Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
File:                     D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json)
Hash identifier:          Ln5U4s83MlKr9L+rxsdko2XLABRmOel1RmvMtVNQnbM=
Subject key identifier:   15:8D:8C:F3:0A:BE:CE:9A:79:87:CD:30:ED:5B:CF:45:34:9D:72:DE
Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
Certificate issuer:       /CN=D61B761F0598B8998BF802A069F51103270C6CC0
Certificate serial:       1920E5234AC2E65096297FCAB1B764C7E4942564
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
Manifest number:          13
Signing time:             Fri 15 May 2026 22:29:03 +0000
Manifest this update:     Fri 15 May 2026 22:24:03 +0000
Manifest next update:     Sat 16 May 2026 23:58:03 +0000
Files and hashes:         1: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: 8kDUlzdcG23Qo1wbYPltwWrq/VOwZDX4oOiHjBiPCaw=)
                          2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
                          rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 23:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:20:e5:23:4a:c2:e6:50:96:29:7f:ca:b1:b7:64:c7:e4:94:25:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0
        Validity
            Not Before: May 15 22:24:03 2026 GMT
            Not After : May 16 23:58:03 2026 GMT
        Subject: CN=158D8CF30ABECE9A7987CD30ED5BCF45349D72DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:b4:79:41:3a:f5:7c:8d:dd:a3:5a:ef:cf:
                    93:b1:94:33:99:12:52:87:ae:df:e6:50:fb:2e:28:
                    2e:83:dd:1f:fd:fb:df:20:08:59:23:7f:a8:75:2c:
                    eb:b4:50:43:3f:ba:24:66:a0:7a:4e:c9:2c:5d:ae:
                    5a:21:aa:1f:5f:4a:94:34:e4:8f:9b:91:2d:0f:52:
                    61:8b:2f:5e:ca:01:89:5c:21:f4:d4:90:40:48:9a:
                    4e:5b:d2:a1:aa:35:d1:f7:ca:5b:8f:51:8f:27:53:
                    05:fb:26:8b:da:c1:4a:11:bc:6a:7b:59:70:bf:48:
                    de:14:7f:20:39:eb:86:98:dd:d8:55:51:7f:1c:f5:
                    60:c1:0e:9a:52:67:ef:f7:a8:22:9a:1f:97:b6:99:
                    17:0e:ef:3f:31:26:58:c8:e5:f6:de:df:9e:fb:a5:
                    d5:5d:19:00:d7:68:63:9f:f5:39:48:d6:a3:85:33:
                    af:39:0c:7a:6a:50:05:04:79:22:ac:c6:02:2a:61:
                    45:93:c3:cc:c9:ee:77:ac:cd:51:43:d6:af:59:7b:
                    be:06:31:b0:47:dd:b3:10:62:32:91:45:62:28:82:
                    90:2d:48:31:1d:ea:8a:f4:e0:0d:6d:69:4b:4e:79:
                    8b:03:35:9a:2e:44:c5:77:db:e4:34:cc:8f:32:ca:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8D:8C:F3:0A:BE:CE:9A:79:87:CD:30:ED:5B:CF:45:34:9D:72:DE
            X509v3 Authority Key Identifier:
                keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c1:c3:d3:7d:e3:dd:c3:67:b9:79:cc:4b:1f:24:ce:e9:4a:
         88:ac:c0:e5:44:36:dc:61:93:1a:4e:42:ea:cd:d9:f2:a0:f9:
         11:a9:49:e2:fb:24:2c:1d:54:dc:76:3f:8b:d5:58:4b:19:da:
         ab:05:62:28:1f:9b:0c:c7:e1:f3:19:b5:7e:a5:ea:44:7b:3d:
         6d:e8:6d:5f:c2:54:9d:33:17:bc:07:c7:78:91:39:79:e3:b3:
         b6:ca:f6:7f:33:ee:48:ee:eb:72:d4:2b:66:7d:b3:1d:01:78:
         29:e1:73:5b:e7:74:46:93:23:28:4c:dc:24:dd:17:fb:fc:02:
         6f:d7:2e:66:9c:49:24:7c:c2:3c:8b:a6:fb:25:bc:26:e0:d8:
         fc:46:a6:4c:c3:b7:41:45:fe:2a:e3:1a:ed:fb:dc:f0:49:2d:
         27:d6:a2:c1:d5:cc:b4:8d:f8:3b:0e:ed:8b:da:81:2e:e5:90:
         97:67:5e:ba:4e:a7:94:d7:04:69:6d:b7:59:c2:1f:a4:f7:71:
         02:f7:80:ec:cf:a6:fe:69:db:0f:c9:ef:d1:9c:4c:26:13:c4:
         7e:c3:b7:e6:e6:cf:d6:08:92:22:cc:ec:2c:b0:fd:9b:51:2a:
         58:7f:57:3c:c1:23:07:39:7a:4a:e7:51:0a:09:b0:b8:fb:50:
         90:00:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:40:55 2026 by rpki-client