Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
File:                     C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft (raw, json)
Hash identifier:          RIqMASfY2FGP0tbaiWMLvaLoLOayVetslK03UwfCFuk=
Subject key identifier:   5E:AD:7D:5E:5F:1C:51:99:0B:FB:49:6E:89:41:CE:60:63:15:63:1F
Authority key identifier: C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9
Certificate issuer:       /CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9
Certificate serial:       314D20817DB42805A5ACCC7A0921E344B70FD483
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 11:49:43 +0000
Manifest this update:     Tue 02 Jun 2026 11:44:43 +0000
Manifest next update:     Wed 03 Jun 2026 14:01:43 +0000
Files and hashes:         1: C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl (hash: pm823cQem4v4183v+HU8FMAgnhFb57qKuYmwwjiCpts=)
                          2: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: DSqrZf2t+vOo0dpO9Z2Ts4Q/3PwkQ/7IIkFcOCMaS2c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl
                          rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 14:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4d:20:81:7d:b4:28:05:a5:ac:cc:7a:09:21:e3:44:b7:0f:d4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9
        Validity
            Not Before: Jun  2 11:44:43 2026 GMT
            Not After : Jun  3 14:01:43 2026 GMT
        Subject: CN=5EAD7D5E5F1C51990BFB496E8941CE606315631F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:55:df:54:21:11:83:31:08:8e:55:e7:c7:
                    1d:10:1a:cf:a9:ae:0b:cc:d6:69:0a:f0:3c:66:6c:
                    6c:0b:14:ae:ef:9f:bb:87:72:81:8a:c1:79:24:6a:
                    9a:5e:b0:6e:cf:94:fb:14:c1:3a:1d:7c:1a:0e:31:
                    34:50:76:85:b1:ad:7e:50:6b:8f:31:11:04:34:79:
                    73:32:b4:cf:0e:34:56:0d:fe:8d:0d:0f:44:cf:89:
                    f9:d8:76:cc:09:4c:ab:86:f5:60:e2:4c:fb:fb:43:
                    a6:87:9a:90:84:fb:ba:6e:00:0f:ef:5e:50:fb:88:
                    9e:f2:62:fb:c7:3b:fb:9b:9b:4e:50:ab:0e:62:af:
                    64:53:14:c9:b1:db:8c:73:84:c1:86:d7:52:0b:24:
                    27:c6:d7:56:bd:7c:a9:52:8d:6a:28:56:b6:ab:e9:
                    a5:8b:f7:b7:57:65:71:37:33:17:8b:11:2d:75:2c:
                    1f:fb:1e:80:d1:c5:e7:6e:df:08:f8:2f:ec:6c:3a:
                    1e:bb:c6:f0:66:5f:9e:0b:30:20:fc:f4:d9:5f:74:
                    56:16:bd:1f:ee:d4:6b:ff:ca:5b:ab:cd:b6:4b:ab:
                    4f:3e:0e:ef:92:a9:01:ad:c4:9b:58:de:c9:06:1d:
                    02:f5:3e:c2:3f:a7:3d:4f:fb:03:e1:c8:33:62:a3:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AD:7D:5E:5F:1C:51:99:0B:FB:49:6E:89:41:CE:60:63:15:63:1F
