF8BB38CBC3C159969522F39C2926484A3509E.mft (raw, json)
Hash identifier:          rm1W2ljdjWJlkvPXOaHmFPp7tyQqjvxM0COZMJzNu+0=
Subject key identifier:   51:DC:8E:61:DE:AE:39:F2:CD:9A:59:F5:C4:50:A1:FE:CD:E0:8B:58
Authority key identifier: 80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E
Certificate issuer:       /CN=80DF8BB38CBC3C159969522F39C2926484A3509E
Certificate serial:       450AF0D1F4925557E33D050A5C631552E75CB5C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 17:09:57 +0000
Manifest this update:     Tue 16 Jun 2026 17:04:57 +0000
Manifest next update:     Wed 17 Jun 2026 18:35:57 +0000
Files and hashes:         1: 80DF8BB38CBC3C159969522F39C2926484A3509E.crl (hash: kc+EGJOdGvjTx68Z8Ur0VbEzkKbMle+HM0upfa2/6+Q=)
                          2: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: Fkc3ZEGjxhAmx9yiD5p0cw71FlkcW6QQyX3i9KwIKmI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl
                          rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0a:f0:d1:f4:92:55:57:e3:3d:05:0a:5c:63:15:52:e7:5c:b5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80DF8BB38CBC3C159969522F39C2926484A3509E
        Validity
            Not Before: Jun 16 17:04:57 2026 GMT
            Not After : Jun 17 18:35:57 2026 GMT
        Subject: CN=51DC8E61DEAE39F2CD9A59F5C450A1FECDE08B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:2e:47:a5:f9:57:43:e9:d4:07:a5:3e:13:
                    c9:9a:72:7a:53:42:f7:4d:c1:01:09:30:5b:68:26:
                    0f:35:0b:46:65:6a:99:8b:48:86:37:f4:ae:4c:d6:
                    e0:e1:5f:1e:46:25:9b:5b:18:93:6c:c8:4d:61:a7:
                    3f:6a:dc:61:90:38:29:f5:00:7b:35:6d:54:6a:2a:
                    76:98:18:68:ea:bb:2f:ee:a0:16:80:73:38:39:76:
                    21:1b:a6:eb:ab:d5:7d:06:d5:ae:40:48:c9:07:49:
                    2e:62:21:ce:62:05:17:62:9d:04:d5:e2:82:97:1e:
                    de:8c:bb:b2:b7:04:e1:65:90:63:1b:ec:71:95:2f:
                    38:3f:57:31:ae:a6:a6:1d:3f:71:db:db:9a:15:1c:
                    7c:bd:56:df:36:4f:29:9c:8c:ff:64:a1:37:d9:74:
                    14:35:2c:c7:b2:2a:f2:aa:34:c0:8c:97:84:79:09:
                    ec:23:b2:98:87:f8:7c:5b:5c:44:c8:73:c5:fe:49:
                    9d:17:67:da:f3:0b:c9:b3:41:b4:ad:1e:c3:45:b0:
                    8d:2a:92:d7:16:31:7c:1d:b5:8f:f0:29:5e:71:6c:
                    47:4f:ce:4f:6d:46:88:87:c4:70:f8:da:9d:60:3e:
                    22:96:45:3e:30:07:17:12:57:ec:bb:12:07:05:81:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DC:8E:61:DE:AE:39:F2:CD:9A:59:F5:C4:50:A1:FE:CD:E0:8B:58
            X509v3 Authority Key Identifier:
