Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
File:                     3693BDB8D9539D53978D42B71411F72DA033C8CE.mft (raw, json)
Hash identifier:          fRqXu5Om54MgKNxqxZ8nhu9cAlk4DLlSlWCuqYxGJpw=
Subject key identifier:   77:1D:B6:D2:10:79:8B:F5:9B:60:1C:F3:DD:6A:B9:6D:01:8A:16:F6
Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE
Certificate issuer:       /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
Certificate serial:       28CA97A1001DE438C91BBD88C3B9E47CAF5CEA17
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 15:23:43 +0000
Manifest this update:     Tue 02 Jun 2026 15:18:43 +0000
Manifest next update:     Wed 03 Jun 2026 15:59:43 +0000
Files and hashes:         1: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: c8/N6Mnq9mJVhr1EK8ir1JGtt4U3UW5BenMICe3Zx1c=)
                          2: 3693BDB8D9539D53978D42B71411F72DA033C8CE.crl (hash: 8SWGaqQmhkJq5+/bwLWjBNIkEf8crwKkxCRUmkHUivk=)
                          3: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: bAc9RLO23BGn7FV3ehHaNXdYHbfpmRikpiaRJEbpm9w=)
                          4: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: WqTCn5j59dOFJUOOhy3KFyXF/4R8dQGK4UV0a5vcULQ=)
                          5: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: ygnIvxWNgcK1plnIZrJxs3dfEQPzyHrhskTC9g4HRXE=)
                          6: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: jSE6GYUud3AuGy6/ruvI9yrqiBFhTM+Gr4dy4Eh9xGg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl
                          rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 15:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ca:97:a1:00:1d:e4:38:c9:1b:bd:88:c3:b9:e4:7c:af:5c:ea:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
        Validity
            Not Before: Jun  2 15:18:43 2026 GMT
            Not After : Jun  3 15:59:43 2026 GMT
        Subject: CN=771DB6D210798BF59B601CF3DD6AB96D018A16F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:ed:01:f2:89:e9:c6:6c:d2:e4:a7:f6:1b:
                    53:4f:fd:41:80:32:31:d7:a8:17:4e:fe:ca:fa:0a:
                    bc:05:b9:56:ec:1c:cc:ad:7a:49:13:30:ba:37:9e:
                    da:da:8f:46:c4:f9:d0:06:91:e4:27:e8:21:b1:35:
                    60:c1:2e:19:ef:9d:8b:22:d6:77:e2:6a:1c:d4:c6:
                    e3:aa:f1:e3:bd:c1:3d:32:73:da:9f:04:e6:e0:c1:
                    62:1b:b1:c9:a9:0b:c7:aa:a9:08:1c:84:b8:eb:f3:
                    65:09:d4:9f:9e:1a:0f:af:5d:48:ce:2d:8c:0c:29:
                    49:b3:9f:8e:21:6f:f6:aa:fb:ed:b0:29:d2:72:41:
                    b4:99:15:ea:b4:48:60:46:be:fd:97:22:53:7e:c1:
                    61:41:01:08:06:98:be:90:61:65:f7:83:f7:86:fa:
                    7b:5d:62:22:e6:09:54:1f:a5:a7:82:a7:15:70:3d:
                    37:d3:08:26:46:44:d5:dd:65:96:bd:56:53:c2:36:
                    d8:e1:01:b3:42:f2:ea:88:81:f5:e6:5a:8d:04:8a:
                    c8:8b:8e:72:b5:54:2b:55:0b:5a:14:25:53:21:07:
                    3c:e4:3b:07:56:cb:bb:7c:0e:9d:75:8e:77:6d:ce:
                    22:08:52:ee:6d:7d:db:79:c7:b9:44:20:9a:7c:ce:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1D:B6:D2:10:79:8B:F5:9B:60:1C:F3:DD:6A:B9:6D:01:8A:16:F6
            X509v3 Authority Key Identifier:
                keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:81:1e:c6:52:83:c7:dc:51:17:cf:a9:de:09:84:94:ea:98:
         d0:8d:2a:2c:5f:55:7c:69:e2:00:19:c9:ee:2d:e4:cb:dc:e3:
         f0:aa:91:00:df:7d:a4:8d:b0:d2:0d:21:93:2a:4d:32:c0:80:
         41:6d:a0:b4:67:12:a6:33:9d:af:a2:60:b5:b7:56:9a:7d:48:
         45:a5:01:8c:f5:b4:4c:7b:89:e9:5e:f5:b0:c3:4b:d9:76:27:
         b6:02:70:03:97:62:af:58:1a:ba:33:13:41:62:94:1e:87:0b:
         3a:9b:3e:30:e1:22:35:49:29:22:fb:4c:e5:06:b7:1a:08:3c:
         72:49:0b:06:6d:5b:d0:a1:69:dd:e3:d3:be:8f:2f:59:24:4e:
         bf:d5:0a:8e:5c:3a:1f:00:0b:75:e2:ab:90:92:8d:dd:b0:62:
         03:66:34:51:d4:6b:12:78:21:67:b2:fd:63:dc:ab:c4:df:1d:
         22:dd:23:98:3b:28:fd:d7:5d:de:d0:78:d7:1a:76:ce:4d:e8:
         c9:8a:39:aa:ef:9a:bc:ef:15:79:89:ff:7e:18:52:d9:5e:85:
         fc:17:31:a5:4b:5a:a2:9a:a6:62:1a:55:3c:f8:f7:c6:fe:ad:
         a6:64:7e:e1:a5:69:54:69:12:6c:ed:3f:61:3b:68:7b:5f:f6:
         e6:85:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:04:47 2026 by rpki-client