Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
File:                     B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft (raw, json)
Hash identifier:          b9WtDonCx2+avMIo3QWo1raRLwb7N268WdrLzGnpCkw=
Subject key identifier:   74:1B:20:BC:55:06:F0:9E:92:87:B3:B5:A1:31:17:E4:0B:1B:00:F7
Authority key identifier: B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45
Certificate issuer:       /CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
Certificate serial:       631D704A49972A06937374251D49BFB53427FB45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 12:35:33 +0000
Manifest this update:     Tue 02 Jun 2026 12:30:33 +0000
Manifest next update:     Wed 03 Jun 2026 15:13:33 +0000
Files and hashes:         1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: FM7P4A6GhMRCdFWVFylFnVzysNCeJktD7lQb8mDxaKs=)
                          2: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl (hash: XILI5NrRJ5r7AFGlQszuaCUcnXqxkWYT+AtTenTQgeQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl
                          rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 15:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1d:70:4a:49:97:2a:06:93:73:74:25:1d:49:bf:b5:34:27:fb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
        Validity
            Not Before: Jun  2 12:30:33 2026 GMT
            Not After : Jun  3 15:13:33 2026 GMT
        Subject: CN=741B20BC5506F09E9287B3B5A13117E40B1B00F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:58:dc:81:87:28:90:51:27:ea:54:fa:9b:
                    50:0d:1c:ea:c5:a2:a3:70:c9:de:e7:3a:48:e2:5a:
                    da:ef:d4:07:b5:2b:7c:ba:03:16:56:98:c4:e3:eb:
                    1f:98:35:4f:ee:92:48:ea:62:13:bd:a9:41:0e:81:
                    48:88:69:e3:68:b3:b2:24:3a:c1:c0:9b:33:b4:34:
                    aa:7a:01:74:a5:4e:6c:28:f4:4f:d1:d7:73:bf:55:
                    8c:14:cd:9c:50:83:59:50:44:9b:c5:d7:43:e1:0a:
                    3f:4e:6e:42:29:85:0b:2c:0a:8f:09:db:eb:ed:c1:
                    9b:f8:6e:e8:48:7d:f3:17:88:47:84:bf:66:89:bb:
                    14:d1:5e:9b:f8:de:e8:54:72:bf:eb:06:88:f9:13:
                    aa:f5:b1:d9:78:31:e4:a1:88:ee:b5:9e:0e:37:6f:
                    4a:c3:52:f6:06:ca:19:14:3e:8d:69:33:d1:0b:0d:
                    56:4f:2e:22:b3:34:51:57:b2:37:ae:8f:b8:b5:7a:
                    70:f9:41:87:88:e9:23:2d:e0:c7:a4:31:f0:54:a6:
                    8b:f3:9f:5b:60:ba:26:25:82:c0:02:1c:b4:17:ed:
                    7d:c6:dc:f0:d6:82:d9:6c:1f:9c:04:33:e0:5b:f6:
                    81:e5:89:41:3c:9a:a6:9e:07:ac:e8:f9:cc:b8:d1:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1B:20:BC:55:06:F0:9E:92:87:B3:B5:A1:31:17:E4:0B:1B:00:F7
            X509v3 Authority Key Identifier:
                keyid:B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:57:a2:85:60:1c:48:ee:80:67:ea:9c:6d:63:48:b0:82:00:
         c2:70:19:b7:41:80:9f:67:0d:d0:e4:8d:80:64:83:17:68:04:
         d2:9f:ea:94:41:43:f1:60:4e:c6:ec:fb:c4:f2:f8:f4:1c:38:
         ed:ce:fe:23:58:35:8d:fb:18:ec:bb:76:14:16:69:33:29:a1:
         20:9c:d0:d9:60:62:ec:5b:58:37:9d:c0:ee:22:1f:81:fc:33:
         b6:1e:91:14:4b:8b:85:2a:09:80:01:94:b7:07:9c:c4:ad:a2:
         f6:2b:77:13:92:e8:6c:53:dc:12:dd:04:79:b5:21:d9:0b:a2:
         ea:bd:35:9f:87:a8:c4:6c:35:e0:7d:91:f4:de:a8:76:eb:87:
         1e:f1:12:f7:d4:cb:a4:33:01:b1:4f:2e:ab:96:78:6c:2b:d9:
         91:0a:0f:b0:c4:9d:50:33:b5:a8:fe:f8:6f:53:a9:b8:27:36:
         05:bf:b4:9a:26:39:82:c4:2b:56:6f:3c:2e:cd:a5:4b:e0:0d:
         ba:ec:18:13:43:f9:28:43:f2:e7:25:29:dd:eb:31:cd:a9:cc:
         77:b5:ff:f1:86:7c:7d:57:18:13:dd:5f:a0:b0:88:77:22:25:
         86:0c:fc:51:85:ca:73:14:63:91:18:0b:47:7d:be:23:1d:7e:
         05:e9:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:25:56 2026 by rpki-client