Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft
File:                     D931809BED9AF438E358376B71B803D5CE61B2F5.mft (raw, json)
Hash identifier:          W0ihV0AkYc0M4LlQwb9S9r9on+ZsIpiH8SUWctWZDDo=
Subject key identifier:   11:5E:CE:A7:16:99:82:4E:7F:4E:4E:97:42:60:57:85:B8:1A:CE:7C
Authority key identifier: D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5
Certificate issuer:       /CN=D931809BED9AF438E358376B71B803D5CE61B2F5
Certificate serial:       225A10247083736AF42F978AE6A8872F649432DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 01:46:52 +0000
Manifest this update:     Wed 03 Jun 2026 01:41:52 +0000
Manifest next update:     Thu 04 Jun 2026 05:14:52 +0000
Files and hashes:         1: D931809BED9AF438E358376B71B803D5CE61B2F5.crl (hash: GFSYwfnVjPn5ZrLkP4AAlyGqODONV5ABfuL6wjywEZ0=)
                          2: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: JqEBH5YvRn5xbIFqmvyQg68HK5OM9z3ELY7zjQkgJLI=)
                          3: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: RKwP+mZy2zIyOi9W+fTg2udU4bmegNaF/ZtZIeSMp7c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl
                          rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5a:10:24:70:83:73:6a:f4:2f:97:8a:e6:a8:87:2f:64:94:32:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D931809BED9AF438E358376B71B803D5CE61B2F5
        Validity
            Not Before: Jun  3 01:41:52 2026 GMT
            Not After : Jun  4 05:14:52 2026 GMT
        Subject: CN=115ECEA71699824E7F4E4E9742605785B81ACE7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ac:87:ce:dc:12:9b:55:d1:94:4b:bf:3a:75:
                    84:58:21:26:24:f2:cf:fc:ef:b6:ee:6b:42:26:84:
                    fe:be:ca:49:9e:07:b2:0a:d7:71:37:66:0d:18:e9:
                    c2:75:7a:af:48:20:77:6b:89:58:06:4a:b4:3a:c9:
                    84:45:c8:83:f8:99:fa:72:72:c2:98:31:4c:41:79:
                    be:ae:74:67:e3:22:e0:93:37:0a:15:72:33:77:b4:
                    14:ba:40:3b:5a:df:15:0f:03:93:88:82:da:40:e8:
                    95:b1:cd:b9:63:37:58:6c:13:08:6d:26:aa:06:de:
                    5f:96:50:65:62:c9:1c:08:99:63:47:8a:74:db:33:
                    b7:38:41:d8:e8:2f:39:19:3f:21:9c:f7:65:aa:94:
                    14:2b:12:92:83:32:0b:bd:3c:5d:d0:75:7e:89:53:
                    78:e1:50:ce:89:51:c1:b5:e7:76:65:cb:70:a1:e2:
                    54:11:73:80:48:65:05:48:c4:78:de:ce:40:c3:b4:
                    49:31:62:87:d0:af:91:32:4f:9f:dc:50:f8:eb:bb:
                    a8:36:f8:35:56:4b:a0:d0:20:b4:77:67:2e:62:9f:
                    85:0b:4e:73:d8:04:70:81:4b:9b:f3:b3:a4:77:d3:
                    80:e9:f2:62:6b:74:2f:25:59:31:26:43:e2:97:88:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5E:CE:A7:16:99:82:4E:7F:4E:4E:97:42:60:57:85:B8:1A:CE:7C
            X509v3 Authority Key Identifier:
                keyid:D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:08:ed:5d:41:e5:b0:4d:a8:e0:c8:f3:7c:04:49:24:27:
         ab:23:7d:ec:a0:ac:88:db:18:88:f8:53:93:ac:e2:57:b8:f5:
         fc:0f:88:63:de:2d:5d:33:5c:36:7d:d8:9c:be:ff:44:5f:17:
         32:bc:f0:03:77:9f:d9:dc:3e:46:f9:54:56:6b:8f:1a:1f:04:
         77:47:a9:b5:58:ed:50:6e:18:38:02:76:d1:40:e4:83:af:46:
         2e:66:65:62:f4:b6:90:39:90:b1:c0:f5:03:62:6b:92:43:41:
         dc:2a:fa:b9:3c:16:15:c0:a2:3d:8a:de:cb:9d:08:0d:a2:b2:
         60:0d:c9:cd:e9:5a:68:92:62:9b:3c:b2:30:2a:11:92:fb:a7:
         ae:85:d2:31:a1:a7:a8:c6:56:31:89:db:f2:77:89:f5:a1:d6:
         0f:ef:2c:71:a5:60:72:80:aa:cc:94:76:07:81:ef:fe:14:8a:
         ed:ec:c6:1a:13:a7:55:89:56:fd:4f:c0:b6:e1:6b:57:44:95:
         f2:c0:4c:66:4f:7b:8b:34:da:1a:62:73:06:40:e5:fa:e9:5e:
         e7:6f:5b:f7:3c:2c:86:48:bd:7e:b1:23:19:37:fb:a8:55:c2:
         fc:48:8f:56:14:3d:26:56:42:eb:65:93:06:9b:bb:9e:cc:11:
         bc:60:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:42:50 2026 by rpki-client