Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
File:                     78E0160248ABDDA316B054457CAC9C2878172E3F.mft (raw, json)
Hash identifier:          T2GHWkyB34z2NkHHH7tuGsWtHVAL+UgvdyNva3xV218=
Subject key identifier:   00:FB:37:18:CC:5A:9B:70:32:E2:72:BC:5C:77:C1:D6:02:E8:6C:99
Authority key identifier: 78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F
Certificate issuer:       /CN=78E0160248ABDDA316B054457CAC9C2878172E3F
Certificate serial:       12C7A7DA5B94BA9408458A17C32E422F3C17B32A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 20:04:18 +0000
Manifest this update:     Tue 02 Jun 2026 19:59:18 +0000
Manifest next update:     Wed 03 Jun 2026 22:14:18 +0000
Files and hashes:         1: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: VA9x1JUvw0UogZupkAioG4JuD1sEwt/f57IrckxZ3dI=)
                          2: 78E0160248ABDDA316B054457CAC9C2878172E3F.crl (hash: 1LcoJ+Fw+X75iIjxwd/CeI+pSGjsk9B6tdK06nkXglc=)
                          3: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: 2+XchGapSoCutP6h9YZdHEQH9u3BfkhAjpO15GhIZ5w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl
                          rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 22:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c7:a7:da:5b:94:ba:94:08:45:8a:17:c3:2e:42:2f:3c:17:b3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E0160248ABDDA316B054457CAC9C2878172E3F
        Validity
            Not Before: Jun  2 19:59:18 2026 GMT
            Not After : Jun  3 22:14:18 2026 GMT
        Subject: CN=00FB3718CC5A9B7032E272BC5C77C1D602E86C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:de:85:48:20:f5:fb:82:80:5b:f6:7c:f9:
                    0d:27:8c:17:a7:ea:ef:76:2e:83:e0:41:cb:ea:f3:
                    32:0d:66:b7:7b:fe:79:4e:42:a7:67:b7:73:8a:0a:
                    d3:2a:6e:a3:12:3a:89:e6:66:7b:d0:88:81:b3:79:
                    e9:c8:c1:2f:a7:3f:59:6e:b4:67:77:bd:f9:3a:95:
                    9d:6c:e0:f8:ed:b9:52:07:76:6e:99:7e:8d:78:2a:
                    9e:ea:45:64:35:40:55:93:ad:59:f7:30:a3:08:7c:
                    cd:98:a6:3d:37:b8:51:0c:6f:69:61:72:97:b0:d0:
                    63:b7:d2:f6:5b:58:c4:10:64:b4:dc:5c:82:5a:79:
                    d2:5a:9b:4f:ce:11:06:de:53:a9:7e:6a:c7:bc:75:
                    22:bf:a4:04:4e:0b:a6:b5:53:2c:11:f1:16:5c:3e:
                    2d:97:18:fa:cd:ce:fe:42:35:74:a4:d8:fe:a9:d8:
                    e8:87:b7:9c:5a:cb:eb:d1:45:77:0d:3d:14:f9:61:
                    6f:ec:35:d3:8b:c0:a3:fc:48:1d:58:3b:9e:e3:7d:
                    f8:63:f9:8b:5b:e3:77:52:8c:e3:f0:87:83:dd:79:
                    92:77:88:e8:fd:a9:02:b2:66:16:c5:8f:c8:2c:06:
                    b3:00:2e:c3:1b:f5:e5:39:10:56:60:be:6c:71:82:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FB:37:18:CC:5A:9B:70:32:E2:72:BC:5C:77:C1:D6:02:E8:6C:99
            X509v3 Authority Key Identifier:
                keyid:78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:cc:a5:92:99:a8:1c:a1:3d:ef:d3:54:f6:b1:92:67:03:
         51:99:32:f8:22:2a:3a:3d:46:df:bc:32:f5:f8:5f:b0:61:69:
         b9:d7:51:07:d4:c5:6a:b0:36:e7:30:c1:6e:db:98:82:05:41:
         51:76:47:f6:67:cf:3f:0a:fd:2d:1c:bc:5b:2a:ec:d2:47:1c:
         8b:a1:cc:92:83:3a:71:df:e5:70:e7:9c:24:7b:39:7f:d5:95:
         46:b3:d7:16:d7:86:0f:d5:5f:c3:33:59:12:92:01:60:6c:f8:
         de:9b:5c:9e:8c:b5:de:a1:ff:99:79:a3:f0:49:30:99:60:20:
         4f:fd:1f:a9:be:cd:21:b9:aa:e3:b3:9c:b9:8d:18:d6:09:4c:
         6b:36:0e:bb:4b:ce:41:f9:bc:30:09:49:b3:94:c3:f1:d4:4c:
         87:fb:cf:8b:35:54:77:25:b5:bd:15:f5:9e:12:f9:e6:c7:6f:
         ab:cb:dc:6c:c3:57:02:16:88:48:67:ba:54:62:21:88:56:b8:
         1a:33:1e:fe:ba:9a:6a:4d:01:e5:18:1c:2c:2c:1b:20:b6:c9:
         74:a5:d3:53:bf:d5:cc:d1:1a:17:54:35:87:64:cc:1e:be:ed:
         6a:a2:9a:52:15:85:e2:fd:a8:43:13:fd:bf:92:74:a2:8b:95:
         d0:82:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:00:38 2026 by rpki-client