Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
File:                     F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft (raw, json)
Hash identifier:          VrSPBzLgywAgrvVt/Lrlt39QMJv1D+WFq59UpOtnHBA=
Subject key identifier:   D7:C9:E2:93:FC:AE:DB:19:BF:FD:1E:C8:2C:46:43:B1:5E:1F:CA:8C
Authority key identifier: F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68
Certificate issuer:       /CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
Certificate serial:       38633496BB2F6DB6BF1D62C7886D8D1B57E9C81F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 00:45:45 +0000
Manifest this update:     Wed 03 Jun 2026 00:40:45 +0000
Manifest next update:     Thu 04 Jun 2026 02:38:45 +0000
Files and hashes:         1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: f3wJQDXGzu3D9hBo8GBwbAPITCCR387RhleY4wa8/xI=)
                          2: F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl (hash: WCXG72vG4+dUr+v/JMTL5G7dc/2Pd7qhpFZJb4ixDTM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl
                          rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 02:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:63:34:96:bb:2f:6d:b6:bf:1d:62:c7:88:6d:8d:1b:57:e9:c8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
        Validity
            Not Before: Jun  3 00:40:45 2026 GMT
            Not After : Jun  4 02:38:45 2026 GMT
        Subject: CN=D7C9E293FCAEDB19BFFD1EC82C4643B15E1FCA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:9f:56:52:8e:5b:77:a9:13:57:52:1e:42:
                    6e:55:c2:00:49:c8:b1:d8:fd:e8:65:76:9d:2c:f8:
                    b6:7f:a9:c5:1e:73:cb:f9:f2:4c:f5:0f:0b:da:4e:
                    ec:27:a6:0b:b0:ca:71:e2:fc:8c:b6:1a:0c:91:46:
                    b7:30:a2:4e:f2:9a:01:8c:8f:18:3c:41:2d:33:da:
                    ec:61:d6:a1:b3:44:d0:3e:ea:3d:a5:5a:2d:e9:a8:
                    9d:ec:0e:cc:69:b8:72:de:00:eb:08:6d:a8:c1:b9:
                    73:37:b0:4e:a1:15:eb:b5:a4:e1:af:84:fa:79:09:
                    6e:8b:1f:16:40:64:35:1a:c1:4b:bd:28:a8:75:30:
                    7d:eb:ef:d6:a4:12:7c:d0:35:fd:00:ee:a5:7a:8d:
                    f7:36:6e:46:c4:95:66:74:aa:28:fc:74:51:ec:05:
                    1a:fa:6a:c9:9e:99:37:4d:fd:93:21:97:d3:d4:92:
                    aa:3d:3e:8e:cf:e4:7b:33:7d:94:90:6e:9c:b9:e6:
                    4f:f1:18:82:d9:90:4e:ab:d2:02:b8:04:58:2d:bc:
                    5c:ce:96:87:b2:38:ab:a0:43:96:ce:9a:0d:d8:0c:
                    e2:27:d4:08:c6:8e:da:a4:d4:53:3f:c3:75:3d:4f:
                    f6:ab:56:f3:a8:e2:72:94:62:74:5c:e4:1e:c8:a8:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C9:E2:93:FC:AE:DB:19:BF:FD:1E:C8:2C:46:43:B1:5E:1F:CA:8C
