Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
File:                     ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft (raw, json)
Hash identifier:          ZFJN2O3l8tjC7NBIg+oeYKCxEdi/cbh0IMWv+uXiVwE=
Subject key identifier:   6B:18:F1:88:A8:D1:42:56:2A:DE:6B:11:95:2D:72:21:57:B2:D1:6B
Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
Certificate issuer:       /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Certificate serial:       2927DD52C3719E43B5FB4889624FF2C2E72944E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
Manifest number:          2C
Signing time:             Tue 02 Jun 2026 22:38:18 +0000
Manifest this update:     Tue 02 Jun 2026 22:33:18 +0000
Manifest next update:     Thu 04 Jun 2026 01:33:18 +0000
Files and hashes:         1: ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl (hash: LES87j5Qv6X2IXdoM5mZcWMuOwrMbIjkpo3t+T5ZbZ8=)
                          2: AS10217.roa (hash: rBN9V7NO+oNZzLzvFqCWOkrMsFmQrg1NnhxBG1/GfOM=)
                          3: AS147168.roa (hash: WiiJ0UINkkiQHu9jLgZQhKLsdBs17smAwZtsfZdz3PU=)
                          4: AS45700.roa (hash: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
                          rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:27:dd:52:c3:71:9e:43:b5:fb:48:89:62:4f:f2:c2:e7:29:44:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
        Validity
            Not Before: Jun  2 22:33:18 2026 GMT
            Not After : Jun  4 01:33:18 2026 GMT
        Subject: CN=6B18F188A8D142562ADE6B11952D722157B2D16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:57:78:4d:41:ef:02:de:24:68:af:6d:4f:
                    71:0c:82:a8:61:53:1e:6f:9d:d3:38:91:d2:91:0f:
                    46:65:38:e6:f0:20:e3:46:63:85:ca:67:5e:67:cc:
                    c5:58:d6:2e:52:e7:a2:34:29:e2:97:47:93:63:cd:
                    cb:3c:c9:a8:e9:30:e7:d3:ff:de:d4:65:44:43:53:
                    d9:93:a9:c0:6f:e2:91:45:e4:a8:cc:2c:e9:64:25:
                    f9:f4:70:39:d8:a9:8c:ff:5d:52:03:09:34:98:09:
                    34:4b:90:1a:78:e9:9b:9d:b4:2c:8e:bd:b2:77:df:
                    d5:6b:d4:14:e5:a0:4f:96:cf:2b:1c:61:be:25:35:
                    61:6c:74:71:4f:c3:ac:a6:d4:72:48:bd:b1:6d:98:
                    76:65:ff:03:4d:32:b4:1b:62:27:b2:eb:c6:e2:63:
                    1b:30:6d:8c:50:84:ee:f9:ab:29:75:18:41:33:f6:
                    a9:3c:bf:c1:fd:20:b2:ae:2e:85:5b:a8:cd:37:e4:
                    79:d5:25:e3:19:f1:bd:be:84:ac:86:48:51:db:20:
                    d5:0b:b1:a6:8a:ed:06:8b:4b:6f:ca:c3:07:15:2e:
                    0d:c7:26:de:5d:52:d2:a2:1c:b3:1a:94:8b:af:73:
                    a6:17:81:69:08:3d:78:10:24:f5:2c:e2:6c:84:a4:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:18:F1:88:A8:D1:42:56:2A:DE:6B:11:95:2D:72:21:57:B2:D1:6B
            X509v3 Authority Key Identifier:
                keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6b:1c:ea:0f:ae:f5:2b:a4:9c:af:3c:3c:25:5a:5f:d2:41:
         a0:c1:91:1a:10:da:9d:7a:38:e3:77:33:e6:5d:57:00:1c:05:
         39:13:55:2b:2a:d2:2d:d6:f6:0d:21:35:1d:40:c6:ed:ff:5e:
         2e:cb:db:31:1a:51:e2:79:e2:92:9a:0e:79:1a:50:99:5e:e4:
         84:2d:9a:63:4b:48:fc:18:70:5f:c5:87:99:5c:af:7c:c7:b5:
         8b:95:47:c2:87:63:74:79:8d:3e:8e:e0:6a:e8:54:f0:16:90:
         39:32:dc:75:40:36:b9:20:26:5f:22:74:74:c0:1e:41:4b:42:
         62:45:9c:f6:25:60:3c:01:75:b2:16:6c:84:ff:6e:9f:58:c7:
         97:ab:86:fa:45:58:92:ab:a8:67:ce:ac:b8:71:53:f0:01:2e:
         e8:c8:d4:dd:37:0d:26:22:a6:d0:4c:a0:53:34:44:21:5b:a9:
         b8:d0:77:5d:e9:18:3a:d7:2f:cc:55:12:95:21:ee:49:1a:a3:
         8f:da:57:75:3d:2f:e6:01:c6:56:e4:37:9a:b8:fe:d9:35:a6:
         57:2d:9f:d9:6f:38:7e:1e:47:d8:8c:3f:ee:ef:de:ae:1b:ee:
         53:5c:eb:47:fa:c2:18:da:1a:aa:f4:60:2f:b2:85:9f:ef:2c:
         d1:2d:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:15:52 2026 by rpki-client