Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
File:                     0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft (raw, json)
Hash identifier:          26wfTN1n0OdpsQYx5LsQT8evgJm816zo8XNXHjuEYbQ=
Subject key identifier:   B2:86:C6:98:E2:7E:88:B7:50:11:40:96:4D:42:C3:68:AC:E5:F7:C2
Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
Certificate issuer:       /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Certificate serial:       62A3823645A27D853B9F5F03EBA0E616CD01915B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 14:48:07 +0000
Manifest this update:     Tue 02 Jun 2026 14:43:07 +0000
Manifest next update:     Wed 03 Jun 2026 17:57:07 +0000
Files and hashes:         1: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: /Mgyo9ff3zy6arAcZsb+8DNgEw9iCUEDLwcPq3vZVTM=)
                          2: 0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl (hash: 5Z9AT/dDVunGTQvDMkwcFuBWiOdp+Y+W2wbRhb63Jno=)
                          3: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: HPMtJkG9vBmkfKDdQcScUoOmdbP+traQt1X9CJZPJyo=)
                          4: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: MyQFtjJqg7ZYwpERzdoDmD5jzoRErmzO01EIiv31fWg=)
                          5: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: YEcfoQjDpMi0GF8b5kmh9JJ3H1tnO76M1gzrmxVWaMc=)
                          6: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: G9sq4ErGZj+4CsLlGYQ96xB1AH1Q/5k7LHe36UaA1Pw=)
                          7: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: ooDWixoDrf/cdih9Rb8FLtagmcLYMAGnpLpX2ocgURU=)
                          8: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: 6afeRIJnDM/uUZHogbKxMoXG/M34lmpUP/58vATJWAM=)
                          9: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: prcWJfhlUErzmRWR1H7hkcJb4s+PiXSVs4vIyO1/46s=)
                          10: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: sfhfAHrl757lamU4yGIl09WzhCGt6COimj3NHeX2Rnc=)
                          11: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: 4mD9TjqePo/yOB3/Fiwn7z8Fd4y7bA97GyieYO2qTlw=)
                          12: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: k7wAQ0uD+feQhS7bp4KkJxo3uZUwNKoeGm20CJyRgyc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
                          rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a3:82:36:45:a2:7d:85:3b:9f:5f:03:eb:a0:e6:16:cd:01:91:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
        Validity
            Not Before: Jun  2 14:43:07 2026 GMT
            Not After : Jun  3 17:57:07 2026 GMT
        Subject: CN=B286C698E27E88B7501140964D42C368ACE5F7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:19:3a:21:ea:fd:85:fa:0f:1a:d3:2f:04:
                    96:81:b8:b4:52:d2:3d:3a:85:0e:44:3c:e6:e9:97:
                    53:50:a8:c1:ff:f1:4a:a4:6e:80:05:0e:bf:87:0f:
                    57:00:77:04:01:9b:ae:89:c5:ce:7d:f1:03:05:24:
                    92:b3:50:2f:e7:02:f0:50:37:82:79:b5:8f:ca:59:
                    60:55:4d:f3:62:61:f8:3d:a1:e4:ee:76:4f:06:de:
                    a9:f2:07:9a:6e:4c:ba:88:b9:11:a1:80:c2:1f:4c:
                    ce:c5:6c:5e:af:08:cf:44:69:10:6e:aa:4e:51:3a:
                    9d:bc:f5:e4:65:13:e8:4a:8d:8e:b5:21:9c:0b:34:
                    6a:3c:79:d6:dd:63:03:ad:6f:6c:ea:8d:da:df:68:
                    00:b3:62:32:1c:14:a1:63:7c:0f:a2:6b:72:3f:b7:
                    eb:15:3a:28:e2:78:e8:fb:eb:d0:35:be:5f:27:67:
                    93:9b:d3:3f:be:9f:67:3b:ce:79:95:81:4d:3f:12:
                    ea:ab:a0:c1:a5:c2:f7:c9:27:7b:2f:5a:75:9d:a3:
                    4f:3f:02:da:a1:ff:36:4c:36:25:f9:0c:0d:ad:a2:
                    65:fb:45:34:41:39:f5:dc:2b:50:da:a4:8a:66:af:
                    b9:af:00:78:39:25:f5:a6:5e:a0:97:bb:ac:dd:b7:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:86:C6:98:E2:7E:88:B7:50:11:40:96:4D:42:C3:68:AC:E5:F7:C2
            X509v3 Authority Key Identifier:
                keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:53:ab:aa:48:42:bf:f6:6b:d0:84:dc:70:84:86:ee:ab:
         9d:01:ff:26:67:3e:b8:32:d5:4e:ae:0f:f2:fe:e8:ec:85:db:
         bb:64:0f:5d:c1:18:a8:47:1c:cf:d1:ea:f3:5b:9d:2b:c2:db:
         05:41:3a:f4:8a:72:fe:17:0c:03:b0:94:52:8f:c9:f6:0b:b6:
         2c:79:7c:49:6d:03:03:5d:ad:d4:d1:31:53:72:74:d7:1f:60:
         d0:7a:b2:25:5e:c4:a3:0c:09:28:86:60:e4:f4:48:69:0b:92:
         ec:07:b0:e9:b3:d4:ce:e8:16:94:e3:89:92:4b:1b:a9:ae:a2:
         40:09:ac:4e:17:bb:8a:c4:ff:71:d2:d8:db:d5:46:f1:4d:29:
         48:1f:c5:d0:b4:9b:ce:43:bf:6f:71:e9:f9:53:0d:c9:8a:51:
         f3:e4:6a:bc:50:29:d1:b7:ff:a3:4e:e8:0f:72:ce:fd:60:99:
         5c:a5:3d:20:ea:db:b4:f7:c3:57:ec:9b:01:6e:ba:2b:25:c2:
         4a:e0:b9:94:f7:3e:dc:99:57:ae:e5:67:f0:f1:b1:34:c6:7b:
         eb:8d:b8:aa:94:28:17:30:d9:54:0b:29:12:df:93:43:85:fa:
         7d:88:9e:32:c2:4a:86:ad:a9:2f:84:ee:74:11:7b:7b:13:e4:
         8c:b9:0c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:46:44 2026 by rpki-client