Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
File:                     149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json)
Hash identifier:          a5J23Q1p+QJ/6HolejfvQfnWDmjDzhO9F3zahEKON0A=
Subject key identifier:   FE:8D:2E:BD:AC:88:FB:A6:B4:87:F8:92:05:7E:11:C4:67:1B:B1:FF
Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
Certificate issuer:       /CN=149E265C01ED66DA98905D22913EE8E5950357C5
Certificate serial:       27ECC99F35244027210803112025280959DBD836
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 21:52:18 +0000
Manifest this update:     Tue 02 Jun 2026 21:47:18 +0000
Manifest next update:     Thu 04 Jun 2026 01:49:18 +0000
Files and hashes:         1: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: aAOOurE7yfak5kxiqgFWuBzYY8XiNnhqKWOvLwrnNTM=)
                          2: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=)
                          3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
                          rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 01:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ec:c9:9f:35:24:40:27:21:08:03:11:20:25:28:09:59:db:d8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5
        Validity
            Not Before: Jun  2 21:47:18 2026 GMT
            Not After : Jun  4 01:49:18 2026 GMT
        Subject: CN=FE8D2EBDAC88FBA6B487F892057E11C4671BB1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:5b:5d:45:a2:2e:ef:66:9a:35:ec:5c:83:
                    fb:6f:20:cf:91:08:79:65:4e:82:aa:6c:88:6d:fa:
                    d0:7b:d3:00:da:8b:bf:ee:3f:ba:37:20:30:e0:ef:
                    05:82:3a:a9:6e:21:c9:84:39:cf:43:7b:3a:16:69:
                    e8:67:cb:32:76:53:84:e5:f2:0c:0b:cc:a4:18:0f:
                    1d:7f:e4:00:72:c6:43:5d:0b:81:f1:eb:db:76:c1:
                    da:59:d9:7f:85:b9:1c:a7:ba:43:62:35:ee:15:23:
                    41:1e:28:4d:42:23:75:e7:cf:1c:c2:25:4a:b5:1e:
                    91:69:2c:b9:46:2f:f0:94:ca:43:72:37:0a:2b:2c:
                    28:fd:2f:bb:1a:b1:9e:24:60:d0:56:9e:15:11:a9:
                    46:99:44:59:c7:a2:34:d2:03:a2:72:e5:9c:a6:ea:
                    9e:7d:68:80:05:5f:0f:1a:a7:fb:05:76:22:72:64:
                    47:04:ba:45:a1:a3:8c:d6:e1:b5:4b:9b:af:9d:1c:
                    a6:55:79:93:73:b7:cb:4b:1a:c2:d2:93:a2:18:f7:
                    c1:32:f6:c3:f8:08:fd:21:76:33:e0:25:cc:f2:f4:
                    dc:40:56:c7:ef:dd:38:5e:fe:fe:83:cf:66:8e:83:
                    13:e5:ac:ed:fe:0b:9f:87:c1:9a:5d:cb:f9:0e:84:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:2E:BD:AC:88:FB:A6:B4:87:F8:92:05:7E:11:C4:67:1B:B1:FF
            X509v3 Authority Key Identifier:
                keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:ed:d2:52:04:26:72:7a:a3:9d:71:00:51:92:b7:ae:89:
         cc:97:4d:fb:97:15:7c:e3:8a:8f:de:97:b2:18:8f:87:23:0c:
         1c:18:49:13:48:f9:1a:9d:b5:a6:b7:8a:be:3e:c9:7d:d7:c8:
         67:71:05:54:9f:c3:30:f4:3e:5b:bb:7f:62:dc:aa:b7:09:31:
         3d:e4:ac:23:2e:f5:f6:99:6f:d4:69:71:23:97:45:13:ab:fd:
         31:5e:76:b0:28:1f:70:81:06:86:87:c8:13:74:1c:0a:82:71:
         c0:56:6f:37:9e:2f:0c:6e:0b:07:b5:3a:f9:50:34:e1:d9:6c:
         ae:ff:e1:53:3c:6a:2c:c4:37:34:8d:87:d2:b8:a0:15:37:31:
         f5:c5:f7:46:05:77:22:31:3c:d2:60:fc:4f:65:0f:ae:03:04:
         3d:8b:f4:4c:90:ff:ab:e1:20:ca:10:de:b7:0d:18:01:0f:8d:
         4d:ee:f6:0a:0a:31:36:43:c3:2a:0a:a9:8d:45:06:b3:34:41:
         83:bd:8c:ea:fe:ba:5d:75:aa:4c:69:14:da:39:60:ed:a5:e8:
         2a:39:69:57:95:a8:a2:d9:89:54:b0:85:3f:88:4a:90:f7:5c:
         1c:59:33:b6:19:e5:e3:03:49:30:2c:76:75:db:7f:b3:c0:c9:
         40:eb:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:53:54 2026 by rpki-client