                keyid:80:DF:8B:B3:8C:BC:3C:15:99:69:52:2F:39:C2:92:64:84:A3:50:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/80DF8BB38CBC3C159969522F39C2926484A3509E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/80DF8BB38CBC3C159969522F39C2926484A3509E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c7:2f:d2:39:1f:1f:36:98:e8:a8:aa:ce:32:54:76:d3:25:
         0a:cb:16:b2:47:aa:ba:a4:9d:8a:e2:ca:25:4f:57:fc:ba:0c:
         0c:3e:8e:d7:5f:ae:05:c6:cf:6f:d6:69:e8:48:68:bf:1b:c8:
         db:c3:8e:e8:ca:10:ee:f0:3e:d1:ba:bd:45:ef:70:6a:7a:9c:
         21:32:9f:8c:af:52:fb:3b:e1:96:29:1e:dd:cc:44:5a:7e:4f:
         b7:bf:c0:6e:d6:72:75:80:02:dd:14:0f:1a:f9:4f:ba:4d:e3:
         a6:0c:fb:a9:14:cd:32:bd:79:67:c6:86:f1:db:d0:e6:c0:25:
         c7:2e:13:8e:79:a6:da:be:53:17:34:3d:a4:26:9c:59:5e:49:
         e2:37:a7:97:ff:53:c9:ad:06:a9:04:4d:2c:43:a5:92:8e:dd:
         09:00:95:a9:5f:75:f2:5d:69:2e:39:1d:08:ee:cd:33:ca:90:
         79:d5:3f:21:7b:3e:2f:20:9c:d4:c1:57:a6:e9:e6:6b:72:1a:
         e4:81:09:73:51:93:fd:ce:3a:2b:97:15:d0:98:3b:64:9b:df:
         f5:83:92:15:c0:76:4a:b5:12:fd:f5:65:fd:74:8c:09:6d:60:
         ee:ca:45:2a:26:22:6a:bc:fe:21:58:61:d0:d0:0a:b0:30:e7:
         bf:09:64:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURQrw0fSSVVfjPQUKXGMVUudctcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBERjhCQjM4Q0JDM0MxNTk5Njk1MjJGMzlDMjkyNjQ4
NEEzNTA5RTAeFw0yNjA2MTYxNzA0NTdaFw0yNjA2MTcxODM1NTdaMDMxMTAvBgNV
BAMTKDUxREM4RTYxREVBRTM5RjJDRDlBNTlGNUM0NTBBMUZFQ0RFMDhCNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PC5HpflXQ+nUB6U+E8macnpT
QvdNwQEJMFtoJg81C0ZlapmLSIY39K5M1uDhXx5GJZtbGJNsyE1hpz9q3GGQOCn1
AHs1bVRqKnaYGGjquy/uoBaAczg5diEbpuur1X0G1a5ASMkHSS5iIc5iBRdinQTV
4oKXHt6Mu7K3BOFlkGMb7HGVLzg/VzGupqYdP3Hb25oVHHy9Vt82TymcjP9koTfZ
dBQ1LMeyKvKqNMCMl4R5CewjspiH+HxbXETIc8X+SZ0XZ9rzC8mzQbStHsNFsI0q
ktcWMXwdtY/wKV5xbEdPzk9tRoiHxHD42p1gPiKWRT4wBxcSV+y7EgcFgR5hAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUdyOYd6uOfLNmln1xFCh/s3gi1gwHwYDVR0j
BBgwFoAUgN+Ls4y8PBWZaVIvOcKSZISjUJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTk5MmJmMjYtYzhlNi00YTg2LTliMzMtZWEzYTJhZjU1N2YwLzAvODBERjhCQjM4
Q0JDM0MxNTk5Njk1MjJGMzlDMjkyNjQ4NEEzNTA5RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC84MERGOEJCMzhDQkMzQzE1OTk2OTUyMkYzOUMyOTI2NDg0QTM1
MDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5MmJmMjYtYzhlNi00YTg2LTli
MzMtZWEzYTJhZjU1N2YwLzAvODBERjhCQjM4Q0JDM0MxNTk5Njk1MjJGMzlDMjky
NjQ4NEEzNTA5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHDHL9I5Hx82mOioqs4yVHbTJQrLFrJHqrqk
nYriyiVPV/y6DAw+jtdfrgXGz2/WaehIaL8byNvDjujKEO7wPtG6vUXvcGp6nCEy
n4yvUvs74ZYpHt3MRFp+T7e/wG7WcnWAAt0UDxr5T7pN46YM+6kUzTK9eWfGhvHb
0ObAJccuE455ptq+Uxc0PaQmnFleSeI3p5f/U8mtBqkETSxDpZKO3QkAlalfdfJd
aS45HQjuzTPKkHnVPyF7Pi8gnNTBV6bp5mtyGuSBCXNRk/3OOiuXFdCYO2Sb3/WD
khXAdkq1Ev31Zf10jAltYO7KRSomImq8/iFYYdDQCrAw578JZAw=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:26:15 2026 by rpki-client