Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
File:                     BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft (raw, json)
Hash identifier:          No6g3nabW6ELIsV7LxNtv6uk/1ljHHv9LgKU+kDOSxg=
Subject key identifier:   3A:A7:24:2B:9D:AA:BA:C6:ED:37:FE:7B:68:20:7D:29:D1:59:F8:FB
Authority key identifier: BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB
Certificate issuer:       /CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
Certificate serial:       715680DD5D348E4043B403151A5BD8E7AA718874
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 19:28:36 +0000
Manifest this update:     Tue 02 Jun 2026 19:23:36 +0000
Manifest next update:     Wed 03 Jun 2026 22:23:36 +0000
Files and hashes:         1: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: F8rn8naCPvDCkUhjOQElNO8VO2STo0GIaHG7gs8zRHY=)
                          2: BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl (hash: X3yv4kofvfsIDeeGO7nPi0yPrQ9WTLsAuzJjDAWLCSk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl
                          rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:56:80:dd:5d:34:8e:40:43:b4:03:15:1a:5b:d8:e7:aa:71:88:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB
        Validity
            Not Before: Jun  2 19:23:36 2026 GMT
            Not After : Jun  3 22:23:36 2026 GMT
        Subject: CN=3AA7242B9DAABAC6ED37FE7B68207D29D159F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:31:3f:7e:5d:0d:1f:21:d4:b3:88:2d:ae:
                    df:4e:67:c9:5e:30:80:04:5e:e1:2c:10:4a:74:3d:
                    0f:e8:3a:16:84:2d:67:d5:36:02:76:a1:8c:24:08:
                    b1:6b:b9:1a:6d:f4:18:55:ef:80:cf:64:43:d7:db:
                    9c:ae:a5:52:f2:a1:b2:02:c3:08:ae:74:05:da:54:
                    58:25:f8:1b:40:75:bf:1e:e3:6c:60:0e:df:91:6c:
                    b4:84:05:29:e9:b2:dd:e1:46:3e:3b:99:fb:d2:ba:
                    98:55:4d:d3:47:2d:95:8a:52:f0:70:7d:fa:b3:f3:
                    fc:3b:91:80:15:c2:fa:9c:ef:f5:39:2c:cc:db:36:
                    44:23:e4:19:0d:06:c7:4d:69:18:9e:b0:8a:e6:af:
                    fd:36:df:15:c0:54:e3:61:b2:09:04:1d:91:4d:25:
                    0d:59:d0:7d:a1:92:75:a2:4a:ec:6d:8c:a4:f5:f9:
                    d6:42:ab:21:a6:96:32:d2:43:84:fe:82:53:94:28:
                    35:81:9c:2d:0a:70:01:26:da:67:b6:e6:c2:40:78:
                    1c:50:79:e4:06:be:2b:4d:cd:a1:13:0e:c1:50:0b:
                    ce:7d:61:6a:c1:8a:db:b2:26:e4:67:07:38:f5:4c:
                    8a:41:ec:98:6b:c4:f9:dd:9e:f2:03:9a:b2:71:29:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A7:24:2B:9D:AA:BA:C6:ED:37:FE:7B:68:20:7D:29:D1:59:F8:FB
            X509v3 Authority Key Identifier:
                keyid:BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:69:f5:d8:53:8f:69:a4:3c:6c:4a:b7:7c:7b:2b:88:53:23:
         05:65:02:45:38:2b:b4:2e:0e:cb:f9:f4:6e:69:25:8f:95:a5:
         4e:a4:7b:c7:a9:da:9d:4d:24:55:e7:60:7c:bb:f2:ba:54:42:
         8b:f7:69:d6:e9:64:2d:01:4c:25:71:1c:ab:e3:f3:ae:35:d5:
         89:af:5e:7c:44:f2:04:e3:19:cb:be:65:8f:60:94:8c:30:74:
         7a:8f:18:c8:81:1b:4b:9a:2c:bd:d6:74:d5:e1:4d:41:94:ca:
         0c:1e:77:40:5c:9e:63:5a:ea:a5:53:98:76:bd:22:79:97:58:
         44:dd:e8:34:36:18:64:bb:b8:d4:37:6c:22:10:8f:1d:91:07:
         3f:c3:d5:31:71:92:63:f7:59:a2:1d:2b:d4:3e:79:e3:20:f2:
         55:72:87:27:0c:13:95:37:40:76:85:a8:b7:95:84:2a:bd:96:
         ec:25:3a:b3:3a:a3:8d:d4:79:5b:9d:97:7a:5c:07:5a:8e:ba:
         ef:ad:51:bc:42:17:e4:d2:05:33:d4:b8:54:df:9d:b9:08:3a:
         02:07:cc:10:cd:66:a6:30:a2:3e:fc:f4:37:3c:a1:f3:42:bf:
         de:d3:1a:94:b9:75:3b:de:21:bb:2c:98:50:43:7a:0f:b8:f4:
         49:0d:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:16:33 2026 by rpki-client