            X509v3 Authority Key Identifier:
                keyid:C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c9:b9:a3:06:7a:a8:6f:41:1a:33:c8:71:c1:71:46:c1:5e:
         7b:92:80:bd:68:a4:5c:fa:92:42:59:14:a0:30:dd:d1:fb:6f:
         4d:b7:71:a4:10:12:b9:d4:87:2a:87:2a:a3:bb:e6:77:1e:52:
         df:b4:c6:4f:8e:2d:79:34:29:67:1a:60:a7:4c:66:41:0d:60:
         cd:7d:5f:60:7f:df:35:b2:4f:01:3f:45:c9:5d:b9:66:13:7f:
         15:7d:37:70:78:39:be:8b:44:3b:04:03:39:70:40:f8:41:7d:
         37:c8:30:a8:c4:52:8e:99:92:f3:93:77:e0:52:9f:67:97:89:
         0b:f1:c0:f5:ce:9c:ff:22:fe:de:91:d9:08:dd:82:aa:48:7d:
         6e:fd:32:23:ae:c5:e6:f8:0d:42:68:25:be:b2:54:8b:d9:40:
         a8:22:65:c2:0e:3d:49:8c:13:65:95:83:a1:72:64:b9:b7:22:
         3e:55:03:23:f4:3e:d6:aa:43:71:79:57:a7:3e:b5:4c:64:81:
         6e:53:c0:ad:9b:dc:36:91:15:ae:12:21:c5:62:65:ae:12:b3:
         ca:a7:55:a1:44:c8:a8:66:22:72:91:4b:44:db:51:37:d0:c1:
         7f:37:64:d2:f1:80:aa:bb:27:22:a4:4c:58:21:bb:03:f2:e1:
         61:ab:57:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMU0ggX20KAWlrMx6CSHjRLcP1IMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRUUzQUZFMEIyNjVFQTMxNERCQkFCN0MwMTVDODA1
MDAwQThFOTAeFw0yNjA2MDIxMTQ0NDNaFw0yNjA2MDMxNDAxNDNaMDMxMTAvBgNV
BAMTKDVFQUQ3RDVFNUYxQzUxOTkwQkZCNDk2RTg5NDFDRTYwNjMxNTYzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwVXfVCERgzEIjlXnxx0QGs+p
rgvM1mkK8DxmbGwLFK7vn7uHcoGKwXkkappesG7PlPsUwTodfBoOMTRQdoWxrX5Q
a48xEQQ0eXMytM8ONFYN/o0ND0TPifnYdswJTKuG9WDiTPv7Q6aHmpCE+7puAA/v
XlD7iJ7yYvvHO/ubm05Qqw5ir2RTFMmx24xzhMGG11ILJCfG11a9fKlSjWooVrar
6aWL97dXZXE3MxeLES11LB/7HoDRxedu3wj4L+xsOh67xvBmX54LMCD89NlfdFYW
vR/u1Gv/ylurzbZLq08+Du+SqQGtxJtY3skGHQL1PsI/pz1P+wPhyDNio0ZzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXq19Xl8cUZkL+0luiUHOYGMVYx8wHwYDVR0j
BBgwFoAUxT7jr+CyZeoxTburfAFcgFAAqOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDYzMDU0ZjYtOGQwOS00ZDEyLWIxOWItNTAwZDZkOTIxZmMxLzAvQzUzRUUzQUZF
MEIyNjVFQTMxNERCQkFCN0MwMTVDODA1MDAwQThFOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNTNFRTNBRkUwQjI2NUVBMzE0REJCQUI3QzAxNUM4MDUwMDBB
OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx
OWItNTAwZDZkOTIxZmMxLzAvQzUzRUUzQUZFMEIyNjVFQTMxNERCQkFCN0MwMTVD
ODA1MDAwQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJPJuaMGeqhvQRozyHHBcUbBXnuSgL1opFz6
kkJZFKAw3dH7b023caQQErnUhyqHKqO75nceUt+0xk+OLXk0KWcaYKdMZkENYM19
X2B/3zWyTwE/RclduWYTfxV9N3B4Ob6LRDsEAzlwQPhBfTfIMKjEUo6ZkvOTd+BS
n2eXiQvxwPXOnP8i/t6R2QjdgqpIfW79MiOuxeb4DUJoJb6yVIvZQKgiZcIOPUmM
E2WVg6FyZLm3Ij5VAyP0PtaqQ3F5V6c+tUxkgW5TwK2b3DaRFa4SIcViZa4Ss8qn
VaFEyKhmInKRS0TbUTfQwX83ZNLxgKq7JyKkTFghuwPy4WGrVy0=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:26:05 2026 by rpki-client