Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
File:                     B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft (raw, json)
Hash identifier:          MbX7w2AWYIVwuA5tg9Nf+IBTk2rz1BEGy9f02Lqh5e8=
Subject key identifier:   24:58:D0:30:7C:90:38:8A:0C:57:BA:29:6B:B2:F8:16:BB:9A:48:AF
Authority key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5
Certificate issuer:       /CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5
Certificate serial:       518287E3137A2672F22B91F696F7BBDB173B48D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 19:38:47 +0000
Manifest this update:     Tue 02 Jun 2026 19:33:47 +0000
Manifest next update:     Wed 03 Jun 2026 22:09:47 +0000
Files and hashes:         1: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl (hash: 6uckpaKD91sWCWdLRQpFtwahH4Txqcu/FLUcXEJlq0c=)
                          2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: hZL/hi6Qgsw4sgW/mhx3uNInW8MyX4I+jFDzsHcP8Z4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl
                          rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:82:87:e3:13:7a:26:72:f2:2b:91:f6:96:f7:bb:db:17:3b:48:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5
        Validity
            Not Before: Jun  2 19:33:47 2026 GMT
            Not After : Jun  3 22:09:47 2026 GMT
        Subject: CN=2458D0307C90388A0C57BA296BB2F816BB9A48AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:51:72:41:62:74:b3:8b:80:b2:43:22:d7:
                    b7:f5:14:12:e0:e0:92:93:a9:d7:83:60:81:85:78:
                    9c:63:67:13:2f:3d:3e:70:77:09:7b:0b:39:78:a6:
                    17:ef:9b:b6:c6:0d:b4:e7:5b:00:62:d2:7d:75:56:
                    4c:db:e0:e4:35:b4:b5:3b:cf:4e:c6:1f:dc:94:f7:
                    30:a3:1f:1d:35:94:e1:79:f9:84:04:83:3b:4a:0a:
                    eb:22:64:52:1d:f0:e7:9e:62:d6:a8:56:f3:cf:6a:
                    63:ac:72:e0:70:e9:82:f9:b1:05:6e:a8:6b:73:50:
                    ef:8e:a7:0f:36:39:c5:ec:70:04:08:34:b3:75:0e:
                    47:cf:cf:a3:11:85:77:74:50:69:be:cc:f1:38:26:
                    89:a6:bf:f9:ba:e1:2a:4c:54:8d:24:40:a0:97:f3:
                    95:42:d2:04:a5:e2:b2:d7:c2:a3:be:c8:1a:e1:0b:
                    3d:1e:5d:c6:c9:f0:63:24:25:21:9b:aa:67:96:0a:
                    45:1f:ab:7f:a1:ba:db:4f:27:d3:7e:bc:9b:1e:fb:
                    44:7f:e1:bc:61:ba:9a:5b:fd:42:b0:21:cd:86:d5:
                    01:49:b9:49:d8:76:2c:72:d7:71:b7:f3:d7:02:c7:
                    65:43:50:ba:b1:d0:e2:4e:be:6b:7e:c3:b2:05:8c:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:58:D0:30:7C:90:38:8A:0C:57:BA:29:6B:B2:F8:16:BB:9A:48:AF
            X509v3 Authority Key Identifier:
                keyid:B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:fa:2b:8c:df:3e:c2:80:de:c6:16:a9:c8:c6:9c:28:41:
         14:20:aa:ba:c0:ab:fa:52:e8:f9:60:f2:3d:9b:72:9b:67:8f:
         e8:0a:ed:3b:6c:09:75:9e:85:d7:f0:da:ef:98:fe:c1:aa:16:
         c5:9e:37:bb:29:0c:ff:6d:74:ea:7d:5c:61:5c:ee:07:2d:92:
         67:08:78:4c:94:9d:98:01:64:dc:c0:a0:94:3a:92:34:78:eb:
         81:18:ea:4a:b0:f2:3f:78:e0:37:5f:83:17:7e:55:45:b6:e0:
         ee:2b:a1:fa:f6:cc:55:df:2f:11:52:85:38:62:4e:1f:d9:66:
         fb:f9:a1:89:82:ca:43:79:67:20:ee:16:e9:49:e4:a5:50:d2:
         f3:14:8d:77:0d:0b:14:6c:66:da:c1:10:43:b9:79:ea:7d:8a:
         2d:ab:5d:cd:06:82:24:96:49:5a:0e:0f:18:f4:b5:44:01:05:
         27:f1:e6:8f:f1:5c:02:67:f2:aa:1b:04:be:88:0a:f4:04:6b:
         08:75:a8:36:fd:5a:c8:17:dc:06:c0:43:88:28:46:79:81:a0:
         97:31:3f:25:0c:7e:fc:9b:03:93:7c:19:d5:36:7d:ba:7b:c1:
         0e:fc:51:89:69:7a:a8:4e:e4:d0:02:1f:2d:f8:9c:6f:ce:3c:
         aa:39:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:15:33 2026 by rpki-client