Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
File:                     66D0CBFDEF8E18BB796E18551F069110283A9877.mft (raw, json)
Hash identifier:          pWCUU5bc6GG14CtJVSK1uMROy40Ez434rkMw82kPX8c=
Subject key identifier:   C0:D5:9F:4C:F9:7D:01:EC:16:52:E7:2D:77:62:F3:CB:88:F9:14:97
Authority key identifier: 66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77
Certificate issuer:       /CN=66D0CBFDEF8E18BB796E18551F069110283A9877
Certificate serial:       2D98F75C2E0B5881033AEC5D1A513D82AACEF83B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
Manifest number:          38
Signing time:             Sat 13 Jun 2026 06:31:54 +0000
Manifest this update:     Sat 13 Jun 2026 06:26:54 +0000
Manifest next update:     Sun 14 Jun 2026 08:28:54 +0000
Files and hashes:         1: 66D0CBFDEF8E18BB796E18551F069110283A9877.crl (hash: ZhzqsBc67x6Zf2/VbwuSQKCXq+WnRqYdT4SMg2GqeJM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl
                          rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 08:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:98:f7:5c:2e:0b:58:81:03:3a:ec:5d:1a:51:3d:82:aa:ce:f8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D0CBFDEF8E18BB796E18551F069110283A9877
        Validity
            Not Before: Jun 13 06:26:54 2026 GMT
            Not After : Jun 14 08:28:54 2026 GMT
        Subject: CN=C0D59F4CF97D01EC1652E72D7762F3CB88F91497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:09:fd:db:ae:7f:e6:29:81:91:0e:a0:02:
                    c7:39:8b:81:d0:f5:a6:d2:5d:db:38:b2:3f:15:e3:
                    47:ab:69:30:4d:dd:88:6c:62:6f:26:ea:86:6e:49:
                    d7:cf:eb:c3:3a:ff:15:44:46:c5:ef:14:ae:f6:af:
                    98:1c:f3:c2:c1:67:48:21:3b:28:e3:d4:6d:e4:0a:
                    65:e8:22:4d:9e:f9:f0:54:4a:c3:e2:de:23:61:f7:
                    ea:be:c9:db:c2:ee:65:b7:c2:11:e3:3f:62:46:11:
                    b5:eb:76:09:f3:0a:c0:5f:ea:28:1d:22:68:af:d6:
                    0b:85:bb:7a:d4:d3:6d:15:7e:92:e3:35:3b:c2:fe:
                    19:74:db:4c:76:a1:da:89:ed:3a:a9:76:93:02:c5:
                    a2:03:88:69:8a:fe:b4:68:82:77:c3:8f:12:d9:0b:
                    ea:24:4d:5b:9d:1e:1b:cc:81:4c:19:cb:78:c4:89:
                    ea:dc:7a:c4:24:e2:3c:97:5e:d9:86:72:80:6f:6f:
                    53:b3:10:34:bc:c1:47:98:d1:73:e5:00:d6:1c:f1:
                    38:12:42:2b:2a:1e:3c:67:e9:56:8d:96:27:7e:50:
                    19:10:7b:e0:78:34:98:c6:04:1f:26:16:5e:c4:dc:
                    b7:c0:4e:7f:b7:ee:30:b3:da:d6:ff:70:44:7a:37:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D5:9F:4C:F9:7D:01:EC:16:52:E7:2D:77:62:F3:CB:88:F9:14:97
            X509v3 Authority Key Identifier:
                keyid:66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:5f:05:18:72:bf:8e:76:14:f9:56:85:05:80:67:30:79:
         f4:75:ee:ce:4c:c3:e8:e8:00:01:30:01:90:e6:91:c2:cb:02:
         e2:96:3e:20:af:ca:9d:25:37:a6:81:ac:ad:5f:38:42:b4:d0:
         52:7f:29:7f:de:8c:a0:ec:b7:2b:92:83:31:37:a4:9b:b9:7d:
         35:f9:30:8b:ee:e6:55:f9:d1:79:54:4d:65:8c:3f:7e:67:31:
         4f:fc:f5:bd:87:9d:fb:de:d9:4e:2b:6f:7c:65:2c:48:cd:ae:
         77:bf:18:e1:de:32:58:d6:a6:e8:e5:7e:67:45:dd:06:71:40:
         8f:7d:a9:02:0c:a2:37:2b:f0:07:fb:78:0a:37:8e:44:49:a0:
         9e:f5:96:63:7a:a9:26:cc:16:88:8e:d1:60:ba:cd:11:39:87:
         16:da:3e:8d:2b:cf:77:1e:f4:83:aa:45:25:51:8b:6b:05:9d:
         4a:3b:8c:49:10:ee:f8:00:96:56:dc:6d:00:d9:eb:2e:a4:6e:
         73:69:57:77:0a:8b:27:d6:4a:18:4e:d0:34:bd:4e:b9:e6:1b:
         57:b9:4d:dd:b8:63:7a:22:75:01:f2:0c:09:cb:d9:dc:98:56:
         0f:3e:0c:d7:dd:d4:6a:fc:7a:ad:13:d0:11:b1:f1:a8:b9:5e:
         34:68:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:26 2026 by rpki-client