Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft
File:                     78A2C1B7FD05098A611E198E8481B7297F924590.mft (raw, json)
Hash identifier:          /AfsfFiDFwjd2xRiwYbLfl3Dn6tiHl/gGEF/SAZ60Yw=
Subject key identifier:   A1:7D:70:42:96:4F:DA:57:35:CA:D3:B0:FD:33:7E:A2:07:F7:A8:43
Authority key identifier: 78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90
Certificate issuer:       /CN=78A2C1B7FD05098A611E198E8481B7297F924590
Certificate serial:       77DE43BCA8964FECA8CEF57F1F3D0CFDDA955DCB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 15:13:29 +0000
Manifest this update:     Tue 02 Jun 2026 15:08:29 +0000
Manifest next update:     Wed 03 Jun 2026 16:46:29 +0000
Files and hashes:         1: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: I4d4M5kb/PaS52EXblXxmrUeQhD789o5zOZWBGwmGC8=)
                          2: 78A2C1B7FD05098A611E198E8481B7297F924590.crl (hash: xlWrR/0aL9lH5Masl7w3sjDL9a+w2as72H+hF0ob0U0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl
                          rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 16:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:de:43:bc:a8:96:4f:ec:a8:ce:f5:7f:1f:3d:0c:fd:da:95:5d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A2C1B7FD05098A611E198E8481B7297F924590
        Validity
            Not Before: Jun  2 15:08:29 2026 GMT
            Not After : Jun  3 16:46:29 2026 GMT
        Subject: CN=A17D7042964FDA5735CAD3B0FD337EA207F7A843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:1a:24:1d:e9:6c:53:29:29:bb:f8:c4:1a:
                    45:40:70:b7:76:35:33:52:69:4d:f0:aa:8e:44:92:
                    2d:a3:e2:3b:25:8a:91:f1:99:4d:e7:ad:1c:9d:42:
                    4b:e6:fe:e9:83:22:f9:4f:f7:97:a8:80:22:64:1d:
                    41:24:5e:2b:98:77:05:4d:1b:aa:09:15:5f:89:0f:
                    0c:d3:01:32:74:f5:02:e0:0a:dd:41:be:56:55:17:
                    e4:2c:75:1b:98:9d:1d:1b:1b:66:40:69:1e:61:07:
                    c5:5f:93:5f:37:8e:40:7c:f5:a1:b4:95:0f:49:1c:
                    ac:b2:f8:55:54:66:14:17:9e:b6:26:66:71:b1:a9:
                    1d:bb:b9:bb:8e:e5:1b:a2:d9:95:6d:7f:b6:4b:12:
                    35:60:a4:bc:82:c5:fb:60:d4:5b:98:70:49:df:40:
                    4a:18:63:cb:0c:d4:4f:fd:20:1b:38:74:a0:2d:42:
                    08:5c:77:07:a4:33:34:e2:2e:55:1e:06:ce:0b:4c:
                    03:b7:bb:b9:c8:fa:c2:57:8e:a0:61:1a:9e:70:c9:
                    29:0f:68:2d:2b:74:01:3b:ef:65:d4:e2:12:ae:34:
                    7e:55:12:d4:b7:5c:87:c2:1e:3c:ee:6b:e3:83:c4:
                    51:f8:19:97:c3:3c:7f:d4:ee:80:5e:e1:62:c4:6a:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7D:70:42:96:4F:DA:57:35:CA:D3:B0:FD:33:7E:A2:07:F7:A8:43
            X509v3 Authority Key Identifier:
                keyid:78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:61:d0:73:81:4c:09:2d:30:bf:5e:53:74:b3:d4:cb:b7:
         8d:9f:ff:f2:cb:d2:ea:63:91:10:54:c1:c0:55:77:bb:10:2d:
         50:48:67:66:74:05:f5:4b:1c:2e:28:d2:69:8e:44:58:cb:b9:
         f0:4b:68:9e:60:17:f1:b4:5f:27:19:3c:1c:c5:34:e3:b1:8b:
         67:fe:5c:8d:4b:74:43:74:ed:3f:ea:b8:88:df:13:d5:35:ac:
         be:c0:d4:5e:94:44:d9:1f:53:08:b0:c7:66:01:b7:3a:33:e2:
         f1:91:59:9e:f5:08:7f:7e:2d:31:71:00:06:97:d5:fb:36:4f:
         d4:5b:0e:95:99:26:ba:9f:f5:a9:e8:9b:2b:fa:96:65:29:b0:
         e9:83:73:c0:db:09:32:40:49:45:51:a5:6b:11:d2:a3:6d:d7:
         2f:6e:f1:26:50:9b:61:59:35:cc:df:41:73:4f:4c:b3:77:6d:
         60:46:6d:67:2b:81:5b:2f:2b:49:8a:cc:ce:3b:32:0a:52:de:
         48:42:e0:2a:8b:bf:9d:cf:32:b7:05:c8:e7:67:4b:31:f0:96:
         73:79:4b:b3:d0:a1:d9:68:f0:16:11:a9:02:0a:c3:33:43:cc:
         f1:40:84:b1:48:d8:39:95:26:1e:ea:85:ad:ee:13:e8:ae:e3:
         2a:96:b0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:23:43 2026 by rpki-client