Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
File:                     73AC68F9F57E709948037DADDAC8DC88616BF980.mft (raw, json)
Hash identifier:          cDplclqrsezDjuyGIw+c4sJNxE02WUrwxqmmbkyMABg=
Subject key identifier:   CE:AD:AD:BC:A8:51:4F:82:31:DF:D2:AE:0A:E2:90:80:30:53:94:15
Authority key identifier: 73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80
Certificate issuer:       /CN=73AC68F9F57E709948037DADDAC8DC88616BF980
Certificate serial:       34A8A19EF2C91270400F421D3B8513024D90708D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
Manifest number:          40
Signing time:             Thu 18 Jun 2026 08:07:01 +0000
Manifest this update:     Thu 18 Jun 2026 08:02:01 +0000
Manifest next update:     Fri 19 Jun 2026 11:30:01 +0000
Files and hashes:         1: 73AC68F9F57E709948037DADDAC8DC88616BF980.crl (hash: GZQ/lVqGQ1SWI1tboBhkQUe3ddtpPy5shq8NhPfom1A=)
                          2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: vd1S4Z6+zmIZSCdC4Qdy1PZIz8w97xUXmpTWkwwvVQE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl
                          rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 08:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a8:a1:9e:f2:c9:12:70:40:0f:42:1d:3b:85:13:02:4d:90:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AC68F9F57E709948037DADDAC8DC88616BF980
        Validity
            Not Before: Jun 18 08:02:01 2026 GMT
            Not After : Jun 19 11:30:01 2026 GMT
        Subject: CN=CEADADBCA8514F8231DFD2AE0AE2908030539415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:b6:75:4c:e8:7e:f2:7d:6c:30:cb:07:57:
                    b3:f8:f9:f4:59:fa:4b:f9:a0:98:d0:1e:31:95:b0:
                    16:40:f1:d5:e9:7a:19:e7:0e:d1:4c:71:2b:55:72:
                    b2:6e:a1:29:ac:56:6a:14:6b:8f:7d:09:e6:c7:8e:
                    74:af:a4:13:5d:14:c1:26:bb:42:5d:e1:a1:c8:4c:
                    de:11:c0:af:eb:7b:9d:aa:ed:19:f3:47:97:6a:f2:
                    38:c0:97:a4:10:c1:be:82:64:a6:c4:0d:2b:15:20:
                    07:83:3d:0b:b2:2b:30:a3:3e:69:68:e7:03:8e:06:
                    8d:01:ff:f4:03:99:8f:eb:7c:f3:3f:4e:d5:11:ff:
                    77:2c:04:fa:99:81:6b:61:f2:a6:7f:57:72:48:f5:
                    98:9d:14:fc:ef:54:a3:b0:4b:9c:bb:1a:b5:46:09:
                    1c:bb:94:10:ab:4e:1d:76:1e:53:dd:41:ee:d4:f3:
                    a4:a6:eb:0b:d4:fd:0c:9b:9e:ce:b0:d5:9d:c7:f9:
                    1d:a1:90:97:99:bc:eb:97:40:e0:fd:46:2c:17:f7:
                    3f:47:a5:c2:f0:2a:4f:19:9b:5e:ec:5e:a4:79:e6:
                    b4:c1:9c:b0:22:76:e9:71:d0:a1:b4:a4:c2:91:1f:
                    d3:43:7f:69:8b:3d:76:14:33:37:29:3d:6f:28:cf:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AD:AD:BC:A8:51:4F:82:31:DF:D2:AE:0A:E2:90:80:30:53:94:15
            X509v3 Authority Key Identifier:
                keyid:73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:81:d8:07:ec:64:dc:cc:b4:74:52:64:cd:06:2b:40:b5:19:
         9e:81:70:09:ad:1a:f5:03:07:d9:65:28:3e:60:ee:73:05:bd:
         93:1e:e1:28:bb:e3:58:f8:da:70:98:de:c3:68:8e:9d:ec:54:
         f7:88:8e:7f:d4:eb:41:2d:d7:d1:4f:ea:84:fa:a7:18:f4:65:
         fd:9b:5d:5a:2f:a6:4e:d2:94:b7:ad:c2:55:7c:f2:98:0b:49:
         2c:0d:e0:23:61:a8:eb:cb:bf:fd:47:41:00:d8:82:02:96:2b:
         6a:4c:2a:25:e4:e1:f6:54:77:cd:d0:5e:62:c1:3f:9a:23:26:
         1d:50:57:ec:5b:f6:9e:ea:3b:33:16:eb:48:05:a0:c1:82:1c:
         4a:a1:6b:a1:64:7a:55:4e:e1:a5:39:50:0a:0a:69:30:38:48:
         43:96:f2:f1:7b:64:bb:55:36:72:ac:4e:a4:e7:15:07:a2:25:
         b8:12:a1:ee:b0:ea:e9:04:68:6a:37:0a:ed:ee:9a:8f:60:c6:
         c1:20:e4:de:f8:2e:00:35:f0:de:7c:3e:9b:8d:38:8a:02:3b:
         25:f7:9a:79:cd:a6:ce:d1:4e:c6:23:db:d9:be:32:ee:9b:38:
         a6:47:e1:ab:d4:ee:5a:21:81:d0:fe:c0:89:73:cd:e8:94:15:
         66:f0:a0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:52 2026 by rpki-client