Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
File:                     1072303E63837C5CAD6D6208D064394F85518DC3.mft (raw, json)
Hash identifier:          lVudy+FEeEermZwswChx5ju0oZSPDwphbBMF/jtNjGM=
Subject key identifier:   62:58:3C:00:FA:B9:21:61:FA:83:C9:F0:27:34:D9:65:80:CD:CF:FA
Authority key identifier: 10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3
Certificate issuer:       /CN=1072303E63837C5CAD6D6208D064394F85518DC3
Certificate serial:       3034BDDE67ED2DE087A230EF36CBB0FC8A127E49
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 21:57:25 +0000
Manifest this update:     Tue 02 Jun 2026 21:52:25 +0000
Manifest next update:     Wed 03 Jun 2026 23:01:25 +0000
Files and hashes:         1: 1072303E63837C5CAD6D6208D064394F85518DC3.crl (hash: adqO/WKNE/d0NJ6Yfc6WkJKMvdcA8Ld4Tam+YcFO/G4=)
                          2: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: VL+yGGs45eeKxi6k75PI3vnPXDk9Qwklp2W/skU92Zw=)
                          3: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: ZpWBUTYuQcAKlvk2d2JG20XN4fDhWIahOn1m4ehuvWM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl
                          rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 23:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:34:bd:de:67:ed:2d:e0:87:a2:30:ef:36:cb:b0:fc:8a:12:7e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072303E63837C5CAD6D6208D064394F85518DC3
        Validity
            Not Before: Jun  2 21:52:25 2026 GMT
            Not After : Jun  3 23:01:25 2026 GMT
        Subject: CN=62583C00FAB92161FA83C9F02734D96580CDCFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:2e:fd:2f:5c:87:55:24:dc:62:0d:f5:40:
                    7c:62:7c:a3:ff:93:f5:ab:3a:ce:3b:50:4c:ea:e2:
                    34:f4:53:d2:49:86:36:2e:62:32:99:a8:b2:0a:ea:
                    23:93:99:26:3a:d8:90:d2:35:3a:46:23:de:75:f8:
                    ca:af:56:ee:bd:f9:96:47:48:d2:e4:11:87:a7:68:
                    da:75:39:cc:e3:3f:04:42:a1:4d:08:04:28:4c:a0:
                    14:95:73:3b:97:af:88:78:a3:72:b6:0c:cb:d1:3f:
                    c0:45:a0:27:6b:1a:e1:54:5e:58:cc:d3:fe:a1:de:
                    26:51:b4:37:f2:37:e4:e7:63:b7:9e:78:94:6a:1a:
                    d6:ea:82:05:5a:c5:34:44:9d:88:91:76:8e:0b:31:
                    82:aa:39:2e:5b:20:05:3a:31:10:ef:c9:93:dd:ae:
                    e6:a1:71:4c:58:7c:57:4e:2f:d7:12:a3:2c:00:e1:
                    dd:21:b8:01:1a:55:13:41:4e:70:10:03:3d:79:26:
                    a1:5c:40:fd:53:c8:43:de:aa:e4:91:0c:5e:65:9a:
                    52:e8:c8:75:a5:4c:fb:64:21:bb:3a:53:d4:cc:35:
                    31:03:b7:d6:c1:56:fd:96:47:ca:91:1b:24:63:59:
                    47:65:a3:9a:20:7f:82:b8:1c:ac:97:16:dd:4f:53:
                    4d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:58:3C:00:FA:B9:21:61:FA:83:C9:F0:27:34:D9:65:80:CD:CF:FA
            X509v3 Authority Key Identifier:
                keyid:10:72:30:3E:63:83:7C:5C:AD:6D:62:08:D0:64:39:4F:85:51:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1072303E63837C5CAD6D6208D064394F85518DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/1072303E63837C5CAD6D6208D064394F85518DC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:c0:2b:0a:d6:4e:d1:48:09:68:df:13:12:11:8d:11:eb:
         b4:b4:77:02:6e:91:a6:68:26:cc:0a:a9:65:62:58:f2:c0:44:
         92:b5:3d:73:aa:30:87:d0:f2:33:4f:d1:b9:4f:9e:63:e4:71:
         75:6b:79:25:68:f4:7b:be:74:65:35:3f:83:54:5e:fd:27:78:
         41:1b:63:e8:a0:79:d2:2c:f3:f1:37:0d:38:cd:6c:08:7b:3d:
         be:e0:b4:f2:63:38:27:51:68:37:87:fd:b1:5b:b7:3c:2d:f1:
         46:f6:a5:65:3c:5a:7a:41:c9:16:b2:04:32:bc:6b:ef:f5:1e:
         23:fc:bf:5e:db:e0:32:ba:a4:23:b6:5a:f5:3a:84:dd:8c:39:
         d2:4d:3d:77:72:ab:b9:67:8a:d1:d2:9b:5f:0a:de:b2:a5:fc:
         72:df:14:5a:68:4b:26:f0:01:38:50:57:d5:22:64:ec:a7:b2:
         c0:ca:f0:70:19:fb:07:1d:46:8c:18:d3:29:92:aa:47:1f:47:
         c9:49:c9:48:55:b7:5a:b0:88:51:60:fd:e6:fc:b2:05:80:5e:
         61:d8:d8:ec:da:bf:6e:17:94:05:35:72:90:1d:53:88:ee:a4:
         df:a5:d7:a7:2a:50:a4:18:ae:a9:40:c0:4f:c2:65:98:39:ee:
         b1:ff:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:19:19 2026 by rpki-client