Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.mft
File:                     D760F9F9DA86BCE59400DBE9D811D4482545E268.mft (raw, json)
Hash identifier:          ubHRBP2hvXXspoDd4kaJU23JKjeh5JRzuIapc8B2fz8=
Subject key identifier:   09:2B:33:29:2B:5A:01:1D:C0:A2:2B:85:0F:76:CB:34:2A:74:E0:3B
Authority key identifier: D7:60:F9:F9:DA:86:BC:E5:94:00:DB:E9:D8:11:D4:48:25:45:E2:68
Certificate issuer:       /CN=D760F9F9DA86BCE59400DBE9D811D4482545E268
Certificate serial:       EBDBFEB74E6C3DCC0C934DB910CD1DC09488A6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D760F9F9DA86BCE59400DBE9D811D4482545E268.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 11:54:51 +0000
Manifest this update:     Tue 02 Jun 2026 11:49:51 +0000
Manifest next update:     Wed 03 Jun 2026 15:45:51 +0000
Files and hashes:         1: D760F9F9DA86BCE59400DBE9D811D4482545E268.crl (hash: k/MiBKMAV/zkbTuHEEn0LMHP7uGNQe8Y2Z0oAfh6Gk0=)
                          2: 3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (hash: DFvC5GTAtylO1fprLd0zKxOM6CHVp0D6cEWiHcQuCS4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.crl
                          rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D760F9F9DA86BCE59400DBE9D811D4482545E268.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            eb:db:fe:b7:4e:6c:3d:cc:0c:93:4d:b9:10:cd:1d:c0:94:88:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D760F9F9DA86BCE59400DBE9D811D4482545E268
        Validity
            Not Before: Jun  2 11:49:51 2026 GMT
            Not After : Jun  3 15:45:51 2026 GMT
        Subject: CN=092B33292B5A011DC0A22B850F76CB342A74E03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:0c:81:64:21:cd:3a:c0:34:b4:b6:c1:9a:
                    dd:00:cd:87:ee:31:2e:e6:52:76:cb:fd:27:5b:8e:
                    d3:ec:e8:98:65:3b:8e:56:d4:bb:0c:0a:9b:c9:f7:
                    8e:e3:9e:e8:da:12:f7:91:62:fd:3e:f6:53:53:09:
                    73:6c:b1:44:6e:7f:d6:02:d3:b1:bb:d0:13:27:28:
                    57:26:27:44:a4:e8:68:24:0d:e4:85:63:71:87:f2:
                    e2:fb:e8:a0:c8:c9:c9:9a:68:f8:ee:65:a8:53:0a:
                    9b:2c:3a:56:69:a5:5d:ef:06:cd:de:7c:64:c1:b8:
                    bd:dc:aa:6a:98:b8:bf:aa:f9:6e:43:9a:8f:46:7c:
                    f1:a2:a2:58:b8:30:0b:52:65:06:42:ed:4c:06:a7:
                    09:3b:9f:d8:82:1f:87:44:f0:5b:c9:1b:ca:6b:5d:
                    fc:34:d3:75:5c:55:35:e0:83:2d:20:22:1f:c5:c6:
                    34:28:c6:4c:75:ad:33:94:87:5f:51:31:f5:af:d2:
                    2b:ef:39:a2:85:59:bd:71:f7:86:d1:d2:e1:39:64:
                    5a:fe:24:b1:71:44:54:62:ac:2d:74:1e:ca:3f:65:
                    cb:36:d6:76:8b:0b:77:5e:60:a1:f4:38:76:a3:ca:
                    a9:73:20:7b:89:ea:b2:46:f6:2b:29:0b:de:d2:d7:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:33:29:2B:5A:01:1D:C0:A2:2B:85:0F:76:CB:34:2A:74:E0:3B
            X509v3 Authority Key Identifier:
                keyid:D7:60:F9:F9:DA:86:BC:E5:94:00:DB:E9:D8:11:D4:48:25:45:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D760F9F9DA86BCE59400DBE9D811D4482545E268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:35:09:7d:65:84:83:84:37:7c:4d:6c:8f:47:28:f9:c4:c2:
         a7:2f:d7:91:10:23:cd:bb:07:92:58:24:da:f5:f8:21:f5:39:
         04:6b:2b:39:4c:1a:fa:49:43:b2:6f:fd:33:da:d3:b2:ff:ba:
         2a:14:fb:c8:fc:80:a7:46:6f:bf:ec:75:f9:ce:0e:fd:6c:49:
         18:88:d9:48:bb:31:bf:1a:86:0c:49:1f:5f:39:68:18:ff:3b:
         b0:f7:9c:b7:51:bf:39:bc:23:8d:6e:10:9c:c9:b3:75:65:65:
         be:bc:b9:07:0d:30:06:63:c7:1e:37:d1:b8:8c:e5:c5:c8:b5:
         cc:ac:46:cc:5a:28:33:df:60:88:35:0a:bf:27:b9:49:fd:eb:
         dd:f3:2b:79:23:c6:b5:a5:06:8c:31:aa:41:02:b0:0f:5c:52:
         f9:c9:56:21:2a:d8:27:f3:5c:d2:f2:aa:b8:d5:35:61:dd:af:
         6c:59:8f:f6:cd:44:45:96:9c:37:14:e2:b3:2b:a2:6c:86:95:
         cc:3b:a7:8a:19:77:ee:d1:c0:be:74:df:65:be:be:63:d8:d2:
         bc:e5:da:39:72:09:97:65:f0:74:e8:51:ec:31:93:bd:ce:d7:
         27:84:f8:3a:90:52:42:f3:77:74:4d:1e:bc:da:57:c7:17:31:
         e3:d1:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:39:13 2026 by rpki-client