Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft
File:                     1423B36DE1705432D7FAC72E76D94A011FDE2748.mft (raw, json)
Hash identifier:          sfLJ0m4rF6i3kFyFeyHhwSmoUR/pLukzeRyhfgCCVuI=
Subject key identifier:   55:E4:69:91:5C:F7:20:D6:ED:F6:1D:C2:CE:1E:46:52:B5:63:EA:33
Authority key identifier: 14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48
Certificate issuer:       /CN=1423B36DE1705432D7FAC72E76D94A011FDE2748
Certificate serial:       5783BCE5D58E26EC4D7057AC4E8245D91693DE31
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft
Manifest number:          13
Signing time:             Sat 16 May 2026 00:01:34 +0000
Manifest this update:     Fri 15 May 2026 23:56:34 +0000
Manifest next update:     Sun 17 May 2026 02:55:34 +0000
Files and hashes:         1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: cCEW6l1CmmQEDb9CwJ4tPNqGxyEaPxiJZinIbOgsV2E=)
                          2: 1423B36DE1705432D7FAC72E76D94A011FDE2748.crl (hash: JDWQ3p/t9DrjXb3w5AFQFc/l+SfOkJgSLHFjBFuyWZg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl
                          rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 02:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:83:bc:e5:d5:8e:26:ec:4d:70:57:ac:4e:82:45:d9:16:93:de:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1423B36DE1705432D7FAC72E76D94A011FDE2748
        Validity
            Not Before: May 15 23:56:34 2026 GMT
            Not After : May 17 02:55:34 2026 GMT
        Subject: CN=55E469915CF720D6EDF61DC2CE1E4652B563EA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c5:13:d5:06:d9:9f:3e:70:1c:31:72:6f:36:
                    ea:a4:17:45:db:77:3d:82:e7:e5:44:ce:b5:68:ab:
                    c4:41:e2:f1:df:e4:cc:44:51:30:8e:45:4a:58:66:
                    c5:b3:1e:a8:2d:7b:c8:1e:66:62:a6:f2:ba:59:4c:
                    02:93:02:a7:f5:41:83:1a:23:fa:ae:cc:c8:1a:ee:
                    33:5f:79:f5:22:aa:aa:f5:a8:b7:41:57:a6:1b:61:
                    40:b4:7a:9a:04:dd:1d:41:a2:16:05:8c:8a:d0:e1:
                    67:e1:33:8a:bc:19:e8:40:95:e3:4c:68:3d:11:2f:
                    7f:24:7e:3c:a9:5a:e0:26:6d:c1:98:77:b6:ed:92:
                    9d:1f:65:11:c0:00:7a:63:89:88:f6:6d:7b:06:6d:
                    6b:5f:97:f0:90:e5:32:a9:15:70:7a:6e:8f:f0:94:
                    31:41:f8:31:2b:c1:2a:1f:00:53:aa:dd:78:57:c8:
                    3c:02:f2:20:d9:a5:2c:55:9c:97:9a:7a:79:41:7a:
                    a1:b5:fa:bf:2b:3f:df:78:5a:8f:11:3d:9f:fd:73:
                    38:46:e5:59:3d:2d:0b:11:28:f2:b2:e4:af:5e:19:
                    e9:b9:0d:9b:68:95:a5:e4:16:11:78:a9:12:f4:40:
                    be:ca:de:fa:29:42:2f:e1:d4:77:a6:7b:d1:1c:a0:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:69:91:5C:F7:20:D6:ED:F6:1D:C2:CE:1E:46:52:B5:63:EA:33
            X509v3 Authority Key Identifier:
                keyid:14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:dd:b4:bf:65:c8:90:e1:90:05:3d:2e:ca:58:84:8f:04:c9:
         d2:e9:05:7d:dd:6c:02:89:55:57:f4:cc:57:ee:cb:e6:d4:dd:
         1b:a8:ff:fc:1d:6d:cb:16:32:f5:b9:5f:42:7c:2f:c9:1f:28:
         12:49:7c:57:69:d5:48:95:0b:06:d1:da:57:be:db:d5:0b:13:
         ef:a6:39:d1:3a:b5:ba:e2:1e:bc:b7:5c:80:7f:94:07:f6:0a:
         e9:09:d6:6e:06:c3:fd:0c:d5:fb:93:7b:a1:34:8e:a3:92:3f:
         83:26:b4:18:4c:c4:f1:53:a4:6a:c5:d3:91:4e:a2:b8:b7:2e:
         5f:40:52:0b:de:11:f0:75:9d:5a:76:dd:0c:53:c6:6e:ab:bb:
         0f:88:a7:ac:e1:81:ae:44:57:2a:69:79:d4:1e:ec:7c:5c:48:
         38:79:5b:1e:1c:4c:13:43:d2:84:db:43:75:58:62:54:6c:36:
         cf:43:18:2c:60:95:69:a9:ac:d2:35:dc:90:e5:79:84:12:de:
         3b:5c:b2:e1:89:d3:9b:91:c6:1b:5d:77:06:3f:9c:0b:18:c7:
         5a:e5:88:6b:ee:37:35:58:22:51:f4:e5:95:32:83:76:e4:85:
         ff:4d:bd:6e:b4:71:a2:ab:4d:5a:0b:7f:ad:66:3e:4b:58:d0:
         c1:25:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:41:58 2026 by rpki-client