Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft
File:                     C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft (raw, json)
Hash identifier:          5s2z2ZEhFzUEzVVp3SuLG1X+pWmMHvGkhPMb0TNKajc=
Subject key identifier:   6B:23:5B:CA:DA:83:D8:3E:62:77:5F:2E:23:8E:A4:0A:94:DC:2A:5E
Authority key identifier: C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88
Certificate issuer:       /CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88
Certificate serial:       48CDB56A4238B8293F518FE9BAE9049C02CF050A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 14:58:47 +0000
Manifest this update:     Fri 19 Jun 2026 14:53:47 +0000
Manifest next update:     Sat 20 Jun 2026 17:05:47 +0000
Files and hashes:         1: C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl (hash: nfw1Av2BFNRG9rtpaLNQ/o5E5OA9K6RMOv5p7KKrwp4=)
                          2: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: Y+vREFE/EG16t2/cwbDbHoF+QrWyIBN3buYGvhuls/U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl
                          rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 17:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cd:b5:6a:42:38:b8:29:3f:51:8f:e9:ba:e9:04:9c:02:cf:05:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D313867B0B4966C372AB0F92BE8EE87820EF88
        Validity
            Not Before: Jun 19 14:53:47 2026 GMT
            Not After : Jun 20 17:05:47 2026 GMT
        Subject: CN=6B235BCADA83D83E62775F2E238EA40A94DC2A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:ee:34:85:3a:2f:42:12:f1:cd:d2:8f:63:
                    4f:f9:22:a5:93:42:0c:9a:fb:74:e8:59:aa:28:13:
                    cd:ac:90:e5:74:a8:7a:3c:cd:57:47:a3:2e:89:46:
                    aa:4f:60:d0:c3:1f:80:90:04:11:9f:b6:cf:57:93:
                    5d:63:54:d9:67:79:7b:79:ff:f7:01:98:d0:99:6e:
                    e2:b4:5b:07:a0:3c:7b:f8:f2:82:26:09:5d:ae:db:
                    f5:ff:30:1c:28:20:e5:24:16:29:d6:28:0c:67:2c:
                    82:70:3d:07:b9:dd:50:8c:da:0b:d4:39:63:b3:64:
                    c5:e7:c2:97:da:25:3d:67:a8:99:41:94:91:e1:bf:
                    8d:14:70:9c:f7:fc:7c:2e:59:7a:31:d5:b2:99:81:
                    e3:5c:f1:67:06:74:2a:d2:57:39:f8:4a:de:46:84:
                    9d:8d:f7:da:3d:85:82:41:41:db:46:b2:6f:44:dc:
                    73:bb:e1:34:46:e1:01:7e:e0:05:89:2e:a1:26:dd:
                    91:20:bc:1c:60:97:94:67:b7:7c:6f:78:d5:82:1d:
                    c8:5c:46:c1:a2:13:ff:3a:96:2d:c6:9f:c8:10:1d:
                    c7:b9:7d:57:6e:5b:a2:b7:d7:44:03:06:47:60:28:
                    bd:12:03:5c:dc:39:e8:4e:98:b6:fe:48:03:a8:53:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:23:5B:CA:DA:83:D8:3E:62:77:5F:2E:23:8E:A4:0A:94:DC:2A:5E
            X509v3 Authority Key Identifier:
                keyid:C2:D3:13:86:7B:0B:49:66:C3:72:AB:0F:92:BE:8E:E8:78:20:EF:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D313867B0B4966C372AB0F92BE8EE87820EF88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/C2D313867B0B4966C372AB0F92BE8EE87820EF88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:bc:b8:7b:b1:01:36:64:ec:49:0f:e6:c6:37:f0:ea:22:
         ab:97:3b:8e:ed:dc:3f:6a:08:18:42:85:45:bb:e7:20:05:07:
         c3:fc:31:d2:2d:24:5f:a8:88:ab:67:53:f7:41:1a:9c:d9:db:
         e7:7a:99:40:5c:aa:f2:48:3a:16:10:98:5c:39:f7:f5:db:7c:
         f7:dd:3c:d6:ef:85:98:92:17:e5:3a:f7:81:43:39:99:02:b6:
         b7:96:59:42:a7:9c:89:95:c9:ca:c9:f2:25:48:d3:02:80:66:
         d2:84:51:84:46:78:22:13:0e:bf:1e:a5:3a:9c:bb:ca:45:56:
         72:10:55:a7:f1:6d:93:30:7c:ba:52:ba:91:f1:49:4d:ea:ce:
         35:99:13:23:fa:74:9c:80:55:b3:01:e0:2a:5d:d3:b1:15:ae:
         e3:cb:2f:b0:a1:90:72:09:be:e6:cc:55:74:c9:48:33:7c:71:
         8b:c5:de:8f:40:df:be:2f:9e:38:f5:0b:76:5d:79:92:a3:9d:
         6e:3d:93:11:33:5b:6a:79:3e:ec:7d:7b:a6:d5:91:e5:12:26:
         a8:92:95:95:b5:a4:80:e2:23:c9:9d:0b:1c:b0:93:c6:8e:89:
         8d:d6:c8:8b:68:c0:c0:4c:cf:a6:39:d3:c5:16:ea:22:27:11:
         8c:98:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:01:30 2026 by rpki-client