Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft
File:                     2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft (raw, json)
Hash identifier:          uZMfpAI0L5/tcoryAiD8M4louzbkIO/Q5B7NT3ADu6A=
Subject key identifier:   69:59:9C:5E:01:E9:B3:E4:D2:98:F6:14:65:3B:05:97:4A:E9:FE:17
Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED
Certificate issuer:       /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED
Certificate serial:       7107FEF8AC93CEA06E5DC7B97E8315B766188DA7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft
Manifest number:          42
Signing time:             Sat 20 Jun 2026 02:43:04 +0000
Manifest this update:     Sat 20 Jun 2026 02:38:04 +0000
Manifest next update:     Sun 21 Jun 2026 04:05:04 +0000
Files and hashes:         1: 2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl (hash: b9u4VsitVmgaxFwSjlVxT2d9NWpqvSBT+E+MvMPLVwQ=)
                          2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl
                          rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 04:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:07:fe:f8:ac:93:ce:a0:6e:5d:c7:b9:7e:83:15:b7:66:18:8d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED
        Validity
            Not Before: Jun 20 02:38:04 2026 GMT
            Not After : Jun 21 04:05:04 2026 GMT
        Subject: CN=69599C5E01E9B3E4D298F614653B05974AE9FE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:f2:18:c9:d8:7d:2a:d4:a2:89:65:44:be:
                    f7:da:ff:91:48:55:c6:9a:79:ef:0e:16:58:72:63:
                    02:00:94:10:ec:56:9f:9e:4c:cb:8b:c1:09:d4:9d:
                    05:a5:1d:12:0b:24:d8:9d:3e:a7:e5:fc:76:fe:d9:
                    ec:e3:07:b0:68:96:6e:d4:fb:b9:df:8c:34:dc:95:
                    51:79:be:fa:60:95:47:9e:f0:5f:f6:71:6d:9d:19:
                    41:b6:12:aa:fa:dc:04:a5:b4:f9:a0:00:48:0a:f0:
                    9c:ce:c0:dd:ff:1b:9e:27:99:d9:24:ca:2d:a9:c8:
                    66:65:90:10:bc:0f:61:aa:35:05:7d:96:1f:81:f8:
                    8e:2e:fe:38:75:f6:6f:8f:04:18:2e:5e:e6:e8:57:
                    9f:61:35:d0:8d:fc:b7:d8:85:63:ba:7e:7b:3e:61:
                    d3:dd:c3:6e:d7:fc:4d:7f:0b:82:fc:28:70:9c:7e:
                    7e:5e:1c:5d:0c:70:6a:f9:f5:59:99:3e:2f:71:4d:
                    22:fd:a8:09:f4:4c:08:d7:1e:cb:fa:20:7d:e1:08:
                    16:53:d7:7b:0a:0d:56:82:9d:f7:2c:ea:76:ad:8f:
                    bb:fa:60:f0:6a:f9:aa:ba:01:c6:82:34:ab:68:01:
                    b0:e1:ff:57:8a:27:40:6d:b8:8b:5d:dd:fd:f6:51:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:59:9C:5E:01:E9:B3:E4:D2:98:F6:14:65:3B:05:97:4A:E9:FE:17
            X509v3 Authority Key Identifier:
                keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:36:6c:65:f2:93:b3:1f:04:3e:29:ca:9c:ee:7d:ee:e6:
         45:2c:a9:16:f9:c8:d5:70:1d:8e:4f:12:f2:bf:1b:1b:df:70:
         85:36:2e:b9:fc:41:86:4b:48:76:c7:38:fd:82:03:c5:75:c8:
         99:99:bd:a0:d5:dc:99:53:50:9e:62:b9:b9:24:09:03:47:05:
         ca:0d:02:eb:56:58:af:b0:7b:be:cb:eb:70:ce:ad:c4:f0:a3:
         23:a9:d9:d2:cb:04:9b:25:21:5f:47:4d:87:f7:31:98:91:df:
         d0:92:bd:88:5e:3a:bb:b2:86:0b:92:13:ec:65:35:db:5c:83:
         96:a4:10:b6:44:b5:c3:06:96:5e:e3:55:9e:e0:8d:3f:9a:3d:
         fe:50:b5:90:a7:a4:bf:14:24:7a:0a:a8:09:71:19:1d:8e:a7:
         eb:53:93:57:94:7d:dd:c7:a7:76:f7:50:d8:93:81:da:31:fb:
         5c:b8:9b:5f:3c:ff:30:36:3e:30:17:5f:aa:15:58:4b:14:4b:
         28:53:fb:89:84:9d:9b:e4:0d:42:ad:82:36:0d:74:f1:a3:e5:
         73:00:d3:d1:d9:25:54:ba:3c:77:6e:57:4a:43:1b:ac:01:a7:
         1b:df:65:66:e3:82:6a:bb:7d:f3:47:5c:70:37:67:db:99:50:
         86:f9:ef:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:14:55 2026 by rpki-client