Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
File:                     44428DF327C8FF800708E2196181BCB000E14F9B.mft (raw, json)
Hash identifier:          4vxC2Nmam62SZ0Q2iZC4BfTmQWGL7bY/ldZqULAboAA=
Subject key identifier:   BE:06:29:8C:BD:99:A6:CC:DB:F0:25:D1:B7:5C:36:26:21:17:56:78
Authority key identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B
Certificate issuer:       /CN=44428DF327C8FF800708E2196181BCB000E14F9B
Certificate serial:       7C9C5C3F8023B506A3A15F6AA1E5B147529BBBF9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 09:59:19 +0000
Manifest this update:     Thu 18 Jun 2026 09:54:19 +0000
Manifest next update:     Fri 19 Jun 2026 13:17:19 +0000
Files and hashes:         1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 85/rZ6LwJ+jBT8qlN/LTVMyuVN987z9Fl30YQ8p1+qo=)
                          2: 44428DF327C8FF800708E2196181BCB000E14F9B.crl (hash: ed5IIlCMgBmCmkkuJJJx/hnx+uhS0shoocuKLXCpzRI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl
                          rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 12:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9c:5c:3f:80:23:b5:06:a3:a1:5f:6a:a1:e5:b1:47:52:9b:bb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44428DF327C8FF800708E2196181BCB000E14F9B
        Validity
            Not Before: Jun 18 09:54:19 2026 GMT
            Not After : Jun 19 13:17:19 2026 GMT
        Subject: CN=BE06298CBD99A6CCDBF025D1B75C362621175678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:7e:cf:93:e0:24:5c:1c:a1:fe:45:8e:db:
                    17:1e:62:97:d9:ea:54:d9:9a:90:d7:78:7a:6e:fe:
                    14:29:89:27:0b:67:33:e7:f3:9c:12:f4:47:79:7c:
                    c8:b6:f4:20:fa:10:bd:13:4a:37:f8:7c:ec:d8:2a:
                    6c:78:ba:09:f9:a0:ab:d0:84:b3:e7:d0:69:e2:59:
                    2c:6d:7c:51:cb:a3:c9:82:96:34:f2:40:2b:44:04:
                    c3:e0:0d:4b:3f:e1:8a:12:cc:f2:d3:5b:66:af:a9:
                    e4:b3:f2:e2:56:04:13:51:9c:b9:c6:0b:26:3a:cc:
                    52:b4:6d:49:5f:27:71:aa:1d:03:ff:99:91:43:6e:
                    f7:6c:c1:d7:4b:4f:1a:8f:2e:3c:dd:35:d5:02:80:
                    92:90:06:a9:11:80:c7:24:16:90:eb:3d:04:58:6d:
                    93:b6:2d:fc:4f:dc:41:53:f4:9c:9a:31:08:41:35:
                    ef:ab:f0:d8:1c:70:d6:67:d1:0b:16:52:db:76:ec:
                    c1:13:93:16:49:06:be:5f:d4:6d:38:81:a7:a7:19:
                    c0:b4:de:25:c4:4b:4d:d6:0f:29:42:9b:f4:e3:94:
                    6d:91:29:95:ae:a8:b6:66:1e:fd:92:bf:23:21:84:
                    fc:0a:eb:ff:72:03:d7:74:40:ea:17:9d:2a:10:11:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:29:8C:BD:99:A6:CC:DB:F0:25:D1:B7:5C:36:26:21:17:56:78
            X509v3 Authority Key Identifier:
                keyid:44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:47:7f:f3:f9:0c:cc:e3:ef:3d:dd:eb:0c:49:42:84:ab:2e:
         31:11:56:01:c7:b8:68:29:06:c3:2d:4e:e1:86:fc:85:d5:34:
         40:f6:20:67:41:45:4c:cb:63:03:dd:b4:79:a0:ce:24:14:6f:
         e6:dc:98:e5:c0:e6:fe:c4:b2:09:0a:bc:fc:91:89:4f:80:b8:
         6e:d0:70:67:e9:42:43:bd:45:d0:e8:c6:88:c7:d5:43:e1:6d:
         25:fe:bc:09:47:8b:72:da:a8:c1:f0:0f:e4:0e:1a:ac:2d:5e:
         6a:0f:f7:24:8f:0e:c5:86:d4:a4:ca:ce:fb:a4:a5:be:48:ba:
         7b:0b:58:91:1e:8b:06:12:8c:4a:55:90:60:fd:c1:fc:43:b2:
         b6:7e:61:51:eb:62:18:ea:20:12:f6:42:0c:2d:ea:8f:25:37:
         5e:d8:7d:d0:b4:35:df:fc:eb:ec:79:9b:af:ed:6b:07:1c:62:
         7a:8e:24:45:95:46:bf:af:c0:2f:e6:b2:f5:e7:2a:62:97:dc:
         23:ea:1e:1e:ab:66:3f:98:72:61:9e:ff:46:a5:80:91:97:fe:
         10:24:58:63:84:87:da:8b:63:ab:b4:51:10:93:03:78:e5:14:
         62:6e:44:fe:99:f5:ad:fd:28:a0:83:80:3b:89:4e:11:8e:f3:
         89:a5:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 21:11:01 2026 by rpki-client