Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft
File:                     5AE2131384B411127BE4CF7467B12F83CBAD9996.mft (raw, json)
Hash identifier:          Rgk8iBTpyE2lYTyLUhJztNIxh8ivj62lhTl4IlMgRnE=
Subject key identifier:   1F:B5:16:B7:DB:8B:49:16:20:7A:2C:86:1D:56:58:B8:78:49:70:59
Authority key identifier: 5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96
Certificate issuer:       /CN=5AE2131384B411127BE4CF7467B12F83CBAD9996
Certificate serial:       368AAAB7B3044A2AD88594847F887D68098105A7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 00:20:17 +0000
Manifest this update:     Wed 03 Jun 2026 00:15:17 +0000
Manifest next update:     Thu 04 Jun 2026 02:10:17 +0000
Files and hashes:         1: 5AE2131384B411127BE4CF7467B12F83CBAD9996.crl (hash: 2/JZSNiJPJVKnp5CNXHSiXOnOyTpY3lZ7qgtjkJmdV8=)
                          2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: I0jTp/Lb+KlyYGeSMZScDem+MblcbAhoI37lZDiIvac=)
                          3: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: NmIt0iuskNCmt4uz1oIpjbFNHodPs9Y9zQPXOPslKF0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl
                          rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8a:aa:b7:b3:04:4a:2a:d8:85:94:84:7f:88:7d:68:09:81:05:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE2131384B411127BE4CF7467B12F83CBAD9996
        Validity
            Not Before: Jun  3 00:15:17 2026 GMT
            Not After : Jun  4 02:10:17 2026 GMT
        Subject: CN=1FB516B7DB8B4916207A2C861D5658B878497059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:78:d6:ae:27:dd:11:3e:6d:06:ce:71:56:
                    17:09:78:2a:59:33:2a:f3:9d:a7:17:27:90:44:31:
                    bf:83:0e:02:c9:75:fb:71:7b:65:93:2e:53:b6:44:
                    b4:3a:19:8a:18:41:5b:a7:1a:c0:64:fe:18:db:d6:
                    c2:c1:4f:35:93:cd:3f:2b:2a:77:8c:86:d6:ef:d3:
                    76:13:ec:1f:9f:d9:f8:69:84:02:08:4b:e8:4f:d3:
                    5c:9e:a4:7b:2a:c4:70:94:05:33:7d:3c:bb:59:d6:
                    ea:e4:a0:5f:97:ed:ae:21:8c:dc:40:e3:0a:fa:52:
                    41:10:b9:61:d0:12:0f:3a:ae:2c:21:32:90:85:17:
                    55:12:71:81:1b:38:b6:1f:99:d8:ce:f9:b9:bf:c7:
                    ff:ce:0c:1a:7e:a2:85:d6:74:bc:91:2f:6c:1c:db:
                    8a:76:bc:92:d5:41:02:4b:77:45:55:dc:ac:0e:59:
                    5b:fe:6e:6e:bc:5b:b9:6e:45:8a:b3:a2:1a:1c:2c:
                    f6:c0:ad:82:8d:e0:c8:38:58:f3:cf:d9:83:67:c4:
                    54:b8:6c:2c:5a:ec:3b:1b:dd:aa:7c:6e:a9:9b:b9:
                    d6:79:24:53:cd:42:cf:80:e2:39:3c:d6:53:8f:23:
                    a9:b0:69:9f:0e:60:07:65:8c:4d:00:08:a9:ae:4d:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B5:16:B7:DB:8B:49:16:20:7A:2C:86:1D:56:58:B8:78:49:70:59
            X509v3 Authority Key Identifier:
                keyid:5A:E2:13:13:84:B4:11:12:7B:E4:CF:74:67:B1:2F:83:CB:AD:99:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AE2131384B411127BE4CF7467B12F83CBAD9996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/5AE2131384B411127BE4CF7467B12F83CBAD9996.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:73:72:73:59:b4:64:a1:3c:c1:28:da:b8:12:1f:4e:3c:f5:
         dd:47:7f:f4:ff:d8:5e:1b:5d:cf:b8:4c:57:21:27:26:83:e2:
         8b:38:ff:60:b1:0c:ad:ce:8b:37:42:ee:de:8f:7e:da:c7:bb:
         23:70:8e:ff:86:cb:75:0d:4b:33:dd:22:cc:83:2c:4c:85:4d:
         fe:c6:76:54:f5:be:d3:15:e8:fa:a7:f7:da:38:ec:0d:91:47:
         a2:6d:73:10:99:2f:53:32:80:33:08:5f:77:7f:8e:1b:30:0a:
         2f:5f:41:0a:41:86:54:85:f2:74:13:ef:ea:c4:83:ef:23:1e:
         f2:2c:ea:af:d5:17:8a:32:ad:17:d4:21:3a:de:5d:9f:62:60:
         93:5b:9a:3b:30:1a:65:85:23:14:3e:d4:06:34:6c:3d:1b:4a:
         42:73:1c:25:4c:92:56:bd:66:80:c9:29:1e:20:0f:ce:e7:6a:
         1a:95:48:82:e9:06:42:a3:10:6a:4f:9f:44:7b:a1:e7:64:51:
         51:c1:98:4a:be:05:ff:e8:5a:d3:1d:e2:c0:b8:f1:03:84:7a:
         76:99:0d:96:53:dd:08:58:d0:31:ff:3c:96:f8:48:92:af:02:
         3d:28:be:26:6b:e8:87:db:c6:a7:c8:0b:fa:dc:56:3c:eb:f3:
         fc:28:7d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:47 2026 by rpki-client