Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
File:                     6564F75E34457852F2B66C3764B24E23D7CC229E.mft (raw, json)
Hash identifier:          j3EushGyMyOZkx4+nT4ZwHa4SzHrK8R2hP0mvkeICaI=
Subject key identifier:   8A:4C:86:BB:D2:57:53:EC:AA:53:E6:B9:84:73:C9:3C:BB:0F:68:37
Authority key identifier: 65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E
Certificate issuer:       /CN=6564F75E34457852F2B66C3764B24E23D7CC229E
Certificate serial:       1DDE17EA00BF5A477105B51F47F8844D2B25D44E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 09:31:50 +0000
Manifest this update:     Tue 02 Jun 2026 09:26:50 +0000
Manifest next update:     Wed 03 Jun 2026 12:39:50 +0000
Files and hashes:         1: 6564F75E34457852F2B66C3764B24E23D7CC229E.crl (hash: 9R+X/DE9/20TyoP9mBo95qZE2VgWmbdgQK4OPmx2rpY=)
                          2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ID4fm5BwuuWYs0CbkPkat6AFzlZ1Ymdn+yuQrCTD+tk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl
                          rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 12:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:17:ea:00:bf:5a:47:71:05:b5:1f:47:f8:84:4d:2b:25:d4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6564F75E34457852F2B66C3764B24E23D7CC229E
        Validity
            Not Before: Jun  2 09:26:50 2026 GMT
            Not After : Jun  3 12:39:50 2026 GMT
        Subject: CN=8A4C86BBD25753ECAA53E6B98473C93CBB0F6837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:34:9d:12:94:b5:7e:88:88:f2:58:45:b6:bb:
                    08:a7:7f:48:dc:64:ac:f2:b9:5c:06:50:ce:5f:e2:
                    f7:5d:a1:6a:43:18:c6:19:ce:45:f0:7c:0c:98:8a:
                    d3:92:00:03:64:f2:9a:9c:3a:e8:a1:b6:be:94:74:
                    42:9f:92:13:8b:c5:9f:ee:84:c6:0c:41:c9:58:8b:
                    2a:68:c5:20:46:22:3b:6e:22:80:c5:e3:e5:10:96:
                    7b:1c:3a:4f:85:d4:01:41:3b:dc:15:94:8b:11:36:
                    7b:80:15:a4:24:f4:3a:87:f3:c1:a9:88:e9:25:cb:
                    ef:88:31:52:55:f1:27:99:77:4f:6e:d2:89:4a:2e:
                    a9:52:2b:bd:22:3c:5a:53:a2:cf:89:63:9c:79:06:
                    88:e3:89:76:3b:ab:15:72:64:b0:ce:84:41:fa:20:
                    dc:9d:70:d4:35:85:1d:f5:b7:48:47:dd:d7:ae:ec:
                    65:8a:4c:8a:2d:24:2c:26:7f:d0:08:f1:00:42:85:
                    03:0f:85:40:08:d4:32:7d:58:21:9b:b0:df:24:8a:
                    59:4e:bc:1f:90:ce:e9:6a:d8:07:52:1f:16:8b:35:
                    1f:e8:d5:07:7e:c7:f8:8f:eb:96:63:d4:e9:83:e0:
                    45:20:ad:8f:a2:c5:b4:dc:71:a5:eb:24:08:1c:43:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4C:86:BB:D2:57:53:EC:AA:53:E6:B9:84:73:C9:3C:BB:0F:68:37
            X509v3 Authority Key Identifier:
                keyid:65:64:F7:5E:34:45:78:52:F2:B6:6C:37:64:B2:4E:23:D7:CC:22:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6564F75E34457852F2B66C3764B24E23D7CC229E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/6564F75E34457852F2B66C3764B24E23D7CC229E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:79:9e:22:d9:65:ec:0a:e8:d1:58:ba:16:b7:ea:c6:fd:9c:
         5f:1f:65:f0:30:9f:d1:2b:d4:76:80:c3:61:0b:6e:f5:07:fa:
         06:13:70:35:1f:d3:cf:27:b9:9b:a8:8f:64:3f:a0:5a:9b:eb:
         ba:03:a2:76:60:86:9c:a4:d9:f7:be:72:50:a9:d1:1e:b0:0a:
         17:76:83:12:b1:ca:f1:a1:a4:f6:64:4d:d1:3d:6c:be:b5:c6:
         34:6b:7b:4a:a8:d1:cf:43:ea:df:dd:cc:2a:b5:a2:63:36:5c:
         4f:f6:a9:9e:8e:e2:4d:58:ae:7d:99:79:9b:eb:71:5f:63:65:
         e1:bf:76:8f:60:c0:35:1b:b4:57:03:b8:35:8e:73:ca:d1:81:
         4c:a5:6d:7e:12:c9:8d:b0:46:3e:06:7f:46:1d:38:cd:da:ca:
         5a:98:63:93:d3:4c:11:53:13:07:cc:08:ca:a9:fd:67:a5:16:
         1f:dc:91:9c:9a:4c:d5:8e:6a:ef:86:4a:d4:7c:41:68:b2:27:
         54:08:90:2e:c5:85:e8:a5:51:91:7a:fb:fd:34:91:57:d5:4a:
         9f:70:ab:4b:1f:0d:c6:4e:b0:71:e8:b1:22:c7:1f:d1:e3:67:
         92:b2:a8:32:ab:c2:40:55:2e:e6:00:1a:ee:71:b6:5f:43:ce:
         d4:27:04:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:19:37 2026 by rpki-client