Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
File:                     884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft (raw, json)
Hash identifier:          LgSXQpqaR9nNbt41spu3IQqerj/GAintXTNNyCPSsd0=
Subject key identifier:   C3:D2:96:18:68:9C:82:19:8D:AB:91:63:60:DA:4C:B5:9D:CE:26:DB
Authority key identifier: 88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97
Certificate issuer:       /CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97
Certificate serial:       58D08632D85E6FCC6CBC06AFCBB264CAB9F8647B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 00:50:47 +0000
Manifest this update:     Wed 03 Jun 2026 00:45:47 +0000
Manifest next update:     Thu 04 Jun 2026 02:50:47 +0000
Files and hashes:         1: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl (hash: +bYkY3aXkJUHKihUpX+pxIeNGN4IFbtlP//ME5D6AWY=)
                          2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: 81p6B3Tk5Za1NJUs2uCoetypfDjnwptAX9451IsBrBE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl
                          rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d0:86:32:d8:5e:6f:cc:6c:bc:06:af:cb:b2:64:ca:b9:f8:64:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97
        Validity
            Not Before: Jun  3 00:45:47 2026 GMT
            Not After : Jun  4 02:50:47 2026 GMT
        Subject: CN=C3D29618689C82198DAB916360DA4CB59DCE26DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:e7:3c:a7:8e:77:05:c1:e6:08:cd:78:d7:
                    ff:dc:74:98:c4:ff:1e:10:5a:38:21:f8:55:26:af:
                    70:5e:8a:2e:66:3e:40:1a:9a:11:c1:fb:d9:5d:80:
                    f7:bd:a7:e3:35:7e:9f:e4:50:f9:7e:22:00:98:38:
                    54:d0:10:30:01:00:ed:50:27:29:63:d8:fb:f7:af:
                    c6:d5:9d:05:73:f5:76:95:69:44:a9:a4:68:17:f2:
                    e4:8f:af:49:f1:29:a6:23:7f:97:6b:fb:ae:3d:09:
                    22:8f:90:ed:be:0f:00:98:cd:5a:44:5b:d6:92:a2:
                    7e:97:6a:25:2f:b4:cd:48:8a:9a:37:cb:e6:2b:9b:
                    ad:17:c0:1a:5d:9b:d2:42:21:10:fc:43:d5:8c:01:
                    4e:e8:36:57:9c:6c:2d:56:71:f2:03:65:2d:07:cd:
                    a1:d4:50:6d:70:90:fa:05:86:59:37:f9:12:e2:ae:
                    1c:e3:6d:64:cc:38:15:3a:8a:45:6f:74:00:df:df:
                    ba:8f:ec:3b:33:07:3e:15:14:a5:77:fb:31:0e:97:
                    9e:7f:d0:5d:57:02:ca:53:32:7e:98:60:01:0c:64:
                    02:c0:07:da:6c:f1:7d:5a:98:55:2f:b7:17:f0:63:
                    22:d0:e8:54:0f:13:22:fe:3c:3c:17:61:9b:d1:e8:
                    5f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D2:96:18:68:9C:82:19:8D:AB:91:63:60:DA:4C:B5:9D:CE:26:DB
            X509v3 Authority Key Identifier:
                keyid:88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:32:50:4a:ea:f6:e2:57:e0:98:45:38:71:c9:59:99:82:b5:
         07:f2:e6:be:e4:90:98:7d:3a:06:7b:71:9a:6e:f5:fa:15:94:
         de:97:23:37:93:4a:1a:97:bd:b1:0b:18:d9:40:ce:75:60:82:
         f8:19:e4:c0:0d:f6:a7:5f:2f:09:86:d8:89:34:a7:b9:ad:de:
         7a:cb:ad:4d:3e:c9:17:aa:78:65:5a:d6:d2:71:c8:2c:38:1f:
         71:1d:9e:c8:00:07:ae:d9:bf:e7:de:31:32:f5:9b:4d:60:1b:
         58:18:10:d6:b4:07:3e:23:7b:b0:0e:60:bc:eb:c2:33:54:ec:
         79:a7:e5:5d:6d:0f:f8:29:91:27:3c:09:b0:1f:3f:0b:99:78:
         6d:bc:68:e5:d8:dc:47:a3:44:56:2c:e5:c0:70:09:95:a7:cb:
         d0:ed:03:92:84:59:31:81:c8:5a:9c:cc:d0:48:ce:11:5c:9a:
         e7:19:0b:51:bb:f3:2f:df:0c:92:32:02:89:2d:6a:e3:e7:30:
         34:da:bd:bf:d7:98:20:18:aa:a8:9c:49:af:af:d8:62:5d:74:
         d5:dc:42:01:f7:7a:49:53:8b:73:80:73:16:00:2d:a9:91:b8:
         75:3f:b4:fa:64:36:c1:bf:0c:ef:d7:8b:75:7e:16:86:ad:21:
         ba:a1:0c:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWNCGMtheb8xsvAavy7Jkyrn4ZHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhF
NDhCOEE5NzAeFw0yNjA2MDMwMDQ1NDdaFw0yNjA2MDQwMjUwNDdaMDMxMTAvBgNV
BAMTKEMzRDI5NjE4Njg5QzgyMTk4REFCOTE2MzYwREE0Q0I1OURDRTI2REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzuc8p453BcHmCM141//cdJjE
/x4QWjgh+FUmr3Beii5mPkAamhHB+9ldgPe9p+M1fp/kUPl+IgCYOFTQEDABAO1Q
Jylj2Pv3r8bVnQVz9XaVaUSppGgX8uSPr0nxKaYjf5dr+649CSKPkO2+DwCYzVpE
W9aSon6XaiUvtM1Iipo3y+Yrm60XwBpdm9JCIRD8Q9WMAU7oNlecbC1WcfIDZS0H
zaHUUG1wkPoFhlk3+RLirhzjbWTMOBU6ikVvdADf37qP7DszBz4VFKV3+zEOl55/
0F1XAspTMn6YYAEMZALAB9ps8X1amFUvtxfwYyLQ6FQPEyL+PDwXYZvR6F/zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUw9KWGGicghmNq5FjYNpMtZ3OJtswHwYDVR0j
BBgwFoAUiE4jZeS4rwXES9ZJ1bQpaOSLipcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTg3YWRlOWYtNmI3OS00NzIzLTk5NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVF
NEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhFNDhCOEE5Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84ODRFMjM2NUU0QjhBRjA1QzQ0QkQ2NDlENUI0Mjk2OEU0OEI4
QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg3YWRlOWYtNmI3OS00NzIzLTk5
NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5
NjhFNDhCOEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG8yUErq9uJX4JhFOHHJWZmCtQfy5r7kkJh9
OgZ7cZpu9foVlN6XIzeTShqXvbELGNlAznVggvgZ5MAN9qdfLwmG2Ik0p7mt3nrL
rU0+yReqeGVa1tJxyCw4H3EdnsgAB67Zv+feMTL1m01gG1gYENa0Bz4je7AOYLzr
wjNU7Hmn5V1tD/gpkSc8CbAfPwuZeG28aOXY3EejRFYs5cBwCZWny9DtA5KEWTGB
yFqczNBIzhFcmucZC1G78y/fDJIyAoktauPnMDTavb/XmCAYqqicSa+v2GJddNXc
QgH3eklTi3OAcxYALamRuHU/tPpkNsG/DO/Xi3V+FoatIbqhDHc=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:02:36 2026 by rpki-client