Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
File:                     1F79347E34F3842F873687AE47DBBF7766D07A56.mft (raw, json)
Hash identifier:          waBKzBOpDKIlBa3Iawu2vy1IKV+Ae4B/XadyqD8kn6s=
Subject key identifier:   10:CB:C2:A2:A9:F3:5D:E3:3A:30:8C:6D:04:CD:7C:4B:71:30:A2:FF
Authority key identifier: 1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56
Certificate issuer:       /CN=1F79347E34F3842F873687AE47DBBF7766D07A56
Certificate serial:       10A92BAE7017B49D1AF8F1DA6938ED4453BDB15E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 15:54:13 +0000
Manifest this update:     Tue 02 Jun 2026 15:49:13 +0000
Manifest next update:     Wed 03 Jun 2026 19:18:13 +0000
Files and hashes:         1: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: roZTxY6zUAfeDTuWXo3yf76eU6YZOOXLfUlqD2CCnWI=)
                          2: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: IhJRuurUuWDmTvgR8yruimtO/1dpCuEM0vPXvZRgIY8=)
                          3: 1F79347E34F3842F873687AE47DBBF7766D07A56.crl (hash: fralIp4EkuP1RMGkgaYIy8K96DI4l9Zh8q6SJlM049w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.crl
                          rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 19:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a9:2b:ae:70:17:b4:9d:1a:f8:f1:da:69:38:ed:44:53:bd:b1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F79347E34F3842F873687AE47DBBF7766D07A56
        Validity
            Not Before: Jun  2 15:49:13 2026 GMT
            Not After : Jun  3 19:18:13 2026 GMT
        Subject: CN=10CBC2A2A9F35DE33A308C6D04CD7C4B7130A2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:52:68:ff:34:e9:6b:88:c3:c8:86:de:3e:
                    82:ff:e8:f5:34:25:a4:b6:b5:e8:c0:ac:63:1d:bf:
                    1a:98:81:8b:37:8d:d3:4d:d2:8b:c2:30:bd:d1:ec:
                    13:b1:87:c2:da:01:8b:bc:10:51:d6:16:00:08:9d:
                    e1:ea:ca:8c:8d:aa:b1:ce:16:11:02:c4:4b:e1:41:
                    19:51:33:c6:53:7c:66:27:45:0c:b2:fb:3b:8d:5c:
                    36:66:33:c4:b8:7d:fa:16:4f:9c:eb:08:25:9a:cb:
                    14:6f:77:33:57:c7:db:79:04:ac:7e:78:0d:57:da:
                    40:1a:73:bd:a8:05:58:34:7a:ea:15:36:ad:4b:c9:
                    1a:86:8c:c5:e1:07:88:59:2f:93:48:dc:4c:bd:bb:
                    07:c2:9b:db:b6:aa:44:1c:ba:ca:90:c9:c1:79:f6:
                    91:e1:ca:4c:e2:6b:26:62:91:1b:a8:61:b4:f6:71:
                    eb:a0:04:b0:10:f2:33:57:13:a4:ea:14:d9:7d:ec:
                    d2:2c:96:f7:32:f4:06:89:52:5f:b9:2a:71:ba:9f:
                    b9:40:d0:58:01:5f:c2:75:46:d2:5c:07:42:0d:28:
                    d2:6c:00:22:27:3c:23:42:7f:11:ad:72:92:b3:3b:
                    4f:19:e5:e3:a1:8b:23:1e:38:56:1f:84:ee:7e:20:
                    6f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CB:C2:A2:A9:F3:5D:E3:3A:30:8C:6D:04:CD:7C:4B:71:30:A2:FF
            X509v3 Authority Key Identifier:
                keyid:1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:40:27:29:e0:78:a4:5c:af:71:f4:f4:b1:62:cb:bc:ae:
         a6:ce:6b:ad:4a:4c:26:92:35:90:15:e6:2b:4a:45:f6:ba:f5:
         53:6e:39:2c:41:b1:b6:59:e8:2c:a6:69:a3:a5:1f:0c:dc:96:
         1a:fa:a5:6a:2c:85:c0:0c:1e:cc:8b:dd:b6:52:d6:0e:e0:c4:
         b4:c8:c3:ee:e0:58:db:ea:00:cb:b2:df:6a:89:01:db:3a:89:
         db:a4:82:e3:4e:56:c0:ae:a4:0f:43:ee:fe:a8:3e:45:6a:b6:
         19:fd:38:9b:13:a6:f4:fe:80:2c:9a:40:dd:5e:e1:93:69:a3:
         8b:f4:86:d8:22:78:d5:07:bf:9a:07:36:4c:d1:cd:65:c1:f5:
         61:8c:67:25:30:a7:92:7e:10:48:0c:7b:cd:7f:12:3a:77:b2:
         b3:ee:af:70:79:84:e7:9b:5a:55:bd:2e:70:b4:7f:42:5d:de:
         f7:9e:47:30:32:a2:04:72:98:33:e5:b4:24:ee:72:fd:03:3c:
         c8:3e:bc:30:cd:0c:75:1d:8b:10:25:f7:85:c2:41:10:0a:b2:
         53:0e:e0:ce:46:97:83:b7:d1:f6:28:a1:19:24:14:9d:3c:94:
         5e:5a:1c:8f:80:04:80:20:77:47:3c:43:15:3c:a8:08:6c:01:
         56:30:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:18:57 2026 by rpki-client