Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
File:                     08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft (raw, json)
Hash identifier:          4zeyvBG55rg2khhWqpxQR8NjjG6/ArEZVtSI4hjEvaI=
Subject key identifier:   31:01:24:B6:FD:79:A1:95:60:01:97:00:07:05:1B:AE:8D:4F:46:5C
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Certificate issuer:       /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial:       263CE9A7CE9AB4B52B13923A8EAAEA4590E0294D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 17:51:28 +0000
Manifest this update:     Tue 02 Jun 2026 17:46:28 +0000
Manifest next update:     Wed 03 Jun 2026 18:41:28 +0000
Files and hashes:         1: 34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (hash: qqj+W0YE7lPcQQyjA0h+/ikJ5uDXNaW6laVzLp1Qk3I=)
                          2: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: Z/jdDipYuv3lK5eimMJ72Z70XTynWpBlz182XUeNc+E=)
                          3: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: fBaN9jIwXMILmSYsIQ3Ue7JGtw7WhLW8vbb21prGNGk=)
                          4: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: NtkyFz71abqYBOulA/yf0usZVvUpaEttpy+f3u3kpp8=)
                          5: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: jBX/qKx/JGa1Du2q2fgwV/fWVjEIgXCKAL9/GZt06jk=)
                          6: 3130332e33392e31322e302f32322d3232203d3e203633383237.roa (hash: 76gleer34esIgeXzP55Qltcq6KQymYiw2jWBaYJM1Rs=)
                          7: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (hash: MAEO7ACMQfPreayi5zBOy6AnAEF+RmZdQiFdMvjwjTI=)
                          8: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=)
                          9: 3130332e33392e31342e302f32332d3233203d3e203633383237.roa (hash: Lahi4UMwkr7lfFz+tMIIfdkh1kxRlOqmv3Bjync9vmg=)
                          10: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl (hash: iPnWjieH17wC2xKIZUZJIJoSScARs35Gy7LQ3yQMQl0=)
                          11: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: Yobd92nJofxIMDnwcBhGJ8U1ARrNN8Txd0D+kOpJodU=)
                          12: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: L1mfkBCHBmcBCuB53aap/zrreHda+IVKN915WxYStVY=)
                          13: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: hujlKc3DzwZfu+/QrUX39XVrQUFGamfbziw+u/7dNJ0=)
                          14: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=)
                          15: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: 4Q9iFO3TjE/l3D1QG4paADwmfWvHm0qtB66UILaf8Ho=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
                          rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 18:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3c:e9:a7:ce:9a:b4:b5:2b:13:92:3a:8e:aa:ea:45:90:e0:29:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
        Validity
            Not Before: Jun  2 17:46:28 2026 GMT
            Not After : Jun  3 18:41:28 2026 GMT
        Subject: CN=310124B6FD79A1956001970007051BAE8D4F465C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:79:17:56:17:e6:d0:ec:0b:72:73:0b:b3:
                    cb:47:02:b7:cb:54:a2:a4:be:69:99:ae:1b:47:30:
                    5c:4d:9f:85:60:83:ab:85:28:59:71:d5:57:b3:6c:
                    25:f5:4d:bc:a1:db:b2:85:01:2b:20:c2:7a:cf:e6:
                    14:9d:de:cf:ac:d8:98:af:45:f2:08:0b:9f:9d:b3:
                    ac:0d:f6:6a:08:ab:53:3d:6d:85:58:d2:58:34:3a:
                    78:f5:c5:38:fa:04:e7:c8:9a:23:67:46:63:0b:74:
                    fc:3c:f9:88:db:22:f5:a8:55:ac:2c:4e:c1:f3:a0:
                    59:f3:8c:9f:30:4d:be:90:b6:d5:84:61:3f:5f:a8:
                    6a:fa:b7:16:d5:6a:d5:f6:25:20:32:3d:54:ca:13:
                    4d:00:c1:2e:90:da:5b:02:c4:1f:3e:40:5e:d0:58:
                    50:f4:5c:c1:c3:80:75:4d:2a:0a:4b:38:79:09:6f:
                    eb:73:74:16:0b:dc:6f:03:a0:15:45:d0:32:3f:95:
                    10:03:01:77:aa:46:58:a4:8e:bd:0c:5f:bf:32:d2:
                    c4:1b:e3:e4:49:a6:fb:8b:74:b3:98:31:74:9c:c2:
                    f0:5e:a4:d7:23:17:3d:6c:3f:c2:90:be:3d:a4:ff:
                    bc:9a:f4:62:b1:a5:d1:a9:d2:5a:ea:8f:f0:1e:f5:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:01:24:B6:FD:79:A1:95:60:01:97:00:07:05:1B:AE:8D:4F:46:5C
            X509v3 Authority Key Identifier:
                keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:ff:33:9f:24:f0:50:bb:a7:ae:07:5c:d3:9c:eb:e4:cf:
         98:f4:ff:47:bf:81:c4:fd:ae:b5:14:60:56:cc:30:51:1a:a4:
         02:f0:bb:70:f9:fe:5d:a8:05:a2:2e:16:6f:fa:e8:3a:1a:32:
         be:81:23:d0:e7:c1:e5:76:53:70:1e:c2:f6:22:1c:44:5b:37:
         54:88:04:62:67:64:ce:92:0e:5f:2b:ee:5a:ac:87:8d:4a:fa:
         35:04:9c:f5:99:0e:63:6b:c2:d4:a0:ca:29:1e:cc:e4:00:e8:
         b4:77:d9:c6:bc:e3:bc:f9:4b:d4:a2:eb:d1:9f:a5:27:73:38:
         88:0d:a1:a5:42:3d:d0:c3:00:5d:b7:31:74:11:5d:0b:d5:71:
         e4:46:7d:9a:74:4e:6c:e4:f8:1c:15:34:24:e7:3e:19:fd:aa:
         9c:89:c4:b2:45:83:a2:c4:20:24:89:99:65:05:b8:33:29:a1:
         86:14:79:d3:e8:0f:f2:bd:f4:08:af:a3:1d:93:b7:06:aa:fe:
         7b:01:c1:f7:53:61:07:cd:b4:2b:19:85:b3:bf:81:5a:54:ee:
         8c:8d:07:ef:66:3d:18:32:e5:a8:bd:e2:3b:a4:c6:b2:bf:ad:
         46:49:fb:fc:76:d3:69:b2:af:76:4e:af:ba:89:17:70:b2:e4:
         53:e2:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:24:38 2026 by rpki-client