Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
File:                     CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft (raw, json)
Hash identifier:          8r9ffydgaKOitdWpDvGPVmSBLi7LxIblNkFPRkoGGik=
Subject key identifier:   87:73:BC:27:9A:EE:E5:A5:06:E8:2B:CD:26:25:6B:C7:F7:CF:DD:A9
Authority key identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
Certificate issuer:       /CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Certificate serial:       4EDDA0B95E168055E8CC4E88603406C85ED334F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
Manifest number:          2C
Signing time:             Tue 02 Jun 2026 20:55:26 +0000
Manifest this update:     Tue 02 Jun 2026 20:50:26 +0000
Manifest next update:     Wed 03 Jun 2026 22:09:26 +0000
Files and hashes:         1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: 9B18d/9Mq6o8AyxG94Kdqz2+xtB5eaKcmGvgMOaUWzk=)
                          2: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl (hash: PW2kj7BqZ4jLt9pqoft8gpnW1OSDVkgMoySdiT2hDCo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
                          rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dd:a0:b9:5e:16:80:55:e8:cc:4e:88:60:34:06:c8:5e:d3:34:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
        Validity
            Not Before: Jun  2 20:50:26 2026 GMT
            Not After : Jun  3 22:09:26 2026 GMT
        Subject: CN=8773BC279AEEE5A506E82BCD26256BC7F7CFDDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:11:97:19:ea:cd:33:05:5a:20:b2:56:12:
                    2b:49:63:a9:04:25:a5:e1:cd:b7:f6:61:a9:5a:1d:
                    94:cd:53:c3:fa:28:da:e2:15:95:ed:95:70:7b:98:
                    69:89:2d:1e:1a:02:1a:14:df:b1:2b:c7:95:ea:14:
                    9c:2b:19:e6:a2:51:f5:65:f7:d3:51:0f:c4:b7:1c:
                    c7:3a:ca:27:4a:9b:0f:70:5b:d9:6c:e1:7e:65:d5:
                    ba:11:f3:2f:7f:e6:d3:51:bf:55:fc:86:8c:4e:fd:
                    72:30:b2:a6:eb:53:f8:13:70:27:e5:4b:da:f5:89:
                    b3:1a:34:a3:74:cf:72:cd:01:f0:64:5a:23:85:8b:
                    62:03:6f:58:28:52:ff:59:05:1e:bb:59:c9:13:57:
                    22:06:9c:c9:bc:bb:c5:03:2e:2a:d1:57:69:f3:99:
                    eb:ed:96:ae:fa:cf:f5:87:f9:44:d6:fc:3d:ae:a5:
                    c1:92:89:35:df:68:7d:a7:41:13:5b:cc:17:a9:51:
                    03:1f:bf:89:b6:97:da:3a:a6:3b:70:f3:9a:28:b2:
                    2e:de:bf:42:20:f7:68:c3:cf:24:55:a2:a0:26:6c:
                    ec:29:15:31:d9:6d:bf:fb:0f:25:33:1d:e3:78:49:
                    df:91:ba:eb:7b:f0:24:81:4c:c2:e6:4c:e1:1e:f4:
                    e6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:73:BC:27:9A:EE:E5:A5:06:E8:2B:CD:26:25:6B:C7:F7:CF:DD:A9
