Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
File:                     0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft (raw, json)
Hash identifier:          hXFop4VWt0V+6LlVIBpfDZ20EEWDKeQF7Ancy4oKKuM=
Subject key identifier:   69:F6:57:92:F0:5D:37:3D:21:25:51:B6:B5:92:83:16:05:1F:71:18
Authority key identifier: 05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
Certificate issuer:       /CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Certificate serial:       04B391D6D534F0525247A9D108C1B14DA5922FFF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 09:26:42 +0000
Manifest this update:     Tue 02 Jun 2026 09:21:42 +0000
Manifest next update:     Wed 03 Jun 2026 12:45:42 +0000
Files and hashes:         1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: puG9tEvlwR1Rqa0nAJ5US5V0FBLntY3L8sj4Hpd3IlU=)
                          2: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl (hash: XBrxCrGJofXCJ3ByTDXTf2H3lunWdsgjkOjRuWIBqL0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
                          rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 12:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b3:91:d6:d5:34:f0:52:52:47:a9:d1:08:c1:b1:4d:a5:92:2f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
        Validity
            Not Before: Jun  2 09:21:42 2026 GMT
            Not After : Jun  3 12:45:42 2026 GMT
        Subject: CN=69F65792F05D373D212551B6B5928316051F7118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:26:0e:16:a8:80:5b:30:11:42:93:4e:d8:
                    64:ad:58:c5:a3:7a:1e:a7:1a:db:2d:cc:89:97:58:
                    66:c3:f2:9c:e5:99:9b:82:51:43:3d:f4:35:f4:68:
                    1c:e6:3d:98:52:da:59:73:c5:af:55:5a:75:42:ff:
                    8b:98:dd:51:a6:c5:dc:f5:54:52:51:44:58:bf:6e:
                    04:5b:5c:6c:8a:61:93:72:bd:29:06:37:40:8a:f6:
                    f7:7a:ce:16:06:8c:ad:49:90:8d:88:3a:64:79:b6:
                    1d:bd:98:ba:24:4b:7b:ba:cd:82:e2:8d:93:bb:71:
                    41:da:8f:20:c0:ee:b0:79:f3:55:e3:2f:16:cf:89:
                    e8:79:e7:d4:3f:34:dd:ef:27:cd:42:4a:18:cf:da:
                    ad:1f:2f:74:20:db:14:f2:e2:b1:00:6e:ad:04:be:
                    8b:22:8e:96:ad:8d:98:b3:d5:9d:74:04:ae:d5:99:
                    11:67:ae:2f:da:b6:c6:35:cb:ec:83:bc:e7:bb:8d:
                    b8:ca:20:6b:23:cf:1a:0b:db:b2:90:79:6e:fe:8d:
                    7a:95:d9:50:94:5a:36:5d:0d:d6:a9:2f:3a:aa:89:
                    c2:4c:e7:ac:f0:97:51:7c:6c:e1:71:67:69:77:48:
                    0d:ee:df:4a:9a:d9:d1:52:6b:93:af:76:b0:27:9f:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F6:57:92:F0:5D:37:3D:21:25:51:B6:B5:92:83:16:05:1F:71:18
