Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft
File:                     38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft (raw, json)
Hash identifier:          Ady8wWqoAgeYUQfw3hOYjx7EXXASCIs6NUuUQok61yE=
Subject key identifier:   6A:BC:2F:A1:3F:38:C3:B6:9F:A2:35:0E:99:0C:61:9A:E0:86:B7:81
Authority key identifier: 38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10
Certificate issuer:       /CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110
Certificate serial:       0C73EB1B79EFD2E74A414FF0CFC35ACFC26BFF27
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 08:54:37 +0000
Manifest this update:     Sat 13 Jun 2026 08:49:37 +0000
Manifest next update:     Sun 14 Jun 2026 09:32:37 +0000
Files and hashes:         1: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl (hash: kQ/2yvHt7CQ622c/Vs0eRgX3iQvS/MbezdlNt5UH2Xk=)
                          2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: oNAyYs1M4vvZUL8ZRq7sx5Uf/aJwxuSkl8dJpKgZM5c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl
                          rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 09:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:73:eb:1b:79:ef:d2:e7:4a:41:4f:f0:cf:c3:5a:cf:c2:6b:ff:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110
        Validity
            Not Before: Jun 13 08:49:37 2026 GMT
            Not After : Jun 14 09:32:37 2026 GMT
        Subject: CN=6ABC2FA13F38C3B69FA2350E990C619AE086B781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:df:c7:60:64:68:cd:f9:a8:04:5f:8d:b8:
                    90:32:a8:3c:d0:f5:31:42:fe:12:e3:31:92:01:73:
                    69:ac:e1:7c:b2:2c:03:03:2b:e1:7e:da:ad:a3:dd:
                    3e:d2:69:84:53:97:d9:79:9b:03:3f:b6:23:f4:f8:
                    d5:c8:0b:7f:7c:91:57:08:83:eb:da:18:08:ae:d6:
                    54:7b:20:58:a0:27:1b:64:0f:b4:8f:59:40:ac:f9:
                    a0:a3:20:b2:af:0a:a2:bf:e6:f4:9c:87:a4:7d:1d:
                    76:b1:32:0a:17:8a:fb:98:54:24:83:7c:09:36:48:
                    36:0a:b6:38:7f:b9:03:55:88:67:93:eb:f5:cf:ba:
                    c0:c1:2a:9f:b4:9e:d0:a5:45:67:8e:5d:fc:ed:21:
                    4d:c2:48:bf:7c:8a:6d:d3:46:81:0e:9f:b9:88:06:
                    0b:28:1c:02:83:c0:91:7f:7a:1f:e6:e2:8e:7d:00:
                    69:23:95:b9:c5:a9:0a:5e:b9:39:b7:57:16:94:d2:
                    f7:60:c6:e1:05:38:34:db:5f:04:21:6f:d1:bb:77:
                    12:75:08:4a:cb:af:b7:6c:36:13:53:40:ae:fb:60:
                    47:21:59:26:ed:26:cb:10:4c:ef:84:61:93:94:ef:
                    0b:42:54:a6:9e:4a:f6:ac:c5:50:5f:a1:6d:c6:f7:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BC:2F:A1:3F:38:C3:B6:9F:A2:35:0E:99:0C:61:9A:E0:86:B7:81
            X509v3 Authority Key Identifier:
                keyid:38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9e:57:75:79:02:3d:e4:0c:33:e8:71:95:68:c1:75:d4:21:
         07:50:94:d3:35:a5:c8:e0:a7:41:2f:60:4c:6f:e8:54:71:34:
         a3:7c:7f:c9:2a:cc:82:dd:e6:4b:f0:53:cc:82:49:ca:a9:6a:
         5f:3c:a4:5b:98:20:08:f3:f2:7d:82:00:67:29:e0:89:2d:9f:
         e4:a6:23:44:e3:71:1c:55:8d:e6:0c:17:bd:9c:20:5e:e8:26:
         34:a2:df:b5:f0:48:6a:5c:ac:61:91:7d:ad:48:75:4e:8f:99:
         c2:d3:a2:63:a0:10:3e:2b:ac:1c:93:82:45:28:57:2e:46:5a:
         48:b9:9c:6d:a5:a2:07:3d:aa:74:71:78:03:9b:8f:1f:2e:10:
         3a:ec:fa:b7:80:83:68:9c:07:f7:61:a9:bb:9b:e4:c2:1c:21:
         ae:4a:4c:e0:54:47:d3:63:72:07:f8:b4:ec:ae:d4:e1:e7:a6:
         62:d0:59:f1:ad:8d:6e:d0:a8:f0:ab:a6:ae:f3:93:4a:6f:5c:
         55:f4:9e:42:dc:03:67:7d:16:04:68:af:24:db:dd:80:e1:1b:
         e0:bd:5e:bd:34:f0:8a:10:9f:93:61:81:57:df:41:b6:d5:42:
         0b:3d:6f:70:f5:b4:e8:3e:6a:d1:d6:d6:81:7e:f6:84:14:5d:
         9e:66:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:41:39 2026 by rpki-client