            X509v3 Authority Key Identifier:
                keyid:CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:0c:0f:44:a6:e1:35:a0:34:60:ad:18:8e:0b:33:09:04:
         02:81:04:c4:01:16:f7:24:a3:97:ce:c7:3f:72:9f:8a:5f:02:
         04:40:49:a4:29:6e:49:13:99:f7:ad:fb:4c:e4:23:e6:79:9e:
         f1:f6:09:e1:fd:44:b0:30:ff:9a:d0:18:88:07:b4:1f:37:f9:
         6a:cf:a4:17:18:21:b1:81:97:e3:b6:aa:f2:61:37:06:e4:00:
         31:67:8b:74:72:6a:6d:dc:43:78:72:86:50:2e:0c:f3:18:84:
         b9:ba:5f:3e:7f:8a:82:ae:03:76:0f:0b:93:f7:62:b6:1e:cd:
         f7:44:9a:b0:4f:87:bb:a2:b1:f5:77:f8:26:47:38:d9:a0:20:
         b7:65:48:ed:19:c8:74:32:25:2a:78:cc:61:b4:d5:dd:b0:49:
         24:c8:f2:ca:56:de:3e:67:1b:38:96:fd:08:f7:db:42:dc:dd:
         38:d0:9d:cd:85:4c:a3:d0:ab:c4:14:6b:55:cb:10:a6:b2:5b:
         d0:42:ec:e2:ac:f8:61:a3:4c:c5:6c:de:95:cd:aa:57:2c:83:
         d4:f4:0c:d0:7d:a5:1e:39:6e:96:05:5d:87:2d:4f:9b:44:f2:
         30:cd:4c:fb:a5:f5:07:14:83:da:52:58:9d:c8:d9:39:50:24:
         92:34:7f:bc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTt2guV4WgFXozE6IYDQGyF7TNPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I3MkY3MjYzQjc2NkFCMTA1OUFERkJBNUI5MTkzQzJD
NUU1ODUzMDAeFw0yNjA2MDIyMDUwMjZaFw0yNjA2MDMyMjA5MjZaMDMxMTAvBgNV
BAMTKDg3NzNCQzI3OUFFRUU1QTUwNkU4MkJDRDI2MjU2QkM3RjdDRkREQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxBGXGerNMwVaILJWEitJY6kE
JaXhzbf2YalaHZTNU8P6KNriFZXtlXB7mGmJLR4aAhoU37Erx5XqFJwrGeaiUfVl
99NRD8S3HMc6yidKmw9wW9ls4X5l1boR8y9/5tNRv1X8hoxO/XIwsqbrU/gTcCfl
S9r1ibMaNKN0z3LNAfBkWiOFi2IDb1goUv9ZBR67WckTVyIGnMm8u8UDLirRV2nz
mevtlq76z/WH+UTW/D2upcGSiTXfaH2nQRNbzBepUQMfv4m2l9o6pjtw85oosi7e
v0Ig92jDzyRVoqAmbOwpFTHZbb/7DyUzHeN4Sd+Ruut78CSBTMLmTOEe9OaPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUh3O8J5ru5aUG6CvNJiVrx/fP3akwHwYDVR0j
BBgwFoAUy3L3Jjt2arEFmt+6W5GTwsXlhTAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTA2Y2QxNTUtYjUzZi00MTQ2LWExN2MtN2YxMzc1ZWNhMjRhLzAvQ0I3MkY3MjYz
Qjc2NkFCMTA1OUFERkJBNUI5MTkzQzJDNUU1ODUzMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DQjcyRjcyNjNCNzY2QUIxMDU5QURGQkE1QjkxOTNDMkM1RTU4
NTMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTA2Y2QxNTUtYjUzZi00MTQ2LWEx
N2MtN2YxMzc1ZWNhMjRhLzAvQ0I3MkY3MjYzQjc2NkFCMTA1OUFERkJBNUI5MTkz
QzJDNUU1ODUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHNaDA9EpuE1oDRgrRiOCzMJBAKBBMQBFvck
o5fOxz9yn4pfAgRASaQpbkkTmfet+0zkI+Z5nvH2CeH9RLAw/5rQGIgHtB83+WrP
pBcYIbGBl+O2qvJhNwbkADFni3Ryam3cQ3hyhlAuDPMYhLm6Xz5/ioKuA3YPC5P3
YrYezfdEmrBPh7uisfV3+CZHONmgILdlSO0ZyHQyJSp4zGG01d2wSSTI8spW3j5n
GziW/Qj320Lc3TjQnc2FTKPQq8QUa1XLEKayW9BC7OKs+GGjTMVs3pXNqlcsg9T0
DNB9pR45bpYFXYctT5tE8jDNTPul9QcUg9pSWJ3I2TlQJJI0f7w=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:19:07 2026 by rpki-client