            X509v3 Authority Key Identifier:
                keyid:05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:51:9c:80:77:1c:e5:91:e6:06:45:e9:6e:84:a8:b3:22:
         1a:6e:99:fe:bb:c1:55:c1:79:e0:77:86:29:a5:0b:aa:50:af:
         eb:7d:a6:4a:32:06:53:bd:c4:e7:f8:8a:be:d0:58:ab:b4:bc:
         98:a7:cf:8b:68:0a:77:ae:23:a3:73:a7:70:52:67:3b:9e:32:
         ef:c0:40:14:2a:a1:82:8d:67:03:59:80:81:6b:00:a0:10:2e:
         7c:d4:2a:86:25:66:47:2b:81:58:5f:ae:53:81:80:25:10:e6:
         4f:2b:f1:9a:72:49:95:2f:b3:59:76:f9:d7:1f:de:23:3d:40:
         0e:c1:31:18:a1:ca:3f:e5:1a:9b:45:53:70:a7:c2:4e:4c:7e:
         4e:cc:5d:73:e5:ba:53:b7:d0:64:12:35:ee:67:c7:84:1f:aa:
         01:fe:f5:d1:4c:6a:a2:90:3b:ee:f0:f8:22:25:ae:f4:fb:11:
         cf:6c:8e:2b:3d:9b:62:d1:b6:61:fc:45:c1:d0:83:a5:07:70:
         c6:1b:c0:ad:41:61:03:b7:ba:d1:86:e2:1d:9a:bf:ea:3e:71:
         75:03:08:6e:f4:cf:cf:93:f0:52:23:ee:43:7e:fd:41:af:10:
         a3:da:66:16:d9:2d:a1:10:51:ca:51:a3:37:e7:cd:5e:b7:27:
         9a:5f:2c:a0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBLOR1tU08FJSR6nRCMGxTaWSL/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU3MDg4OTkyM0MzRUY3MDIxRDYxOUIyNEYzQTNDQzZF
MDY5QUY2QzAeFw0yNjA2MDIwOTIxNDJaFw0yNjA2MDMxMjQ1NDJaMDMxMTAvBgNV
BAMTKDY5RjY1NzkyRjA1RDM3M0QyMTI1NTFCNkI1OTI4MzE2MDUxRjcxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AiYOFqiAWzARQpNO2GStWMWj
eh6nGtstzImXWGbD8pzlmZuCUUM99DX0aBzmPZhS2llzxa9VWnVC/4uY3VGmxdz1
VFJRRFi/bgRbXGyKYZNyvSkGN0CK9vd6zhYGjK1JkI2IOmR5th29mLokS3u6zYLi
jZO7cUHajyDA7rB581XjLxbPieh559Q/NN3vJ81CShjP2q0fL3Qg2xTy4rEAbq0E
vosijpatjZiz1Z10BK7VmRFnri/atsY1y+yDvOe7jbjKIGsjzxoL27KQeW7+jXqV
2VCUWjZdDdapLzqqicJM56zwl1F8bOFxZ2l3SA3u30qa2dFSa5OvdrAnn3BfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUafZXkvBdNz0hJVG2tZKDFgUfcRgwHwYDVR0j
BBgwFoAUBXCImSPD73Ah1hmyTzo8xuBpr2wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTEwYmUzNTMtNGFiOC00Yjc3LTk4OGQtNzM5ZjgyYjlmNjQxLzAvMDU3MDg4OTky
M0MzRUY3MDIxRDYxOUIyNEYzQTNDQzZFMDY5QUY2Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNTcwODg5OTIzQzNFRjcwMjFENjE5QjI0RjNBM0NDNkUwNjlB
RjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4
OGQtNzM5ZjgyYjlmNjQxLzAvMDU3MDg4OTkyM0MzRUY3MDIxRDYxOUIyNEYzQTND
QzZFMDY5QUY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFqKUZyAdxzlkeYGReluhKizIhpumf67wVXB
eeB3himlC6pQr+t9pkoyBlO9xOf4ir7QWKu0vJinz4toCneuI6Nzp3BSZzueMu/A
QBQqoYKNZwNZgIFrAKAQLnzUKoYlZkcrgVhfrlOBgCUQ5k8r8ZpySZUvs1l2+dcf
3iM9QA7BMRihyj/lGptFU3Cnwk5Mfk7MXXPlulO30GQSNe5nx4QfqgH+9dFMaqKQ
O+7w+CIlrvT7Ec9sjis9m2LRtmH8RcHQg6UHcMYbwK1BYQO3utGG4h2av+o+cXUD
CG70z8+T8FIj7kN+/UGvEKPaZhbZLaEQUcpRozfnzV63J5pfLKA=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:38:28 2026 by rpki-client