Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
File:                     D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft (raw, json)
Hash identifier:          Ff35zlh6mEHAvFY8cDlZCSYocfVkXhAqDU5EDpuWgy8=
Subject key identifier:   87:FA:8F:37:BD:08:90:1C:5F:5B:DA:26:73:3E:12:14:24:CA:62:D4
Authority key identifier: D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A
Certificate issuer:       /CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A
Certificate serial:       6ED29D335C7832F2CF8BCB75F9E3F8456BDD0FD0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 21:15:44 +0000
Manifest this update:     Tue 02 Jun 2026 21:10:44 +0000
Manifest next update:     Thu 04 Jun 2026 00:25:44 +0000
Files and hashes:         1: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl (hash: ZQ9D0vcUSOoLiIeU4JdvprD8e9kPx7jXpa2yuUSCcGA=)
                          2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: 1bpFIvgYDWuL7Cg2M0uTafrSxAsJRzJnUZ4W6gSO7ZY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl
                          rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d2:9d:33:5c:78:32:f2:cf:8b:cb:75:f9:e3:f8:45:6b:dd:0f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A
        Validity
            Not Before: Jun  2 21:10:44 2026 GMT
            Not After : Jun  4 00:25:44 2026 GMT
        Subject: CN=87FA8F37BD08901C5F5BDA26733E121424CA62D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:a5:ca:06:f7:cf:c1:b8:ab:e3:ba:bf:de:
                    5c:f2:b0:df:5f:31:a1:7c:a4:e6:ea:ec:75:20:62:
                    5a:a4:ba:3a:91:8f:6f:78:45:01:a4:75:c5:a5:9f:
                    09:ba:35:eb:2f:90:12:69:e6:7d:27:6e:50:5e:bc:
                    08:ef:26:23:17:fe:b9:aa:7e:10:cb:64:2c:82:cb:
                    7a:6a:ae:6d:f4:fb:51:24:8e:79:4a:63:b1:87:8f:
                    09:33:15:76:9a:08:2f:da:02:66:4e:d1:fb:bf:84:
                    25:e0:9f:a4:bf:cb:84:a4:06:69:08:b3:a3:44:1f:
                    7f:d8:9b:17:84:72:16:f8:c4:fd:4d:d1:04:4a:95:
                    8b:1d:6f:a7:32:63:65:02:69:cb:9f:06:a4:d1:f4:
                    a3:94:03:fc:49:85:6f:4d:50:c6:e7:41:b5:61:fc:
                    6d:da:4e:65:ae:76:a6:1b:2a:ba:99:b7:e8:03:ac:
                    3f:21:ff:fc:c8:27:e4:ff:b7:1c:6b:9a:48:25:51:
                    d6:db:84:75:b0:0b:10:e6:4d:e4:c7:97:2e:af:3e:
                    ad:09:22:00:2a:9d:b0:61:91:97:e0:a1:fd:4a:5e:
                    ff:b8:09:c5:01:a6:ed:02:1a:95:91:34:d7:71:33:
                    dd:4a:fe:39:05:26:2a:5f:97:4c:bb:1b:29:ee:ac:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:8F:37:BD:08:90:1C:5F:5B:DA:26:73:3E:12:14:24:CA:62:D4
            X509v3 Authority Key Identifier:
                keyid:D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:62:79:8e:d4:ce:c4:24:48:01:83:95:26:65:2b:54:0e:8c:
         0c:37:d9:18:44:20:20:68:c9:bf:83:80:2f:09:6f:b3:9a:33:
         28:75:f8:0a:8c:6e:59:fa:71:c4:f2:56:33:e5:93:06:20:d5:
         75:e6:97:63:85:b8:6d:2a:83:10:21:f0:0f:f9:af:9f:83:75:
         24:b3:d9:41:9e:b5:6c:0b:ab:b0:c2:44:9b:96:35:9f:7e:ad:
         e3:6e:72:bf:c4:8d:66:3a:0c:f8:48:93:17:73:75:95:86:a9:
         5d:d9:30:6c:aa:de:5a:61:3a:36:63:37:c7:88:1a:63:2e:c5:
         e5:bf:c8:78:6b:65:28:fa:52:8f:a2:43:06:6b:17:76:48:e0:
         a7:ab:d0:a3:cf:d6:19:e9:cf:9d:a9:db:f8:9f:b1:a4:94:e4:
         5e:43:84:61:ec:e9:04:fd:b5:b5:92:57:44:1f:97:22:72:63:
         bd:3f:d0:2c:e0:a8:06:ed:96:9d:ec:1b:7f:e3:2e:b2:54:91:
         74:a2:1e:73:aa:65:54:a9:4a:65:3b:b1:17:e6:40:77:29:5d:
         2e:c8:4c:d3:44:a6:43:19:70:e5:6b:f9:8b:75:ad:38:55:12:
         1a:96:cd:d3:fa:f0:34:45:fe:4d:d9:b8:03:bc:89:c3:06:b7:
         80:8e:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:11:05 2026 by rpki-client