Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
File:                     092239A9C28840E7E025454A2EA108ED5A8BF369.mft (raw, json)
Hash identifier:          mpA9pFKEhtnub5DQeI9QPV7dShJWo4qZW4LcoRsO0iE=
Subject key identifier:   DC:AE:37:F2:1B:AE:24:30:D3:00:23:C7:A9:66:61:21:F6:7A:45:D0
Authority key identifier: 09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69
Certificate issuer:       /CN=092239A9C28840E7E025454A2EA108ED5A8BF369
Certificate serial:       70C5C74F86D252312549C3DBBF9E5DCAFC04DFB4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 17:05:38 +0000
Manifest this update:     Tue 02 Jun 2026 17:00:38 +0000
Manifest next update:     Wed 03 Jun 2026 18:17:38 +0000
Files and hashes:         1: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: 9NL2C7FOxcvOHwTRTmo9h9A795ncThfKAUagyOzQnW8=)
                          2: 092239A9C28840E7E025454A2EA108ED5A8BF369.crl (hash: tgMquXQG8fwpw1dpZguIlYCbWKxOa/zitfBd386Hxv8=)
                          3: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: A/ozUYyvaDadcj+xsfOVvgriixFLbEAH6FL6zdv2bCc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl
                          rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 18:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c5:c7:4f:86:d2:52:31:25:49:c3:db:bf:9e:5d:ca:fc:04:df:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092239A9C28840E7E025454A2EA108ED5A8BF369
        Validity
            Not Before: Jun  2 17:00:38 2026 GMT
            Not After : Jun  3 18:17:38 2026 GMT
        Subject: CN=DCAE37F21BAE2430D30023C7A9666121F67A45D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:60:77:64:f5:37:19:3f:9d:62:6e:99:e5:3f:
                    77:e2:e2:7f:34:78:78:51:c8:f9:97:31:fd:c2:2c:
                    51:e0:fa:78:64:e6:86:90:bc:53:65:27:51:80:ca:
                    fc:27:62:e8:7a:54:0b:89:a8:61:65:a5:ef:9d:0d:
                    9c:b2:85:65:ad:95:04:a6:eb:c5:a3:91:04:7d:43:
                    43:ff:bf:89:96:37:ca:de:0b:7b:dd:23:66:50:dc:
                    74:69:52:9a:86:e6:5d:29:5c:99:de:9d:2c:92:0d:
                    50:5b:5f:4c:c3:d3:2a:96:0b:bd:70:eb:d1:27:7c:
                    8a:da:bf:aa:b3:54:68:27:5c:a7:bc:9d:40:07:33:
                    fd:da:75:ce:ca:76:a2:80:5c:01:99:8b:98:64:85:
                    67:71:63:f6:b2:32:d4:e6:0e:8b:ff:7a:60:bc:5d:
                    87:99:23:60:99:b1:29:85:e5:56:db:d9:40:2a:4b:
                    a5:e5:c9:e7:d7:a9:14:5f:bd:ff:09:a8:5a:5c:70:
                    d7:fc:bd:d7:b3:cf:08:31:85:a8:7f:2c:d5:e1:3d:
                    48:92:52:d6:cb:83:77:2e:58:19:e2:44:0f:51:9d:
                    68:a4:c4:a2:07:09:79:20:d4:80:df:4a:6d:1e:63:
                    f6:16:cd:1f:3e:b2:90:fe:77:e9:87:4b:f1:27:24:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AE:37:F2:1B:AE:24:30:D3:00:23:C7:A9:66:61:21:F6:7A:45:D0
            X509v3 Authority Key Identifier:
                keyid:09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:97:12:d7:32:66:d2:f1:b4:98:f8:de:85:05:80:64:97:18:
         76:a4:9f:be:65:1e:ce:5f:62:a2:9d:cd:a9:35:04:03:bd:55:
         d7:9d:67:7e:e1:b5:4a:5d:4c:cb:5b:af:67:ce:15:6d:1b:8e:
         4d:34:df:0d:3c:98:a3:ff:d7:58:6b:7f:bf:b7:34:12:4a:b0:
         5c:46:0a:78:4b:9e:03:d3:4e:de:af:44:d4:bc:04:73:e9:a3:
         d9:ee:d0:35:92:17:43:a1:2e:27:dd:34:05:18:d0:ce:92:2f:
         35:68:e0:c7:3a:64:aa:ed:3a:92:46:df:15:e8:68:26:07:95:
         7e:55:5f:bd:61:c0:09:aa:83:62:ab:49:ac:d5:53:59:69:05:
         97:49:ab:39:85:f5:50:bb:76:e8:d3:43:22:c8:1d:58:7a:97:
         f0:54:bc:e6:f5:9a:c4:28:16:6b:6c:a5:57:72:b6:7e:8d:fc:
         e0:b5:3f:41:8c:06:91:ac:4d:b5:a8:87:70:78:81:f0:40:e0:
         7d:b3:86:8c:a7:9d:6a:d1:9e:2c:42:9f:19:1c:fe:75:64:24:
         4b:ac:41:2a:01:a3:40:09:ee:d1:ff:51:c9:c2:39:27:2b:8d:
         02:96:ea:a9:e9:ed:91:d8:54:90:fc:b0:16:83:72:3c:bb:4c:
         c0:68:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:09:10 2026 by rpki-client