Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
File:                     98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft (raw, json)
Hash identifier:          Q0O5kmBSSRWK0FcatPo61teiTi3ixGbexOpT74V0b4A=
Subject key identifier:   72:91:52:6E:91:63:D0:C0:87:29:39:33:1C:1C:AD:9F:5B:5B:96:35
Authority key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82
Certificate issuer:       /CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
Certificate serial:       31DA0234EBCB33F80ADB8517C647B6A33547B710
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 18:52:49 +0000
Manifest this update:     Tue 02 Jun 2026 18:47:49 +0000
Manifest next update:     Wed 03 Jun 2026 19:28:49 +0000
Files and hashes:         1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 0MQ38XgUhNylT2FJTmCje8IKQU4OOM7d6KSKfwgJWFw=)
                          2: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl (hash: fyNNun90xzcBIjUfwP90KLocof+xCsv0lbj8yNBQvrk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl
                          rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 19:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:da:02:34:eb:cb:33:f8:0a:db:85:17:c6:47:b6:a3:35:47:b7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82
        Validity
            Not Before: Jun  2 18:47:49 2026 GMT
            Not After : Jun  3 19:28:49 2026 GMT
        Subject: CN=7291526E9163D0C0872939331C1CAD9F5B5B9635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ee:b1:94:12:d5:81:a5:d3:d4:1b:38:ed:df:
                    d3:81:14:9e:a7:a8:db:b0:45:ea:df:42:f5:ed:56:
                    10:d1:26:ad:49:41:1b:47:4d:e9:c1:5e:b8:12:04:
                    ea:21:15:f1:f0:b8:4b:e3:b0:a6:1f:54:b3:7a:4e:
                    9e:a8:39:19:17:f6:b4:0f:68:4c:4d:85:c2:36:c9:
                    12:10:03:fa:54:a0:47:6f:16:a9:b1:75:0f:b0:dc:
                    b8:a7:7a:1b:59:6d:54:26:a6:ab:68:85:57:8b:10:
                    1b:2f:f9:c8:63:3f:ae:3d:f9:95:85:67:a1:73:8b:
                    85:d7:c5:0c:30:06:e9:80:ec:c8:fa:43:d0:8e:9c:
                    9d:76:cb:53:14:c8:e2:0a:fd:c5:4f:e8:86:39:ed:
                    46:44:a1:21:dc:e6:ca:25:0b:2c:52:d8:3f:88:12:
                    2d:5d:0f:7d:66:c0:f8:da:a4:1b:92:58:e1:f5:bf:
                    25:f5:2d:5a:94:64:5e:6e:e8:05:ac:c7:e7:2a:3d:
                    81:b2:88:a4:a7:a6:66:3d:5c:31:96:47:74:65:4f:
                    95:3c:ea:8a:b5:a4:bf:b5:d3:3f:50:4f:d0:53:dd:
                    86:ec:0f:b8:28:13:e9:33:f0:8e:21:de:21:7f:11:
                    8b:c6:44:68:38:9f:e3:77:36:47:3c:43:d2:a8:36:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:91:52:6E:91:63:D0:C0:87:29:39:33:1C:1C:AD:9F:5B:5B:96:35
