Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft
File:                     D448B410BA4C741968F8C5B34E3156EA5666874D.mft (raw, json)
Hash identifier:          kv7gLJQ8XWaKYwNgx8R5cF76p4/Y3bcFUR8BxDOTXzM=
Subject key identifier:   8B:30:BC:B7:1A:DC:D8:2D:99:A2:F7:B2:F4:9D:6C:10:F9:9F:23:4A
Authority key identifier: D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D
Certificate issuer:       /CN=D448B410BA4C741968F8C5B34E3156EA5666874D
Certificate serial:       142607B6DEE3DCC4243EF00A08EBA29AEB53559D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 00:25:19 +0000
Manifest this update:     Wed 03 Jun 2026 00:20:19 +0000
Manifest next update:     Thu 04 Jun 2026 01:53:19 +0000
Files and hashes:         1: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: cbAdIskM1pEjxRO+NRH9Xmr+LSfrz4v+8kHiTjQjIx0=)
                          2: D448B410BA4C741968F8C5B34E3156EA5666874D.crl (hash: j8KXtWlmPkJsNtXqjO61CBXRYFdl7fffpMr5cu5ImMM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.crl
                          rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 01:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:26:07:b6:de:e3:dc:c4:24:3e:f0:0a:08:eb:a2:9a:eb:53:55:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D448B410BA4C741968F8C5B34E3156EA5666874D
        Validity
            Not Before: Jun  3 00:20:19 2026 GMT
            Not After : Jun  4 01:53:19 2026 GMT
        Subject: CN=8B30BCB71ADCD82D99A2F7B2F49D6C10F99F234A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:bb:4a:e5:af:10:01:ef:99:7a:1b:43:ed:
                    4d:ab:22:55:c9:4b:fd:82:fd:d9:8c:8c:62:75:70:
                    9b:41:eb:45:77:a1:d9:be:2b:15:e6:04:60:cf:f8:
                    98:db:09:5a:9e:c1:76:26:0f:d4:18:8e:cd:fb:07:
                    9b:95:ec:66:3f:7d:cb:30:2c:30:01:8e:4f:38:01:
                    c7:e0:96:20:10:a6:d9:42:c0:66:d2:64:49:fd:b8:
                    fa:bb:22:5f:87:e2:dc:52:19:f8:6b:4f:3e:97:8e:
                    a7:3c:fa:b2:76:68:7f:2c:82:1c:49:d7:27:dc:3c:
                    7d:3e:39:3f:69:2f:7c:cb:f2:8b:95:fe:fb:ff:31:
                    73:0c:33:bc:35:17:8e:36:7e:41:e6:e9:d3:02:28:
                    33:84:55:a1:74:a2:49:04:3a:2e:f6:fc:fb:96:14:
                    59:09:76:df:13:63:42:1d:fc:09:79:12:56:f0:72:
                    d0:94:23:2d:d5:fb:76:73:13:96:00:7d:33:ff:1d:
                    4c:f0:42:39:08:29:ad:c4:01:75:f0:52:29:e3:eb:
                    6c:ea:d9:5a:24:82:8c:3d:a3:8d:d9:f5:ef:ea:90:
                    3c:37:42:ba:20:07:53:ad:f1:8b:c2:1b:7c:cb:77:
                    6e:35:41:ab:ed:91:cb:bb:5b:78:f6:85:ec:28:bc:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:30:BC:B7:1A:DC:D8:2D:99:A2:F7:B2:F4:9D:6C:10:F9:9F:23:4A
            X509v3 Authority Key Identifier:
                keyid:D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:21:3d:60:93:86:3a:73:72:fc:80:ac:a3:92:5f:3a:9d:
         88:09:af:3f:07:78:19:c9:7b:3b:a8:71:87:2f:41:52:9f:29:
         4b:44:3b:b5:cf:9b:08:7f:0b:5b:4c:5f:73:b1:28:85:39:df:
         d4:b8:16:81:ea:6e:41:da:7c:bf:ca:d2:4c:80:eb:eb:c2:e7:
         79:c3:29:53:ed:23:8f:8a:d6:be:ef:2a:4b:07:0f:ce:1f:4a:
         0b:f3:80:11:3d:36:52:86:a0:14:e9:97:16:d5:19:22:41:c3:
         fd:24:3e:e2:00:be:73:99:d3:64:c5:40:f9:eb:c7:3b:f9:c7:
         d8:55:88:ed:0a:b1:d4:7e:50:d3:8d:d4:41:93:ae:2f:46:b5:
         9d:4a:a6:1c:c4:86:44:3a:7e:9c:a4:14:64:f8:07:1f:8d:b3:
         44:99:55:fe:4b:fb:ef:80:31:a4:c9:91:cd:13:9b:65:ee:8b:
         ba:27:e8:6a:08:91:f3:db:c2:ed:a8:d6:d1:98:06:2b:b0:a8:
         ce:13:40:c4:ea:ab:ad:00:7c:98:87:2a:f3:39:24:75:a3:1c:
         da:fe:7b:51:8f:e9:4d:b7:e3:f0:59:5b:31:db:02:b7:61:10:
         1f:ec:ee:88:e0:e7:e2:f5:8c:7d:2b:78:07:46:c1:69:96:bf:
         47:9c:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:23:32 2026 by rpki-client