Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
File:                     1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft (raw, json)
Hash identifier:          WVlVDx5AMxbbVGc4UFemctqU+tXRYv4S8S5qnVXrYXI=
Subject key identifier:   E5:F4:D9:0D:A6:71:E2:5B:F2:84:29:58:10:47:14:AE:4F:50:F4:C8
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Certificate issuer:       /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial:       2F57B8F8C1100217176229C39F243D8C0B0FCB12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 15:13:25 +0000
Manifest this update:     Tue 02 Jun 2026 15:08:25 +0000
Manifest next update:     Wed 03 Jun 2026 19:01:25 +0000
Files and hashes:         1: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=)
                          2: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: 3Pur9J/K8W30/vvGHGXc6KHgwQgQ4wEAxcFN1o16NNI=)
                          3: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: an5beHJBQCXe1O6nJramlD3hI7Qm5QXG3JLpnD/aNxM=)
                          4: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl (hash: iIL75jZDHAsi1rmQvVQ0R86deJfqNYEQTVQRKRH/vQc=)
                          5: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: a6L02/ltQd6+ySj9pYMUEWkvYU4L6ZYKU3OEQlZp5vg=)
                          6: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: /fa1hwZEt68IrXwKEonGaCZwd1oMYZDyXJq4KeJo86E=)
                          7: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: a4IK1VqkQFifgbVqGFjspnePVTV/YkKjfKoaIwFfqZw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
                          rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:57:b8:f8:c1:10:02:17:17:62:29:c3:9f:24:3d:8c:0b:0f:cb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
        Validity
            Not Before: Jun  2 15:08:25 2026 GMT
            Not After : Jun  3 19:01:25 2026 GMT
        Subject: CN=E5F4D90DA671E25BF2842958104714AE4F50F4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:de:58:d4:7d:69:64:0f:c9:54:70:1d:42:
                    f1:a6:ba:4b:3b:fe:e0:9f:15:2e:aa:d8:fe:3e:48:
                    12:63:d9:20:00:1a:0b:42:2f:e3:c7:25:84:b5:54:
                    1c:c8:8b:a3:db:45:11:2e:38:c4:51:5c:d1:6b:a0:
                    d3:e1:91:37:29:bf:28:7d:f2:25:9d:19:b2:df:a9:
                    3b:f8:3e:e4:4b:99:4e:d2:e7:6c:bc:68:f0:91:1c:
                    29:fa:56:59:cf:37:e1:ff:90:94:9b:59:21:2b:5c:
                    a0:7c:4b:60:93:54:b8:17:d7:f9:44:60:51:a0:29:
                    08:74:d5:2d:cf:3f:f9:49:9d:70:a8:3a:27:15:0c:
                    ca:30:9a:02:e7:5f:0f:5e:99:af:ce:55:44:76:02:
                    1d:46:4d:17:9b:7c:52:79:99:bc:66:36:4c:31:4a:
                    73:0c:77:9a:f1:91:55:08:10:ae:c9:e4:1f:87:0d:
                    79:6a:74:02:9c:c3:42:7d:9f:d7:8d:c0:14:ad:e1:
                    f3:a2:05:d4:96:58:e5:50:5e:81:ba:07:f5:67:be:
                    bf:95:72:74:56:30:6e:5a:c2:4d:8b:3d:04:f9:46:
                    4f:0d:9d:04:4d:d4:08:a5:a4:64:0d:73:97:85:5b:
                    73:1a:0d:0f:c0:ff:47:bd:2a:23:c3:82:03:c5:9f:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F4:D9:0D:A6:71:E2:5B:F2:84:29:58:10:47:14:AE:4F:50:F4:C8
            X509v3 Authority Key Identifier:
                keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:51:02:e3:13:8e:fd:79:99:ce:52:b9:44:f4:98:3c:ca:56:
         52:2d:e9:8b:1c:ae:94:76:d4:0d:39:ec:42:f9:8b:ad:f8:3c:
         6d:a6:68:dc:93:1c:cb:3c:d3:d7:19:00:28:b8:98:b6:1b:14:
         28:16:08:42:2d:8f:96:09:cb:c2:1f:c6:18:9d:a8:7d:7c:0d:
         66:02:6e:dd:24:94:76:91:74:71:a3:b5:f6:f0:33:02:4e:00:
         f7:5f:28:db:84:6e:e0:1b:21:9d:48:6a:2b:91:47:8a:87:cd:
         23:58:dc:e5:0f:8e:5b:c2:10:77:96:5b:e2:54:3f:bd:c6:11:
         91:b4:84:6e:44:8c:9e:f5:3c:11:b5:ea:49:6c:f1:a9:d1:11:
         8b:48:22:fb:9b:32:53:eb:c0:94:63:e4:21:32:a8:f1:da:98:
         77:e2:32:72:1a:65:31:ea:e8:7f:69:a3:1f:1f:23:d9:51:06:
         81:1b:af:fe:bf:8b:d3:1c:d1:cc:fb:67:c0:47:28:b2:76:5a:
         2e:d3:e6:77:1f:a1:19:89:94:1c:9d:56:8e:98:7b:8c:d4:e2:
         de:9d:06:f9:97:33:45:a0:41:10:93:1c:bb:d3:aa:ab:89:be:
         a3:99:dd:06:0d:03:a7:cc:3d:ac:a8:6b:ba:f9:1a:b4:0d:ad:
         94:f9:d4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:11:34 2026 by rpki-client