Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
File:                     586C54F03B92F22D9291776AE79350296DB382C8.mft (raw, json)
Hash identifier:          fwwEBSQ2MLjORtqmBqwXHWtpalP/JSpaFouEGSTdNuE=
Subject key identifier:   B2:74:55:13:B2:0E:B7:3E:C3:50:B4:04:AA:2E:3A:FF:2F:65:BA:3E
Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8
Certificate issuer:       /CN=586C54F03B92F22D9291776AE79350296DB382C8
Certificate serial:       16902E5BD9EA01F3EBDBE0989AEB60CDEC41D654
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 10:17:56 +0000
Manifest this update:     Tue 02 Jun 2026 10:12:56 +0000
Manifest next update:     Wed 03 Jun 2026 11:52:56 +0000
Files and hashes:         1: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: 02NTkzqK/LTvvPzyGLCIQvFXPCqfEGOd/i/Q/MdPoH8=)
                          2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 0BJPNvIKBQFSgToHUrV6asLY9+z375bbGV3qDBCnsE0=)
                          3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 9FI6xrUmyIDtdYUTIVth+tn1sleSPgc7MLrTjmuupW8=)
                          4: 586C54F03B92F22D9291776AE79350296DB382C8.crl (hash: 7p3YmCV5vZ5GqvABrYZhw6PFLVup1N3vWzIHwFHiZfA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl
                          rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:90:2e:5b:d9:ea:01:f3:eb:db:e0:98:9a:eb:60:cd:ec:41:d6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8
        Validity
            Not Before: Jun  2 10:12:56 2026 GMT
            Not After : Jun  3 11:52:56 2026 GMT
        Subject: CN=B2745513B20EB73EC350B404AA2E3AFF2F65BA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:3f:3b:f7:02:90:92:cf:eb:ea:ac:36:85:
                    91:ca:dc:5f:2f:d5:d3:73:8f:9a:49:05:1b:f4:3f:
                    79:90:cb:c3:2a:89:07:85:89:a8:97:39:e3:aa:65:
                    64:af:fb:e8:76:eb:af:75:fa:58:9b:b7:9f:e1:80:
                    69:86:1b:07:7c:13:08:16:b6:57:63:77:df:6a:dc:
                    45:a4:a4:99:c4:57:1b:27:41:c7:ad:3e:41:a0:6a:
                    1b:01:8c:d8:b2:dd:1f:a6:de:b5:cc:7e:93:c7:6a:
                    6f:c5:cd:d4:ac:af:25:7c:71:af:e9:c7:ba:f9:59:
                    81:d5:cc:9e:fe:92:cc:5e:9b:29:7c:cb:3d:e3:3b:
                    ad:e8:6d:e9:e6:75:1d:94:40:41:8c:39:98:e3:7f:
                    e4:1e:a9:e1:80:9c:8f:7c:cc:b9:38:0f:f5:06:06:
                    dc:9a:28:7a:bd:ff:ed:ae:11:3e:96:19:c1:71:bc:
                    06:69:6d:2d:99:4a:de:d6:d2:cf:ec:5f:cc:cd:0f:
                    5e:93:6c:69:1c:13:8f:56:9f:cf:77:d2:dc:b0:3e:
                    f4:69:9b:e2:00:a9:52:64:54:66:98:8a:ea:d9:e7:
                    b0:ac:fd:43:26:75:0f:5d:bb:e0:42:05:88:90:8c:
                    c9:8b:52:d7:9b:12:36:64:f6:c5:d0:e9:24:86:45:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:74:55:13:B2:0E:B7:3E:C3:50:B4:04:AA:2E:3A:FF:2F:65:BA:3E
