Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
File:                     04D52083D82721F61634E6629E16C7C7A870B9F5.mft (raw, json)
Hash identifier:          9a76NyjLWyB88wTavNH/zAy6pVN27mIi77r0a4v+5Q8=
Subject key identifier:   88:F6:EF:98:56:BF:F2:C6:A8:45:FA:96:07:6F:A0:38:77:6A:6B:B7
Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
Certificate issuer:       /CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Certificate serial:       3170B0A0E52206C656B8AF4625E39F3751004FA2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 00:55:51 +0000
Manifest this update:     Wed 03 Jun 2026 00:50:51 +0000
Manifest next update:     Thu 04 Jun 2026 01:12:51 +0000
Files and hashes:         1: 04D52083D82721F61634E6629E16C7C7A870B9F5.crl (hash: JQCw4wI9RgpSzrcMtzkJhuTseMBeVui71ZZNxII3cxY=)
                          2: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=)
                          3: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
                          rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 01:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:70:b0:a0:e5:22:06:c6:56:b8:af:46:25:e3:9f:37:51:00:4f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5
        Validity
            Not Before: Jun  3 00:50:51 2026 GMT
            Not After : Jun  4 01:12:51 2026 GMT
        Subject: CN=88F6EF9856BFF2C6A845FA96076FA038776A6BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8e:f2:68:05:81:cf:19:8c:02:02:b9:e9:03:
                    2e:02:4e:12:6c:6e:43:cb:5f:c0:3e:43:7a:06:32:
                    96:ac:3b:db:b2:0f:c1:98:c8:9a:bf:ce:b2:4d:04:
                    81:ff:ff:1c:35:62:91:4b:dc:fd:48:38:36:77:6f:
                    d4:f7:43:8e:32:9e:c7:06:07:89:56:27:e4:d3:b0:
                    50:ae:4c:4b:6d:fa:cf:04:d5:dd:02:bd:9c:6f:35:
                    68:b3:85:fb:04:92:6b:d1:1a:17:71:10:37:b2:07:
                    c6:0a:32:1d:ee:48:5e:ef:de:14:56:82:ce:25:91:
                    a4:f6:6f:e9:aa:54:38:bc:52:27:a8:2b:66:03:cf:
                    3b:92:f9:02:62:fd:8d:cf:01:c1:0c:c1:55:5d:94:
                    78:16:39:13:59:7b:c8:3f:6f:88:6e:bc:4a:d5:b1:
                    0c:ba:16:6c:d8:02:cd:b8:73:88:02:e7:4f:1f:1f:
                    0f:11:99:0f:f1:d7:d0:33:26:dd:4d:77:30:5d:b7:
                    9a:5a:48:27:48:08:ac:fd:dc:eb:30:03:0d:fe:8e:
                    86:99:0f:24:77:d3:36:47:7d:1f:be:f4:9b:04:ae:
                    42:1a:42:3b:89:9e:73:c1:60:fc:c6:6a:2d:b2:7b:
                    2c:dd:72:b3:3f:bb:2a:da:ec:92:28:bb:b4:d6:7d:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F6:EF:98:56:BF:F2:C6:A8:45:FA:96:07:6F:A0:38:77:6A:6B:B7
            X509v3 Authority Key Identifier:
                keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2d:f5:f7:8d:b0:b6:9d:37:10:db:7b:70:7b:41:da:44:43:
         5f:d1:90:b8:cf:25:53:ca:77:6c:1b:1f:89:5c:06:43:0a:b9:
         4b:b8:f3:a8:49:09:44:5d:62:c2:24:05:b1:d2:3e:b4:99:0c:
         e7:8f:3b:0f:dc:e2:dd:ec:26:cf:5e:43:99:71:23:83:f8:3a:
         25:b1:93:6f:da:8c:a0:1d:f1:e0:83:f7:19:cc:a6:89:62:04:
         2c:23:18:a0:e1:92:c3:64:e9:29:61:3a:b1:6a:00:84:09:46:
         55:02:23:27:a1:9d:43:87:6f:a1:4d:ec:10:dd:81:25:a4:bb:
         b8:da:cc:0b:8d:07:cc:70:51:f4:5b:e7:82:cb:f5:00:45:99:
         55:6d:dc:32:cd:6a:81:59:10:13:73:e3:54:33:5c:68:9c:34:
         b8:0b:6b:cf:0a:97:dc:22:3d:36:82:d7:d4:17:c2:23:18:c1:
         07:86:dd:79:1b:3d:ce:20:f8:68:72:67:ba:f2:ae:60:d6:9f:
         de:4d:64:51:ea:08:ed:30:b0:f5:51:87:2a:a5:d1:26:57:3e:
         77:c5:3d:2d:27:5b:f5:96:94:fc:1c:81:a8:77:bb:c3:59:ec:
         b2:de:65:c5:f7:bc:9c:9d:2a:05:a3:7f:12:de:b4:9a:04:bd:
         c0:b4:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:30:28 2026 by rpki-client