Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
File:                     6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft (raw, json)
Hash identifier:          FR6BW5UPSBzq2tIiEqO72lOcPGK1vMMuEar/ikSCMDM=
Subject key identifier:   13:39:62:EC:3D:4D:92:FD:79:4D:B0:39:DB:0F:A3:6B:D9:2E:A9:57
Authority key identifier: 60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23
Certificate issuer:       /CN=6099B74D5C9BD1B7AE0DC675E9888F94EA780223
Certificate serial:       56FEBBC55A7932F9400D71C819F5154654AA55EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 21:08:07 +0000
Manifest this update:     Wed 17 Jun 2026 21:03:07 +0000
Manifest next update:     Thu 18 Jun 2026 23:39:07 +0000
Files and hashes:         1: 6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl (hash: zrecbq5TL+lkhwPNh+Ol+cj74ylDbAgD4xFMh5Yq/wU=)
                          2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: rfB6zIUPCXAZ3rM7YYBLHBGPxWnBvq/A8DFJMLeaqGo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl
                          rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 23:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fe:bb:c5:5a:79:32:f9:40:0d:71:c8:19:f5:15:46:54:aa:55:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6099B74D5C9BD1B7AE0DC675E9888F94EA780223
        Validity
            Not Before: Jun 17 21:03:07 2026 GMT
            Not After : Jun 18 23:39:07 2026 GMT
        Subject: CN=133962EC3D4D92FD794DB039DB0FA36BD92EA957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:72:d7:7d:e9:5f:0b:ea:25:73:ca:da:b7:
                    2e:eb:11:7d:57:76:3f:4d:26:e5:1e:15:5c:49:44:
                    d4:8b:e0:f3:66:94:e4:d5:69:fa:e7:dd:02:dd:f4:
                    03:e8:99:92:01:b5:33:e8:ac:0e:d1:1a:c4:af:21:
                    1e:53:0e:0d:41:ea:b4:b3:33:76:49:89:a6:df:b6:
                    b6:99:74:73:a7:2e:1c:75:58:0c:9b:30:8f:2e:08:
                    29:b6:3d:8f:bd:05:49:70:0f:0b:94:22:07:0d:27:
                    63:bb:84:ad:d2:e8:77:c3:d5:17:8d:8b:b5:57:82:
                    bd:3f:9d:35:12:30:49:08:00:7a:30:04:92:63:17:
                    fc:b2:cc:71:ae:0a:3b:02:40:0f:0e:da:20:d2:6d:
                    c0:95:0c:35:f7:45:d1:c6:c6:ec:47:7a:1b:ae:71:
                    50:83:41:9c:4b:a3:f6:d9:f0:54:71:3c:bf:51:b8:
                    b8:09:b2:59:7b:a4:9f:e2:a2:50:1d:3c:38:fe:c8:
                    86:7c:83:c4:ca:65:e2:3a:63:03:d0:c8:fd:f3:4b:
                    84:91:47:2e:fd:c5:f1:0a:05:0b:a4:58:03:ba:8b:
                    7b:0b:18:c0:aa:70:18:ca:9c:aa:d8:5a:36:d8:cf:
                    1e:82:a5:9c:82:8a:85:78:c1:76:74:b0:8d:46:7d:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:39:62:EC:3D:4D:92:FD:79:4D:B0:39:DB:0F:A3:6B:D9:2E:A9:57
            X509v3 Authority Key Identifier:
                keyid:60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:27:df:fb:d3:59:2f:bd:c6:59:a9:92:05:dd:c6:fe:4b:e4:
         e1:0d:c1:4a:4b:68:91:5d:53:d0:73:f0:6e:49:62:8e:08:66:
         26:5c:e0:a1:d6:3d:62:89:8c:bf:da:8f:db:e5:ec:b0:21:99:
         f0:85:95:ae:4f:fe:8f:1c:d3:a6:0b:97:aa:0e:fc:99:0b:33:
         c5:16:e2:16:e8:9c:19:56:a4:75:ce:e5:87:e3:1d:0b:22:03:
         7c:18:c6:52:b1:4e:d7:ea:bb:89:11:b8:52:77:15:5b:76:45:
         ef:b8:57:9b:61:e7:6f:b7:d5:44:0a:9c:8f:42:9d:b3:f9:0e:
         75:91:52:55:a7:57:1d:6d:c9:34:17:25:f2:74:3a:a1:a2:88:
         80:5d:d7:14:0d:06:31:fe:1d:58:c4:45:b3:40:c9:00:92:91:
         90:26:87:f0:9f:b2:ae:4b:7d:5b:74:e9:50:61:f5:4a:20:d8:
         cf:9f:52:81:f1:68:06:c3:00:3f:80:d7:1c:f0:86:c0:80:a4:
         0d:5e:83:fd:79:19:05:d9:63:ae:85:66:d0:ca:c7:92:52:9a:
         3f:bb:c6:1e:61:28:62:8d:4b:e7:ee:b4:ed:47:76:12:53:ea:
         3c:91:6a:29:2d:80:fe:36:a0:cd:ad:18:a9:07:a4:b8:2e:38:
         4c:ce:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:50 2026 by rpki-client