Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
File:                     D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json)
Hash identifier:          CHpok6fRhqbni3D4iFV8EvHmGGH+Nwvny0EROJMHAD8=
Subject key identifier:   77:6C:0C:80:30:FD:0E:14:B7:88:7C:06:EE:55:26:DC:C5:47:3E:DE
Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06
Certificate issuer:       /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06
Certificate serial:       30DEE0535788E7E0539E53B9C1BB0BB5057B9946
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
Manifest number:          54
Signing time:             Sat 04 Jul 2026 07:11:18 +0000
Manifest this update:     Sat 04 Jul 2026 07:06:18 +0000
Manifest next update:     Sun 05 Jul 2026 07:15:18 +0000
Files and hashes:         1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=)
                          2: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: ZqON6CpZ/KzMGbDsMPF7Pu5+dSRHL+7ofd+Oc98nu9Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl
                          rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Jul 2026 05:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:de:e0:53:57:88:e7:e0:53:9e:53:b9:c1:bb:0b:b5:05:7b:99:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06
        Validity
            Not Before: Jul  4 07:06:18 2026 GMT
            Not After : Jul  5 07:15:18 2026 GMT
        Subject: CN=776C0C8030FD0E14B7887C06EE5526DCC5473EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:78:d4:88:b4:05:ba:61:4c:4d:dc:3c:1d:
                    66:f2:b5:58:0c:50:23:d5:26:e1:9f:25:b2:80:af:
                    2e:f0:52:e6:c1:9c:98:66:8b:7e:22:9a:07:d9:6f:
                    ba:4a:ee:51:ad:98:87:37:d3:84:6e:c5:fd:6b:a0:
                    ab:19:83:58:9e:16:8b:08:59:b3:a6:33:c7:39:2d:
                    71:93:80:bf:6d:8b:50:50:ec:9a:da:55:c6:9f:78:
                    26:ee:84:37:c8:0a:e4:78:3d:39:cb:94:38:ec:67:
                    eb:ed:63:fa:ec:dd:9d:c3:04:b0:d8:b6:44:1e:dd:
                    57:8a:5a:07:8d:54:df:24:ce:65:f8:1c:6d:90:09:
                    b4:da:0d:61:bd:02:2b:3f:ed:7e:21:fb:7c:da:3d:
                    fe:64:95:7d:73:23:32:9b:3d:cc:b1:14:a0:88:79:
                    d9:97:f8:6a:14:b8:52:41:06:b5:95:7b:d8:08:8d:
                    e8:34:47:57:12:ea:bd:26:83:c5:3e:16:d4:62:e6:
                    d2:5d:f2:49:be:ae:f9:84:71:44:d3:7a:3f:fb:f0:
                    71:e2:bf:4e:99:35:41:a6:42:7e:62:72:5e:9a:0a:
                    bc:3c:5f:fa:dc:12:81:c0:16:e8:b7:e7:7e:1c:85:
                    47:cb:f3:35:21:6b:ba:43:d7:08:04:92:97:29:a5:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6C:0C:80:30:FD:0E:14:B7:88:7C:06:EE:55:26:DC:C5:47:3E:DE
            X509v3 Authority Key Identifier:
                keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:52:db:84:07:09:8e:a3:c3:53:c5:5d:53:2e:3f:3c:44:
         0c:74:43:3c:23:96:a1:b4:d8:c5:28:72:a5:3c:11:64:f3:55:
         1a:53:da:3a:e3:05:3b:0c:c9:05:9f:05:b6:24:14:d5:9d:dd:
         03:f2:92:fd:3d:c2:0b:98:4f:ee:d4:20:4b:47:cd:ae:6f:40:
         62:6e:88:e2:ca:19:43:dd:bf:10:88:e8:8b:19:b7:5b:0a:92:
         2b:ab:c9:e8:29:b7:fe:76:b8:b0:34:79:20:55:38:d8:29:0d:
         3c:fe:1c:51:dd:1d:32:88:88:18:3b:16:4c:00:87:83:2c:f6:
         53:1d:1d:df:58:a7:0e:15:58:20:8d:d2:76:e7:3f:40:a4:d6:
         da:79:a2:d5:7b:c1:45:74:83:69:51:2e:e4:47:49:ed:08:05:
         e3:92:d5:cd:22:82:2f:80:e5:50:0f:b0:ed:a0:35:95:01:2f:
         6b:dc:85:52:26:0b:fb:cd:7d:c7:a6:53:63:cb:5f:43:12:27:
         72:14:0d:7e:3e:9b:25:be:df:08:53:0f:bf:2a:59:d0:7e:40:
         e6:4a:77:d1:ae:0c:c0:17:8f:46:90:45:40:b8:fd:e5:c6:ce:
         df:66:41:a6:a6:ca:39:c1:58:3a:7b:bc:17:0c:2f:51:0c:a1:
         f1:3e:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 21:08:01 2026 by rpki-client