            X509v3 Authority Key Identifier:
                keyid:98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:da:48:e5:ba:51:b8:31:83:47:2e:af:f6:1f:4c:38:ba:18:
         ce:a6:04:8b:7a:52:06:8f:c8:05:be:0a:1b:45:27:2b:18:8a:
         07:4a:39:0d:15:b7:47:12:22:a4:27:96:32:fc:f0:55:f9:b6:
         42:8c:3f:ba:f6:d9:ff:6f:ad:54:92:d7:39:a1:e8:fa:dd:84:
         50:e8:f1:b6:2c:2c:a5:17:e8:19:55:bf:61:c6:07:c3:99:73:
         7f:9d:af:9c:79:4a:bd:e7:9c:d0:44:8e:9b:ee:b9:76:0e:92:
         40:1e:a6:9c:e2:5e:bb:3f:13:7b:39:35:20:77:92:29:f9:01:
         41:07:b8:ad:9c:14:fa:0b:e5:7e:cc:82:f8:7f:43:cd:cd:7b:
         71:ee:d8:2a:a3:c2:d6:62:70:71:d4:1a:93:11:85:32:5d:9e:
         d6:df:6b:d6:37:72:f3:1f:20:47:df:a5:55:f8:d4:80:22:68:
         c3:80:09:a5:8d:56:04:58:9c:2b:81:4b:63:83:35:7f:cc:73:
         b9:11:60:d5:b7:b0:89:3b:19:f2:8a:40:d7:15:74:8d:ed:50:
         5b:9c:96:dc:2e:33:d6:26:72:4c:b8:42:ed:35:cf:bc:f5:9e:
         ca:1c:7f:ee:4c:f9:d5:da:1c:16:5c:24:53:7a:fb:12:11:fa:
         e8:34:6f:5f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMdoCNOvLM/gK24UXxke2ozVHtxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFG
RUJENUI4MjAeFw0yNjA2MDIxODQ3NDlaFw0yNjA2MDMxOTI4NDlaMDMxMTAvBgNV
BAMTKDcyOTE1MjZFOTE2M0QwQzA4NzI5MzkzMzFDMUNBRDlGNUI1Qjk2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs7rGUEtWBpdPUGzjt39OBFJ6n
qNuwRerfQvXtVhDRJq1JQRtHTenBXrgSBOohFfHwuEvjsKYfVLN6Tp6oORkX9rQP
aExNhcI2yRIQA/pUoEdvFqmxdQ+w3LinehtZbVQmpqtohVeLEBsv+chjP649+ZWF
Z6Fzi4XXxQwwBumA7Mj6Q9COnJ12y1MUyOIK/cVP6IY57UZEoSHc5solCyxS2D+I
Ei1dD31mwPjapBuSWOH1vyX1LVqUZF5u6AWsx+cqPYGyiKSnpmY9XDGWR3RlT5U8
6oq1pL+10z9QT9BT3YbsD7goE+kz8I4h3iF/EYvGRGg4n+N3Nkc8Q9KoNq+/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcpFSbpFj0MCHKTkzHBytn1tbljUwHwYDVR0j
BBgwFoAUmOGMV894S17LZHb/2jQDof69W4IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWY5YzQ0NmYtZDk3MS00YjVlLWIyNjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdD
Rjc4NEI1RUNCNjQ3NkZGREEzNDAzQTFGRUJENUI4Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85OEUxOEM1N0NGNzg0QjVFQ0I2NDc2RkZEQTM0MDNBMUZFQkQ1
QjgyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy
NjktMWU4M2QzYTE0ZmVmLzAvOThFMThDNTdDRjc4NEI1RUNCNjQ3NkZGREEzNDAz
QTFGRUJENUI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAXaSOW6Ubgxg0cur/YfTDi6GM6mBIt6UgaP
yAW+ChtFJysYigdKOQ0Vt0cSIqQnljL88FX5tkKMP7r22f9vrVSS1zmh6PrdhFDo
8bYsLKUX6BlVv2HGB8OZc3+dr5x5Sr3nnNBEjpvuuXYOkkAeppziXrs/E3s5NSB3
kin5AUEHuK2cFPoL5X7Mgvh/Q83Ne3Hu2CqjwtZicHHUGpMRhTJdntbfa9Y3cvMf
IEffpVX41IAiaMOACaWNVgRYnCuBS2ODNX/Mc7kRYNW3sIk7GfKKQNcVdI3tUFuc
ltwuM9Ymcky4Qu01z7z1nsocf+5M+dXaHBZcJFN6+xIR+ug0b18=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:26:20 2026 by rpki-client