Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
File:                     7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json)
Hash identifier:          TkjtAMbYWWaoQGbcIGGrGJod0UEpdiM3FN1LTZSDe0g=
Subject key identifier:   F3:94:D3:DF:57:51:A3:23:C3:9A:D7:7F:89:F6:D1:E1:C0:82:FA:BC
Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
Certificate issuer:       /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Certificate serial:       41ADB13DB0F0565A90626EAA2ADF2AFA25175722
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 11:54:00 +0000
Manifest this update:     Sat 13 Jun 2026 11:49:00 +0000
Manifest next update:     Sun 14 Jun 2026 13:20:00 +0000
Files and hashes:         1: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: xnBrIkQ0Pw/a/mVwborJqPycwL+BUcCir2RJA7bMf9I=)
                          2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
                          rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ad:b1:3d:b0:f0:56:5a:90:62:6e:aa:2a:df:2a:fa:25:17:57:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
        Validity
            Not Before: Jun 13 11:49:00 2026 GMT
            Not After : Jun 14 13:20:00 2026 GMT
        Subject: CN=F394D3DF5751A323C39AD77F89F6D1E1C082FABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:e0:ea:58:0b:9b:6e:f6:3f:42:54:04:f9:
                    86:81:a8:59:1a:ac:96:d5:7f:fa:d6:0a:69:92:e0:
                    96:c2:c5:d7:a1:20:d8:2e:c6:ee:d0:93:8b:7c:da:
                    39:96:07:6e:41:1f:ed:4d:66:6c:e2:e5:b0:bc:73:
                    bb:5e:e0:4a:43:e0:22:dd:9c:3f:bf:76:10:f7:2c:
                    44:55:e7:b9:55:8d:4a:ce:51:36:bb:40:ab:e1:f6:
                    7d:70:aa:27:3d:58:12:54:1e:2e:ea:81:d4:08:c3:
                    6f:60:22:01:f9:e3:ea:27:f9:b5:2c:04:8c:c8:bb:
                    30:d2:41:4d:a3:5f:5b:0d:8e:3c:e2:cd:82:14:74:
                    3a:0a:d4:04:84:bb:0b:1b:2d:09:8a:21:15:28:62:
                    3e:5f:a7:5f:e4:6c:21:00:a9:c1:c6:e5:12:93:c8:
                    62:26:7a:42:9c:02:b9:90:f5:f5:b9:12:2a:b3:4a:
                    6c:13:e8:23:5c:d5:0c:77:75:a5:a5:ad:dc:47:b0:
                    c2:11:cf:ee:c6:e4:c3:f4:e5:fd:ca:12:d4:eb:3a:
                    2a:56:9e:03:1c:5c:36:2d:3c:f7:de:8f:d4:4b:56:
                    61:d2:6c:ca:54:c3:75:25:10:f6:0a:29:7f:93:07:
                    19:30:57:70:48:1b:8e:7f:3b:ac:d7:7d:c5:97:a6:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:94:D3:DF:57:51:A3:23:C3:9A:D7:7F:89:F6:D1:E1:C0:82:FA:BC
            X509v3 Authority Key Identifier:
                keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:32:ce:b2:d7:ca:9f:e3:a4:b4:96:58:1d:f7:1e:be:bb:4c:
         4c:cb:69:6e:fe:6c:fe:d4:a6:0d:48:00:35:18:8f:73:4d:1b:
         8c:35:e3:eb:7c:49:6b:05:ab:b6:62:0b:dd:09:73:b4:33:b3:
         62:e4:8a:8c:1d:ea:78:0b:7c:a5:fd:a8:bd:35:4a:42:5a:85:
         34:e1:10:30:01:48:f0:68:5f:f1:52:f6:c0:77:e1:ff:34:7d:
         64:b5:be:52:39:cc:16:45:81:90:0a:c3:72:5c:77:13:d5:6c:
         c7:c5:fd:39:af:0b:87:b2:7a:e7:fd:ae:a8:8a:ea:26:10:dd:
         c7:53:f0:3c:5e:b8:83:69:a1:47:cd:47:ae:af:2f:f0:02:08:
         05:fe:09:31:f2:b8:d4:da:88:5e:fd:c5:51:39:8c:a0:88:79:
         db:9f:e3:4f:04:46:90:c5:17:02:8a:e1:1b:0f:f6:96:e2:e5:
         ea:55:bf:fd:06:26:53:49:32:6d:41:23:d0:91:56:e5:df:53:
         e1:11:0a:d6:04:a4:29:3f:73:5f:9d:89:be:be:62:3e:52:6b:
         70:ca:dc:8b:ee:53:f1:fa:12:25:6c:3b:c5:52:58:03:20:67:
         59:7c:18:99:5a:dd:a8:e1:6b:b8:f0:34:55:32:dc:2c:e8:68:
         81:cb:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:52:06 2026 by rpki-client