Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
File:                     A795AFC3ACE68FD4EB18D45F48148F669260F261.mft (raw, json)
Hash identifier:          GzhAEzKj0IPQRliyXbwdBTAN+zfq8XBUIZt+fbVTX6s=
Subject key identifier:   32:0D:87:9A:C3:48:69:32:84:14:5E:48:EA:70:F1:7B:D2:B1:18:34
Authority key identifier: A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61
Certificate issuer:       /CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
Certificate serial:       28BB9C62025E0EE96EAD26BAEEF6173B5E52731D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 19:59:14 +0000
Manifest this update:     Tue 02 Jun 2026 19:54:14 +0000
Manifest next update:     Wed 03 Jun 2026 22:39:14 +0000
Files and hashes:         1: A795AFC3ACE68FD4EB18D45F48148F669260F261.crl (hash: GymM3isKeOSph0cHyyXPiaO08Q4YVFV1Y+AbKUFj3v8=)
                          2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: pmHLxMdkC8jCCynXCQwBWuDUZCyBP7BmUKKeGNQ6X6A=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl
                          rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bb:9c:62:02:5e:0e:e9:6e:ad:26:ba:ee:f6:17:3b:5e:52:73:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
        Validity
            Not Before: Jun  2 19:54:14 2026 GMT
            Not After : Jun  3 22:39:14 2026 GMT
        Subject: CN=320D879AC348693284145E48EA70F17BD2B11834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:97:77:b8:ee:5d:ab:27:5a:c0:fa:7e:1a:
                    13:8a:f1:62:9d:9a:b2:34:50:ea:c8:f1:8b:f2:cb:
                    1e:24:4e:77:5b:77:f2:3c:39:9e:b2:78:92:e7:18:
                    59:03:2a:22:0e:c3:8e:85:e7:dc:87:5a:63:6c:82:
                    fa:a3:f5:39:94:92:bd:cb:02:0f:f8:66:f5:4a:75:
                    19:6b:68:3a:11:30:6b:20:32:06:a4:4d:c2:03:00:
                    f2:0c:e2:ca:ff:94:42:78:bb:fa:69:c4:ee:17:a0:
                    c5:68:dc:5b:d0:78:fb:49:ec:04:b5:2c:ab:c6:93:
                    be:bf:5a:af:44:46:3f:c2:90:9f:73:c5:c6:c1:9e:
                    40:35:d9:73:56:f3:23:91:a3:63:80:f9:88:34:5a:
                    90:f0:70:3b:bf:50:eb:78:5f:7d:41:50:c5:7e:d1:
                    3f:9a:09:2f:84:44:83:38:b6:58:b9:ae:4d:be:04:
                    55:ca:25:8e:46:02:f6:7b:c9:88:96:5a:d2:9d:14:
                    62:78:b8:64:57:dd:b2:a5:26:ab:c0:2e:02:d1:92:
                    6e:68:16:2b:02:50:7b:e0:0a:fe:f5:b3:01:a1:c6:
                    2e:d4:10:ba:68:94:45:c8:20:0a:65:2a:f8:09:6f:
                    88:5b:f1:85:17:61:21:64:6a:7e:b3:22:42:28:16:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0D:87:9A:C3:48:69:32:84:14:5E:48:EA:70:F1:7B:D2:B1:18:34
            X509v3 Authority Key Identifier:
                keyid:A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8d:b4:49:fc:7a:eb:45:6c:6d:0f:d6:63:f0:b2:b9:1f:1c:
         f3:8f:06:78:f3:1a:98:8c:1e:77:30:3e:cb:22:b9:a3:d6:9c:
         98:51:80:ba:df:3a:d6:a4:63:4d:b6:51:87:8a:e7:52:25:ff:
         a1:df:30:8e:8f:8d:3c:6e:b6:50:03:e7:fc:13:d1:cf:35:32:
         66:c6:ae:cf:3d:ea:9b:2e:49:24:dd:05:be:d4:9b:1b:b9:8e:
         96:1b:64:1e:4d:45:b7:6c:14:3f:ac:9c:b4:5c:5e:47:90:06:
         54:94:d9:62:c5:1c:f8:6e:8e:b3:92:ae:da:06:4b:1a:7c:92:
         2d:21:9f:6f:a4:21:6f:da:59:50:8a:24:0e:57:42:75:4d:8e:
         40:e0:9a:6f:34:18:e0:46:6a:c0:57:d1:1e:bd:f1:3a:b9:82:
         c6:3e:32:65:14:d6:6f:b9:d0:ae:2b:da:0a:81:c8:51:8b:94:
         61:ad:3e:2c:56:a1:89:42:5a:85:29:ab:8a:80:ac:eb:26:87:
         1c:23:45:4d:23:41:7b:0d:a6:29:ab:c7:c4:b2:fd:84:7f:3c:
         23:9a:bd:d1:cb:a1:e9:1d:79:03:e2:76:35:81:cd:5e:83:ac:
         00:0c:0d:5c:1a:16:0c:56:7f:41:7c:42:5b:37:57:70:84:6c:
         02:b8:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:16 2026 by rpki-client