Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
File:                     C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft (raw, json)
Hash identifier:          hfYtkcuU9ApbWAnK5Av9fhNTT2OVAQVSM/lMxDvpwWI=
Subject key identifier:   1B:D2:E1:68:6E:EB:99:23:02:24:36:C8:1D:95:59:BB:BD:56:C6:34
Authority key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28
Certificate issuer:       /CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28
Certificate serial:       686BCA259404250D6C574FE30CE508F539BDF7E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
Manifest number:          2C
Signing time:             Tue 02 Jun 2026 23:39:27 +0000
Manifest this update:     Tue 02 Jun 2026 23:34:27 +0000
Manifest next update:     Thu 04 Jun 2026 02:45:27 +0000
Files and hashes:         1: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: C54NnNs4f4gmLL9qO83WVBxOgZKL0rmUD589emvzz4I=)
                          2: C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl (hash: hYZ7WM2Tu1UfIu9FqBOC8ccyvTpCNhoXsuyHqBmgR/c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl
                          rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 02:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6b:ca:25:94:04:25:0d:6c:57:4f:e3:0c:e5:08:f5:39:bd:f7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28
        Validity
            Not Before: Jun  2 23:34:27 2026 GMT
            Not After : Jun  4 02:45:27 2026 GMT
        Subject: CN=1BD2E1686EEB9923022436C81D9559BBBD56C634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:d4:51:96:e2:32:a2:e5:39:33:47:7b:bc:
                    03:94:ba:c5:01:04:5c:3b:51:57:91:f9:6f:be:c4:
                    d0:ce:12:29:ab:a0:b3:68:a5:33:ef:ed:84:43:23:
                    00:4c:55:84:24:fe:e1:4c:1a:cb:1f:e4:20:f4:fe:
                    7f:d9:b9:ac:1b:9b:f3:4a:a5:b9:df:8c:d0:06:83:
                    c7:74:e4:c9:ca:70:98:3b:2f:c4:26:4b:4e:a8:90:
                    de:c0:a2:62:00:5a:19:0d:62:9b:b8:49:4c:ef:9a:
                    cb:cc:4b:e8:ca:7a:b1:d2:14:16:66:48:2a:2b:88:
                    e9:c5:99:f2:eb:10:05:0c:c6:71:dc:ef:a0:3a:06:
                    24:fc:4d:d8:e3:98:9c:47:0b:51:4e:44:b6:5a:06:
                    4f:a3:8f:fb:ac:70:75:c4:e6:cf:39:5f:38:1a:39:
                    63:20:54:8c:6e:e4:29:ec:e5:a5:9c:97:f4:cf:4f:
                    72:d0:5b:c8:c4:6c:a9:0a:92:ab:ba:5a:22:ac:1f:
                    5d:69:4e:95:f3:f2:78:44:37:8d:53:4e:45:b7:b6:
                    c0:19:7d:34:32:ce:54:0b:19:90:71:f6:e3:8f:da:
                    a5:66:5f:52:de:69:39:92:00:92:9b:83:86:da:80:
                    45:c8:31:93:db:9b:0c:fa:22:b4:64:f1:7a:a9:2d:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D2:E1:68:6E:EB:99:23:02:24:36:C8:1D:95:59:BB:BD:56:C6:34
            X509v3 Authority Key Identifier:
                keyid:C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:95:30:ef:e0:12:8e:3f:c4:84:c2:fb:aa:32:0b:b3:a7:02:
         92:eb:48:03:e2:41:05:eb:e0:ea:93:6d:33:70:69:d9:2b:77:
         8d:18:7a:d9:2a:47:89:83:8d:4d:ce:03:e1:4a:5e:dd:e2:da:
         ac:2b:6a:98:59:55:5d:82:c4:34:91:84:97:85:00:5c:18:cc:
         4d:4b:fa:12:af:3f:d0:85:58:9d:e3:8e:dd:ec:d7:c5:cc:ec:
         03:b3:14:ad:40:08:d1:0c:79:b0:54:20:14:87:90:c0:81:ec:
         86:28:c2:82:36:16:7a:ad:21:16:0c:06:32:29:b1:9f:6e:19:
         56:f0:4e:7a:ea:78:3c:3a:4e:46:fa:5f:27:72:68:9b:6b:5d:
         62:11:67:54:f5:53:fa:f9:50:13:2f:26:f6:7a:af:7c:9d:54:
         31:04:3b:01:f9:a3:bb:7a:7e:57:e6:ac:3f:c1:b2:98:1a:b9:
         99:ec:b0:35:82:18:8b:c0:07:f1:bb:ba:e8:31:4d:f1:8d:e8:
         b2:d5:0a:79:11:53:12:1b:d0:8c:ff:4d:06:f5:69:a5:4b:a5:
         63:87:8d:2e:be:49:f3:4c:20:fb:8c:a0:e3:37:e3:8c:43:70:
         84:9b:6b:75:94:62:9c:70:5f:dc:5c:ab:24:a9:68:52:83:f4:
         df:84:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:50:27 2026 by rpki-client