Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
File:                     9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft (raw, json)
Hash identifier:          vo1tqSoHsKbpEsoyt6ezASddXQBUSYMAu1KZ7u//jW0=
Subject key identifier:   54:FB:D5:41:E0:C5:85:50:9A:6B:E5:59:5C:60:E2:49:09:CA:BF:F3
Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
Certificate issuer:       /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Certificate serial:       270797A1A5B9170884B4506A1C7754C3A303831F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 08:55:58 +0000
Manifest this update:     Tue 02 Jun 2026 08:50:58 +0000
Manifest next update:     Wed 03 Jun 2026 10:50:58 +0000
Files and hashes:         1: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: 0YvIC8wCtWvDa2HWmo5ajWyQO0v7nGfkKloFn4oUr5Y=)
                          2: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: TbeMR6DCS8oQZoWLlauGHIZkAoCLHj7Jp79qNO5aAvk=)
                          3: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl (hash: AdDNmmdRKMUYfv2Yazns4vAzrLgD3KWbKwM2Bcza1JQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
                          rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:07:97:a1:a5:b9:17:08:84:b4:50:6a:1c:77:54:c3:a3:03:83:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
        Validity
            Not Before: Jun  2 08:50:58 2026 GMT
            Not After : Jun  3 10:50:58 2026 GMT
        Subject: CN=54FBD541E0C585509A6BE5595C60E24909CABFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:f0:a8:6e:d7:47:20:e9:37:5d:05:0c:7f:
                    ee:75:29:ec:dd:0a:c5:80:6c:b6:78:b5:36:ba:bf:
                    e1:95:2b:c9:33:b5:df:ea:ed:cd:8c:f2:46:ae:37:
                    38:ed:62:3a:7e:68:8b:4b:84:70:c4:15:2e:d6:fd:
                    6b:a8:37:c9:a7:5d:43:4c:c5:7e:ba:62:1c:c1:21:
                    9b:46:07:91:20:44:c2:88:af:e3:e3:af:0b:25:de:
                    6c:75:3d:6c:3b:fb:e9:21:df:34:96:ad:76:0d:ca:
                    b7:eb:e5:69:61:18:5f:8e:e5:5b:f8:c2:15:57:ec:
                    80:ed:15:ee:25:28:9b:33:c2:53:f9:95:c7:ad:75:
                    32:4a:f5:33:48:30:67:69:15:71:21:d7:b5:ef:ee:
                    1e:cb:c8:75:29:96:e5:4c:98:f3:c0:8b:05:af:28:
                    cd:e2:c5:f9:46:16:ad:ae:b9:29:d0:99:57:a2:ad:
                    4d:1b:9c:ea:13:3d:be:fd:8d:b5:c6:fb:5f:8a:b7:
                    3d:71:62:95:d3:0f:f3:10:ea:cf:76:94:f4:61:88:
                    ec:99:5e:26:ee:56:9b:15:3a:4f:36:bd:b4:4a:76:
                    63:b7:a7:a2:8d:e8:0d:04:dd:d8:9e:70:82:13:28:
                    c2:00:1e:2f:4f:bb:61:ee:fe:db:d9:63:52:31:67:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:D5:41:E0:C5:85:50:9A:6B:E5:59:5C:60:E2:49:09:CA:BF:F3
            X509v3 Authority Key Identifier:
                keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:67:89:8f:33:40:2b:69:5e:ca:24:cf:23:90:4f:10:ba:42:
         49:3b:9e:77:7f:9f:fc:35:f0:b4:2d:3e:44:3a:c6:af:1a:d7:
         da:a5:69:d5:d5:2c:ed:33:53:e1:a9:1b:fa:a6:a8:8d:aa:7e:
         d7:ea:3a:95:28:84:0b:13:e8:6a:2c:40:76:44:af:06:73:d1:
         30:37:1a:de:0c:aa:13:04:86:8f:63:6b:43:9c:1d:31:5e:db:
         bd:6e:c4:26:51:fb:0f:7d:8c:3e:b0:b9:bb:2d:ae:81:98:63:
         dd:a3:5d:10:87:28:a5:d2:d3:59:49:1a:ef:20:b6:40:85:9e:
         5e:7b:48:47:63:df:fa:a5:15:88:32:1c:77:85:c4:85:3e:4f:
         c4:52:35:25:45:99:f8:5d:3e:47:26:8e:f7:2b:56:f3:fc:80:
         f2:07:6e:df:42:b9:6f:61:79:3d:50:97:9a:91:c3:52:b7:90:
         1a:80:50:ef:1d:5e:81:eb:fe:30:ff:f3:b6:62:98:27:2a:c1:
         2f:53:9c:f9:35:96:0b:ad:79:ea:3d:fb:61:be:10:e4:13:11:
         c2:1d:96:b0:23:ef:e3:73:cd:f6:1c:7a:64:f5:0f:67:8a:b6:
         3a:b5:3c:46:27:f1:29:e0:3f:bf:6c:cb:6e:18:2f:55:eb:fd:
         fd:3b:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:09:27 2026 by rpki-client