Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
File:                     B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json)
Hash identifier:          wPrM0NkYwxhxYqas0GdpksRKm+GH7xQKFrL+4V5FhuQ=
Subject key identifier:   E5:63:8B:83:30:EE:96:C1:18:D5:A9:A9:E3:02:50:EC:17:7E:B3:C9
Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
Certificate issuer:       /CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Certificate serial:       3569737C8A1D1C96BCBBF2480647FA080406E415
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 22:33:09 +0000
Manifest this update:     Tue 02 Jun 2026 22:28:09 +0000
Manifest next update:     Wed 03 Jun 2026 22:39:09 +0000
Files and hashes:         1: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: KpjsAtI7oW/8a3xYKIiDA88IDLcO9U7DFCDcRC8SZHA=)
                          2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
                          rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:69:73:7c:8a:1d:1c:96:bc:bb:f2:48:06:47:fa:08:04:06:e4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3
        Validity
            Not Before: Jun  2 22:28:09 2026 GMT
            Not After : Jun  3 22:39:09 2026 GMT
        Subject: CN=E5638B8330EE96C118D5A9A9E30250EC177EB3C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:e2:9f:f8:a6:59:47:33:ea:b2:47:e5:d5:
                    30:f9:3e:13:9f:47:f7:09:e9:b3:5f:11:aa:35:09:
                    ec:ff:a4:a8:eb:37:5e:a2:be:e0:07:45:48:7f:f1:
                    71:76:5b:ba:57:57:d4:96:8c:ed:38:3b:ab:2a:c8:
                    95:77:22:3b:bc:72:b8:47:15:ae:f2:42:d2:ba:01:
                    8a:1f:ad:14:cc:ad:9f:bd:4e:cc:ea:4f:1f:2b:7e:
                    95:c6:72:09:a1:c2:75:be:fe:bb:06:ae:a0:e6:b8:
                    ae:61:05:05:63:d0:31:1c:ff:ee:9c:e2:14:31:eb:
                    19:51:20:c7:02:eb:f0:9d:96:86:26:da:ae:36:e7:
                    ec:57:bc:5a:fa:be:02:15:32:32:8d:c6:51:d1:4e:
                    b4:36:13:b0:01:c2:a6:88:2b:8c:20:34:1b:b1:7d:
                    95:f2:6e:6d:6e:15:97:1f:fb:8f:22:68:33:de:29:
                    b2:8a:e6:4c:5e:d7:88:24:4d:31:4a:97:81:b5:a5:
                    95:52:29:5b:35:b1:ce:fa:8c:4b:ec:15:27:b4:ba:
                    f8:ad:37:17:00:b0:75:ee:d7:18:61:f3:88:c1:58:
                    f2:7d:5f:51:36:e2:cf:7b:63:cf:a0:1a:44:08:b4:
                    f2:63:34:4d:b2:60:56:6e:72:2b:52:c6:33:8a:ae:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:63:8B:83:30:EE:96:C1:18:D5:A9:A9:E3:02:50:EC:17:7E:B3:C9
            X509v3 Authority Key Identifier:
                keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3c:ad:d4:6f:4f:d7:2b:c4:68:43:ec:9f:45:6c:ef:72:c6:
         cb:e8:31:d7:62:05:eb:7e:df:cc:a5:78:f1:77:0a:50:28:71:
         91:49:ff:5e:13:23:d2:91:ca:e4:ad:ad:ce:79:dc:60:92:c5:
         91:77:b2:9b:8f:8f:11:5f:65:22:d6:21:8b:83:a1:bb:7a:b5:
         4d:6e:be:10:fd:f1:5a:7b:f1:e9:50:23:0e:fe:29:e8:4b:02:
         7d:8b:89:3a:7f:30:86:0c:a0:73:7c:e5:45:5c:d0:64:c6:b7:
         2c:e8:fe:1f:f8:8c:21:53:3c:3a:1f:f2:58:bc:23:bb:a3:3c:
         78:7b:17:a8:2a:d5:b3:9a:43:1f:7c:a7:a8:4b:ec:26:e3:33:
         d0:df:ac:67:93:aa:31:dc:3f:72:4d:b9:37:2b:86:79:28:a3:
         ae:1a:c9:f5:d8:55:9c:cf:01:6e:9c:1e:ec:1a:ff:43:60:49:
         2e:3a:3d:b0:cf:66:9c:17:9c:95:26:92:0e:8d:fe:85:bb:48:
         0d:1a:38:83:68:9e:3a:28:b3:92:31:b3:11:1b:74:c4:4f:4e:
         d6:1b:1a:dd:68:db:cc:8b:1e:eb:de:95:84:71:d0:a4:c5:ac:
         a4:60:11:47:42:21:7e:b8:e0:c7:a6:25:60:fd:10:02:bf:bf:
         6f:bd:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:20:51 2026 by rpki-client