            X509v3 Authority Key Identifier:
                keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:f0:c4:d7:31:ae:95:8f:28:10:d0:a1:00:71:bd:13:ab:
         dd:5f:14:ee:2c:be:3d:d6:20:48:7f:6d:16:e9:4b:62:53:30:
         8b:b7:5c:37:18:48:29:69:7c:8c:7b:6a:a8:8b:46:1a:87:8f:
         d7:74:54:44:41:6b:a8:aa:0e:88:62:22:44:66:a7:c2:d0:41:
         87:f3:73:23:6f:61:8f:23:b7:d6:bc:f2:a4:34:36:01:d0:05:
         08:a6:e2:c8:55:f0:54:af:75:bf:ea:5e:f4:15:18:7e:a9:f5:
         5c:a2:dc:e9:ee:d0:02:15:fd:59:19:65:0d:78:e9:81:37:f5:
         45:bf:dd:b5:16:1c:7d:58:9d:71:35:24:ca:bc:9a:cb:32:6e:
         43:49:55:7f:0b:98:84:6d:be:8d:6d:f3:0a:60:a2:6d:24:ae:
         64:f3:6c:d7:8a:0b:6d:c0:16:5d:4a:cf:9b:15:e7:4e:42:d4:
         6f:c8:f3:ea:47:8e:49:9b:4f:7c:79:93:ba:72:e2:df:2b:ae:
         c7:44:0c:a8:bd:d1:e6:61:03:81:1f:3c:3a:85:ce:56:70:3b:
         da:d1:8a:95:6d:20:04:0a:d0:a6:c4:b2:bd:62:08:5e:47:9d:
         1a:da:ef:26:8f:e8:df:3c:9d:7a:50:7d:05:70:6c:f8:02:c7:
         91:bb:99:d4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFpAuW9nqAfPr2+CYmutgzexB1lQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2
REIzODJDODAeFw0yNjA2MDIxMDEyNTZaFw0yNjA2MDMxMTUyNTZaMDMxMTAvBgNV
BAMTKEIyNzQ1NTEzQjIwRUI3M0VDMzUwQjQwNEFBMkUzQUZGMkY2NUJBM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYz879wKQks/r6qw2hZHK3F8v
1dNzj5pJBRv0P3mQy8MqiQeFiaiXOeOqZWSv++h26691+libt5/hgGmGGwd8EwgW
tldjd99q3EWkpJnEVxsnQcetPkGgahsBjNiy3R+m3rXMfpPHam/FzdSsryV8ca/p
x7r5WYHVzJ7+ksxemyl8yz3jO63obenmdR2UQEGMOZjjf+QeqeGAnI98zLk4D/UG
BtyaKHq9/+2uET6WGcFxvAZpbS2ZSt7W0s/sX8zND16TbGkcE49Wn8930tywPvRp
m+IAqVJkVGaYiurZ57Cs/UMmdQ9du+BCBYiQjMmLUtebEjZk9sXQ6SSGRYvVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsnRVE7IOtz7DULQEqi46/y9luj4wHwYDVR0j
BBgwFoAUWGxU8DuS8i2SkXdq55NQKW2zgsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzYyMGI0MjMtZGQ1ZC00NDhmLWJiZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAz
QjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2REIzODJDOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81ODZDNTRGMDNCOTJGMjJEOTI5MTc3NkFFNzkzNTAyOTZEQjM4
MkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi
ZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUw
Mjk2REIzODJDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH+68MTXMa6VjygQ0KEAcb0Tq91fFO4svj3W
IEh/bRbpS2JTMIu3XDcYSClpfIx7aqiLRhqHj9d0VERBa6iqDohiIkRmp8LQQYfz
cyNvYY8jt9a88qQ0NgHQBQim4shV8FSvdb/qXvQVGH6p9Vyi3Onu0AIV/VkZZQ14
6YE39UW/3bUWHH1YnXE1JMq8mssybkNJVX8LmIRtvo1t8wpgom0krmTzbNeKC23A
Fl1Kz5sV505C1G/I8+pHjkmbT3x5k7py4t8rrsdEDKi90eZhA4EfPDqFzlZwO9rR
ipVtIAQK0KbEsr1iCF5HnRra7yaP6N88nXpQfQVwbPgCx5G7mdQ=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:01:37 2026 by rpki-client