Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
File:                     BF81EC78CC8A61FCFF71A862321A5204E581203B.mft (raw, json)
Hash identifier:          QGI4aO91uKkQFn9AX/hC9tweQIhyQzXxMVZf/r4k+n0=
Subject key identifier:   2A:D8:21:C4:28:7E:0E:47:2E:94:DA:10:91:22:76:38:96:59:74:4F
Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B
Certificate issuer:       /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
Certificate serial:       35421C24EF175C50FA04B42E9484FD714109BF89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 13:57:05 +0000
Manifest this update:     Tue 02 Jun 2026 13:52:05 +0000
Manifest next update:     Wed 03 Jun 2026 14:31:05 +0000
Files and hashes:         1: BF81EC78CC8A61FCFF71A862321A5204E581203B.crl (hash: Mx9nt8+6ud5/0Lvu45Gf/z8eOfFHtV0C+0xFdv3KUis=)
                          2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl
                          rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:42:1c:24:ef:17:5c:50:fa:04:b4:2e:94:84:fd:71:41:09:bf:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
        Validity
            Not Before: Jun  2 13:52:05 2026 GMT
            Not After : Jun  3 14:31:05 2026 GMT
        Subject: CN=2AD821C4287E0E472E94DA10912276389659744F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:c6:9d:d7:6e:03:07:b0:4b:53:6c:7c:6d:
                    d2:2b:fb:29:b3:01:91:79:5a:5a:f6:0d:26:f8:66:
                    45:f9:0d:39:81:92:e8:55:89:c1:fa:96:2e:ad:ad:
                    86:7a:ff:d4:1d:8c:2d:e1:e0:bd:af:8b:23:75:71:
                    a5:1b:57:e2:1c:40:b1:93:e4:79:be:f3:22:2b:5d:
                    42:40:1b:32:cc:98:50:96:69:51:95:0e:36:6a:bb:
                    29:dc:dd:e1:81:15:99:c1:6f:d6:a5:c1:04:e1:ed:
                    c7:73:fb:40:91:e6:c7:2e:1b:b7:19:d4:5b:bb:87:
                    4b:48:19:78:e5:30:ea:0d:fd:6b:1c:a5:47:e2:2d:
                    21:01:76:e9:6e:a6:3d:9f:aa:42:34:b6:50:73:85:
                    7a:4f:37:ef:4d:47:64:38:cc:88:16:e4:85:3b:11:
                    b8:d7:57:d5:f5:da:22:ee:93:ed:37:b1:44:34:34:
                    d7:c7:c5:fd:d4:4c:43:44:c8:55:a6:3f:a7:2d:ac:
                    b1:3d:85:4b:f4:37:4a:80:bf:ac:6d:5b:71:95:c6:
                    d5:54:3d:2d:aa:7d:1b:4d:f9:3d:ba:38:bc:5c:1e:
                    2c:14:2a:c2:27:a3:92:0b:68:6d:a7:94:bd:3a:5b:
                    de:38:a5:8b:b8:3d:34:69:98:fa:1a:d6:eb:d8:7b:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D8:21:C4:28:7E:0E:47:2E:94:DA:10:91:22:76:38:96:59:74:4F
            X509v3 Authority Key Identifier:
                keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:f1:67:06:10:b5:7e:b8:2a:33:0b:5d:29:6d:e4:cb:a4:
         aa:92:5c:a9:66:2a:a5:6a:ee:92:6a:ca:29:09:0f:7b:9b:7f:
         00:95:14:fa:93:72:ae:04:14:e9:88:ff:09:30:60:31:f7:c9:
         87:3b:0e:ea:2a:df:8e:bf:4b:b6:87:cf:7f:01:a1:0d:dd:40:
         06:50:ef:92:21:69:dc:06:1b:89:0d:b4:55:e4:66:ca:dd:30:
         e8:67:40:5a:e0:ab:d8:27:53:c5:5f:58:b7:16:3a:60:ae:e3:
         e3:72:44:0a:3f:a4:d6:6a:08:de:d0:10:0c:1c:28:56:d6:91:
         12:da:e4:90:19:7a:b6:66:de:54:0b:9c:47:4c:eb:7f:f3:72:
         d0:59:96:a2:29:df:a6:91:ac:4d:cf:4e:af:5f:de:be:af:25:
         fd:34:3e:56:aa:a5:1c:06:ef:9f:e8:b9:1e:31:6e:eb:5e:1d:
         b3:a5:44:85:29:ce:24:76:f4:81:62:48:3e:d7:2e:fc:99:b3:
         23:ac:ef:5c:07:d6:18:55:d3:eb:b3:8e:a3:97:c6:79:94:d0:
         a8:a8:b2:e7:66:02:5f:ed:84:6e:06:43:8a:e5:1e:2b:42:95:
         8f:18:30:7b:bc:38:26:bd:9f:41:84:a0:0a:05:1f:58:69:e6:
         9b:12:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:28:18 2026 by rpki-client