            X509v3 Authority Key Identifier:
                keyid:F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3c:a9:0a:d7:a5:b7:3d:b8:1c:b8:61:2e:3a:c4:ea:0e:06:
         26:be:49:4d:99:57:b3:0d:ee:5d:33:b9:65:16:9c:69:89:6a:
         83:92:b5:24:9f:ac:32:fb:b5:1b:48:89:42:3c:5a:49:c8:cc:
         68:13:00:79:c1:f0:70:19:3f:43:5d:b7:3a:fc:19:0d:f0:ef:
         ff:d8:16:18:e7:a9:cf:37:c9:29:9d:a1:30:96:c6:ab:4c:74:
         6f:ad:fc:a7:60:9d:36:3d:3f:4c:51:f6:39:f0:26:56:94:88:
         60:dd:fe:c5:10:e4:ef:d9:f8:99:db:47:0f:e1:78:c7:65:1e:
         6c:32:b0:2f:80:8b:7f:6b:cc:9f:87:17:b0:16:96:67:72:8e:
         d6:dc:6f:5c:d3:49:4d:26:a1:8b:5a:eb:0c:5a:a9:40:7b:f2:
         dd:82:ef:85:b3:38:50:0d:e7:6f:6b:84:85:13:ac:f4:50:47:
         47:44:74:d0:93:02:ce:12:db:8c:5e:a7:68:d8:71:fd:58:2e:
         5a:b6:a4:ea:01:83:4a:2a:42:80:56:57:6e:68:b8:18:61:68:
         b7:1b:af:52:e3:cc:4a:e1:c9:de:a0:8d:cd:23:54:a2:3c:f5:
         77:9f:0f:78:d2:86:c8:15:3f:51:c2:64:e4:f6:b6:d8:67:66:
         fd:cb:ce:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOGM0lrsvbba/HWLHiG2NG1fpyB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ5M0I0QjdCNkMwOTMyRUQ0NTkwQkRGODEzMjlEMEVB
RTVFRUI2ODAeFw0yNjA2MDMwMDQwNDVaFw0yNjA2MDQwMjM4NDVaMDMxMTAvBgNV
BAMTKEQ3QzlFMjkzRkNBRURCMTlCRkZEMUVDODJDNDY0M0IxNUUxRkNBOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTp9WUo5bd6kTV1IeQm5VwgBJ
yLHY/ehldp0s+LZ/qcUec8v58kz1DwvaTuwnpguwynHi/Iy2GgyRRrcwok7ymgGM
jxg8QS0z2uxh1qGzRNA+6j2lWi3pqJ3sDsxpuHLeAOsIbajBuXM3sE6hFeu1pOGv
hPp5CW6LHxZAZDUawUu9KKh1MH3r79akEnzQNf0A7qV6jfc2bkbElWZ0qij8dFHs
BRr6asmemTdN/ZMhl9PUkqo9Po7P5HszfZSQbpy55k/xGILZkE6r0gK4BFgtvFzO
loeyOKugQ5bOmg3YDOIn1AjGjtqk1FM/w3U9T/arVvOo4nKUYnRc5B7IqApbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU18nik/yu2xm//R7ILEZDsV4fyowwHwYDVR0j
BBgwFoAU9JO0t7bAky7UWQvfgTKdDq5e62gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDcxMWMxMTAtN2FiMS00YTM5LWI5Y2EtM2E5YjBlODFiY2Y1LzAvRjQ5M0I0QjdC
NkMwOTMyRUQ0NTkwQkRGODEzMjlEMEVBRTVFRUI2OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNDkzQjRCN0I2QzA5MzJFRDQ1OTBCREY4MTMyOUQwRUFFNUVF
QjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5
Y2EtM2E5YjBlODFiY2Y1LzAvRjQ5M0I0QjdCNkMwOTMyRUQ0NTkwQkRGODEzMjlE
MEVBRTVFRUI2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIk8qQrXpbc9uBy4YS46xOoOBia+SU2ZV7MN
7l0zuWUWnGmJaoOStSSfrDL7tRtIiUI8WknIzGgTAHnB8HAZP0Ndtzr8GQ3w7//Y
Fhjnqc83ySmdoTCWxqtMdG+t/KdgnTY9P0xR9jnwJlaUiGDd/sUQ5O/Z+JnbRw/h
eMdlHmwysC+Ai39rzJ+HF7AWlmdyjtbcb1zTSU0moYta6wxaqUB78t2C74WzOFAN
529rhIUTrPRQR0dEdNCTAs4S24xep2jYcf1YLlq2pOoBg0oqQoBWV25ouBhhaLcb
r1LjzErhyd6gjc0jVKI89XefD3jShsgVP1HCZOT2tthnZv3Lzrs=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:26:22 2026 by rpki-client