Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
File:                     33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json)
Hash identifier:          Qg4D7xibnBdu2PMsJUrHtXTT/KcKja4gmyr86nfZKsQ=
Subject key identifier:   30:48:87:2E:74:CF:B3:E5:02:F3:29:41:49:C1:BB:FC:3F:52:65:60
Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E
Certificate issuer:       /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
Certificate serial:       3F33B82613581E96B22942CC07127DC3772051
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 04:58:00 +0000
Manifest this update:     Thu 18 Jun 2026 04:53:00 +0000
Manifest next update:     Fri 19 Jun 2026 06:28:00 +0000
Files and hashes:         1: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: LVUCDbrIeOhNr2On+iyb5Aqz1S7XqCBhQt/ANL6tdoc=)
                          2: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=)
                          3: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=)
                          4: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl
                          rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 06:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:33:b8:26:13:58:1e:96:b2:29:42:cc:07:12:7d:c3:77:20:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
        Validity
            Not Before: Jun 18 04:53:00 2026 GMT
            Not After : Jun 19 06:28:00 2026 GMT
        Subject: CN=3048872E74CFB3E502F3294149C1BBFC3F526560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:a0:98:d7:ac:88:3a:20:d7:77:2b:e6:b2:
                    64:d8:3c:b0:3a:e7:e7:bc:c4:9f:de:58:8d:e0:4c:
                    b5:e9:28:2a:3e:24:0f:47:6b:3e:7a:a8:1c:26:01:
                    c5:92:ff:9b:8a:de:ef:54:17:0f:20:08:fc:c4:1b:
                    56:7c:26:32:73:a1:72:3c:a3:d3:21:87:03:53:87:
                    d2:f7:54:15:1e:7b:bd:44:d1:4e:1f:46:5c:d4:60:
                    60:70:14:2d:62:dc:e3:ea:ba:ba:d7:e3:e2:fd:24:
                    39:88:2a:6c:3e:fe:00:dd:85:64:e2:d9:de:13:0c:
                    ac:09:67:05:4f:63:d1:22:a2:2a:aa:23:1b:60:6e:
                    ef:d0:c9:c0:02:30:f3:48:1e:73:40:94:1f:76:f0:
                    3c:cf:75:c0:ec:c5:70:11:5f:d9:8d:32:46:2a:2f:
                    c9:87:67:46:43:9e:85:9f:3a:d8:34:7e:22:f4:9f:
                    aa:76:df:97:4d:cb:d0:f5:63:d6:44:4d:86:8c:fe:
                    d4:8b:03:f3:3c:c5:80:fc:69:67:4d:0c:34:e2:d9:
                    2d:99:9b:d2:8f:a5:d7:57:1d:9e:6f:88:ef:23:db:
                    bb:a0:5b:fc:6d:ee:25:60:52:e0:81:04:a7:a6:c5:
                    73:a3:a2:94:ba:6f:17:ad:01:c1:6f:d4:06:b3:f3:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:48:87:2E:74:CF:B3:E5:02:F3:29:41:49:C1:BB:FC:3F:52:65:60
            X509v3 Authority Key Identifier:
                keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a9:57:98:ac:d4:fc:f7:10:36:14:70:8b:f0:55:c3:bb:c4:
         76:80:b8:ae:a4:54:59:a4:43:e8:55:3a:e0:85:eb:e7:e0:bc:
         98:c9:0c:f9:55:8c:9b:d0:60:61:bf:cd:9a:2b:93:6f:84:eb:
         26:38:0d:a6:d2:2a:16:7f:63:96:22:69:cc:0a:a2:2b:c7:2c:
         75:71:cd:c8:2a:a8:0b:02:97:dc:96:eb:be:7c:00:36:df:f3:
         34:f7:85:7a:49:7c:d5:5d:76:97:33:b6:7a:66:f5:74:3c:f8:
         87:23:44:c7:ba:73:c4:23:7c:d0:67:5c:0b:51:42:91:14:5c:
         54:63:eb:3d:7a:9a:29:36:80:71:5d:2b:d8:12:ea:92:09:42:
         68:32:b5:e5:f1:0c:72:94:59:1b:20:d8:fc:e6:12:30:13:1f:
         c7:44:5e:c3:02:d4:4e:04:d8:5f:18:1b:ab:1a:2a:8d:8c:cb:
         ee:36:60:dd:34:b6:d4:c6:d1:77:c1:55:55:5c:50:f6:7a:fc:
         60:e0:70:f2:09:ff:dd:cb:03:38:99:c1:99:a7:36:b6:aa:de:
         a3:05:ae:1e:b1:c6:c6:9f:79:c5:4d:a4:d9:e7:60:c9:21:b3:
         9c:6b:ff:41:37:95:c0:57:95:d9:b4:ce:52:86:5c:4c:c6:4e:
         89:a8:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:09:30 2026 by rpki-client