Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
File:                     17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft (raw, json)
Hash identifier:          mVUKX4M5J1s28PDRCpHUeBonscvN1SChGlYGSCwyaqg=
Subject key identifier:   AB:C2:7D:EF:2F:D6:C8:D6:58:4A:E6:F4:9F:69:67:F9:79:9F:0A:D5
Authority key identifier: 17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27
Certificate issuer:       /CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27
Certificate serial:       6F60D4116467B364658C21C162A8B6B84CB8C1F2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 09:47:11 +0000
Manifest this update:     Tue 02 Jun 2026 09:42:11 +0000
Manifest next update:     Wed 03 Jun 2026 13:12:11 +0000
Files and hashes:         1: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: 7DAQ/qZeFo+VjQFhi1Qi3yS2FazYT4uy2MibUL7GHjo=)
                          2: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl (hash: xUWhab2SD4pSZRcyrI3qaRuvDP3Re8+9IvnwzgdurIs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl
                          rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 13:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:60:d4:11:64:67:b3:64:65:8c:21:c1:62:a8:b6:b8:4c:b8:c1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27
        Validity
            Not Before: Jun  2 09:42:11 2026 GMT
            Not After : Jun  3 13:12:11 2026 GMT
        Subject: CN=ABC27DEF2FD6C8D6584AE6F49F6967F9799F0AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:d5:6a:23:41:c5:94:e2:7e:52:f7:74:77:
                    e8:91:24:56:86:82:8d:72:33:b1:ea:c4:2a:e4:b4:
                    85:f0:7a:f1:50:96:c9:43:fb:1d:52:21:f1:31:af:
                    8c:78:4c:f5:57:55:93:ea:f4:e3:c9:6f:76:e1:3c:
                    9c:73:13:e3:f9:e7:f8:7d:cb:e8:89:e8:cb:7d:2e:
                    35:d6:c4:6a:7d:6e:58:e3:64:90:50:c9:48:aa:b0:
                    29:b2:36:ac:b7:6a:a9:46:19:58:f8:b2:1c:e9:12:
                    31:e8:11:f3:dc:55:cc:0c:94:ac:58:8b:07:8e:f6:
                    01:67:c3:f3:0e:77:3e:7e:62:ad:05:e6:f4:db:90:
                    ec:c7:ae:7f:96:1c:de:11:c4:d5:b2:fd:8e:68:61:
                    db:68:e8:48:5a:9a:fa:fa:d1:28:24:99:c7:2f:a4:
                    7b:7c:8a:5e:2b:d6:d0:fb:1b:24:35:30:0c:7d:d6:
                    9b:f0:2b:97:5d:3f:9b:ca:1a:07:59:2d:0c:ce:fa:
                    c9:a3:f4:04:e0:86:a8:0a:0e:04:97:4b:ed:b7:d9:
                    9a:06:11:3d:f1:99:84:81:60:92:c7:eb:7f:42:05:
                    49:e8:12:70:69:96:1b:28:f6:4d:bb:af:8c:43:fe:
                    fc:c3:c1:2c:7d:d8:49:7e:7f:ef:e3:50:12:98:b8:
                    e2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C2:7D:EF:2F:D6:C8:D6:58:4A:E6:F4:9F:69:67:F9:79:9F:0A:D5
            X509v3 Authority Key Identifier:
                keyid:17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:69:15:72:c0:1f:f4:25:59:8c:3b:31:48:49:a0:1c:af:
         9c:00:0e:57:51:ff:e9:2c:90:4d:d4:6d:4a:ec:be:9d:4e:72:
         5d:8c:02:74:4e:4d:ad:ef:ae:20:13:c7:bc:8e:5e:69:dd:33:
         de:33:24:09:cd:c1:e3:b9:3f:17:a3:72:c8:86:90:c9:0b:0c:
         e8:90:0a:b9:84:f3:f6:8c:ef:23:90:18:92:c7:53:63:c3:f1:
         4d:d7:87:ea:a2:09:20:c0:45:6c:d6:4a:2d:fb:82:f9:f7:62:
         3c:ae:c1:ae:4b:06:b4:b8:0b:f4:3c:89:e4:3a:fd:6c:1f:a8:
         42:ff:45:2f:da:cb:39:c7:24:11:57:fd:e0:67:0b:84:a5:fc:
         2d:f3:7f:83:fc:f9:58:da:c6:77:0a:2a:52:a9:62:8a:18:45:
         42:23:cc:a6:8d:99:43:0f:33:c3:25:0e:39:d4:f6:78:d8:98:
         ae:7a:a9:46:54:11:b0:17:f1:00:e1:5b:5f:85:ff:bc:90:5f:
         52:97:36:8c:2d:ce:74:33:5d:64:82:48:bf:3a:16:b5:32:79:
         c0:db:e2:d9:0d:89:40:e2:3f:68:d5:3d:03:a2:b1:d7:c6:24:
         61:7a:e2:f1:9a:40:a2:5a:74:6f:ee:b9:fd:45:e9:5f:65:6e:
         80:8d:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:21:03 2026 by rpki-client