Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft
File:                     D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft (raw, json)
Hash identifier:          zLIM7It3ygYtjabdWoPRYUQ47esliYyJdwET3wtvtak=
Subject key identifier:   5E:9D:85:39:D8:81:79:AB:67:DD:7E:BB:4B:07:58:79:D5:8B:F4:1C
Authority key identifier: D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15
Certificate issuer:       /CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15
Certificate serial:       22D628484D2ED45353E59CBA9F4A80C4A5B1B3D9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft
Manifest number:          14
Signing time:             Sat 16 May 2026 20:15:28 +0000
Manifest this update:     Sat 16 May 2026 20:10:28 +0000
Manifest next update:     Sun 17 May 2026 23:06:28 +0000
Files and hashes:         1: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: /dy1vpCusUxjx9tOrWaCKRl2KSXA8yenkPc1J3oKgv0=)
                          2: D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl (hash: 7dOjCbss2XVe2vAZJioc1ZaMbHCGZA5xE3hgzdEPUlo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl
                          rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d6:28:48:4d:2e:d4:53:53:e5:9c:ba:9f:4a:80:c4:a5:b1:b3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15
        Validity
            Not Before: May 16 20:10:28 2026 GMT
            Not After : May 17 23:06:28 2026 GMT
        Subject: CN=5E9D8539D88179AB67DD7EBB4B075879D58BF41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:fa:9d:77:cf:c5:ef:8a:2c:2b:0b:a2:22:
                    dc:ff:48:02:7f:be:b2:ee:a8:9a:fb:fa:f5:38:c4:
                    7b:92:87:cf:16:f4:07:7b:c3:0f:53:25:58:14:e8:
                    2e:b5:1f:f9:e4:ea:50:b0:3d:db:7b:8f:3f:2f:e2:
                    43:45:82:30:f8:87:a0:01:0c:41:83:d8:0d:4b:27:
                    9c:6a:85:f0:65:6f:30:25:8c:e8:ec:24:10:bb:f9:
                    2f:7d:b3:91:d1:3e:d6:19:37:e7:00:c4:e2:80:aa:
                    9c:7e:6e:64:6f:fe:21:f5:26:1b:75:2c:fd:2d:6b:
                    46:1e:14:9e:ad:a4:95:7e:72:68:e6:d9:81:70:b8:
                    ba:e1:71:80:9b:ff:81:f3:a9:50:66:d5:54:28:56:
                    de:c0:45:10:aa:90:80:d8:f6:67:73:6a:31:cc:c3:
                    cf:17:85:13:e3:cc:06:e6:75:d4:21:5d:0c:7a:64:
                    f4:f5:d7:f6:ef:e6:1c:54:5c:3d:3b:16:57:99:fc:
                    5a:01:aa:a1:02:d1:e6:2d:e6:a0:ee:28:fa:b4:95:
                    a1:e2:cc:f9:a8:34:2d:3d:66:6c:13:32:2a:e4:f7:
                    82:5d:f0:a5:91:dd:91:bf:de:41:87:16:ff:43:23:
                    9b:1a:23:e2:da:30:fe:21:2a:37:a2:cf:26:a5:67:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9D:85:39:D8:81:79:AB:67:DD:7E:BB:4B:07:58:79:D5:8B:F4:1C
            X509v3 Authority Key Identifier:
                keyid:D0:FF:50:D2:21:71:54:9D:8F:FA:9A:AB:3E:81:F8:76:6C:7F:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/D0FF50D22171549D8FFA9AAB3E81F8766C7F7E15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:24:54:0b:a8:a8:12:bb:f5:e3:f4:ec:1e:c5:ef:4e:22:c7:
         d2:6e:c6:39:0a:2d:cb:32:4a:ca:32:fd:4b:be:6d:28:a2:60:
         85:44:ec:cc:54:95:b2:6b:23:d8:85:aa:a3:af:c0:b1:69:5d:
         06:7e:66:39:7f:09:bc:93:71:de:71:ca:7b:9d:26:58:a7:50:
         11:c7:da:09:7e:8b:b8:e0:5a:06:bd:f5:d9:ba:c4:11:d2:18:
         aa:e6:f9:4c:83:1f:cf:29:44:24:2d:da:88:c0:a8:b1:bb:fa:
         e2:2e:6a:06:0e:9e:98:be:d9:dd:df:0b:d7:81:72:47:b8:4d:
         0a:e5:d9:70:c0:8d:64:95:ab:0e:77:c3:db:8b:1a:78:76:f3:
         6a:d3:c7:77:17:75:eb:bd:3b:89:f3:11:45:e3:1f:3d:00:d9:
         0e:94:19:89:75:69:6c:f4:ce:35:8e:a0:9e:ba:7a:c6:51:74:
         b3:6d:0f:1a:dd:7c:1b:3a:06:12:9f:6e:a6:b4:84:db:96:54:
         d4:da:61:d2:72:cc:72:4f:02:c6:a4:28:dc:3e:5b:29:eb:2c:
         ab:0a:07:90:f9:ea:6a:ea:4f:26:13:eb:62:5e:92:f8:70:1e:
         11:03:a5:ba:51:1b:9e:9f:2b:71:8e:cf:cf:57:34:fc:ed:c9:
         00:f8:f8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 13:46:30 2026 by rpki-client