Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
File:                     53A00628F6956E756C477A3B4A12344C34B5F1A8.mft (raw, json)
Hash identifier:          poF4NUp4G9/Oh5JfqQU0Y+gqSZa0uTRNKYZRmIxSbaM=
Subject key identifier:   3C:1A:7F:1F:17:7A:A4:4F:D1:9E:8C:B3:6A:0F:34:C1:03:1E:8F:23
Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8
Certificate issuer:       /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8
Certificate serial:       4A7BC1035D77E3E99AE01C46CD46038B732F3741
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
Manifest number:          41
Signing time:             Fri 19 Jun 2026 15:44:40 +0000
Manifest this update:     Fri 19 Jun 2026 15:39:40 +0000
Manifest next update:     Sat 20 Jun 2026 19:29:40 +0000
Files and hashes:         1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8=)
                          2: 53A00628F6956E756C477A3B4A12344C34B5F1A8.crl (hash: JmxjXoHU2iegj1rzMF5mTBfaIPGZbcwp3ws2Pj2eUS4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl
                          rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 19:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7b:c1:03:5d:77:e3:e9:9a:e0:1c:46:cd:46:03:8b:73:2f:37:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8
        Validity
            Not Before: Jun 19 15:39:40 2026 GMT
            Not After : Jun 20 19:29:40 2026 GMT
        Subject: CN=3C1A7F1F177AA44FD19E8CB36A0F34C1031E8F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:a6:96:36:58:b7:79:50:9a:71:30:7f:e9:
                    16:1f:0f:b7:61:84:4d:7f:3c:05:b1:da:d6:78:50:
                    42:88:cb:f5:63:b5:d9:bb:43:1d:e6:41:20:12:35:
                    2d:9d:75:ad:41:43:84:ac:c4:da:7a:e8:3a:d5:93:
                    e0:0c:d5:22:17:af:ce:eb:df:3c:66:56:d1:d3:8b:
                    14:3e:7e:66:e0:bf:ab:b6:da:15:cd:64:2b:26:3a:
                    93:5f:b9:26:96:df:83:a3:ef:52:68:ab:0d:96:df:
                    86:89:5a:d9:94:97:fe:5f:f1:d1:0d:bd:b6:aa:66:
                    83:6f:c0:cb:0c:42:99:b2:7d:51:98:39:46:61:49:
                    b5:f9:08:46:d8:94:53:fa:82:98:4f:7e:91:65:2f:
                    cc:68:37:48:a2:3b:83:71:d6:de:03:fa:23:ef:87:
                    94:c7:4b:2d:91:1e:0f:09:17:70:93:44:cc:15:61:
                    a3:8f:da:ad:1d:cc:3d:7d:96:79:4c:a8:10:35:9f:
                    0d:65:f3:9a:0d:fe:be:6b:71:6a:0e:f9:e5:c6:91:
                    0b:28:86:4a:95:54:0d:6f:19:e9:8f:a2:c6:6a:e6:
                    88:a8:39:67:f0:dd:50:7e:2b:10:0d:f3:2d:13:c4:
                    1d:17:76:e9:91:03:1e:7d:71:28:c5:34:78:95:cd:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1A:7F:1F:17:7A:A4:4F:D1:9E:8C:B3:6A:0F:34:C1:03:1E:8F:23
            X509v3 Authority Key Identifier:
                keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:79:79:db:d2:da:0a:bd:a6:4f:7e:51:cb:88:30:ee:b5:6b:
         19:4c:54:c5:32:13:28:e9:6b:33:68:ad:a7:a5:f4:cb:c6:bb:
         ac:23:c4:18:a5:fc:d4:8a:b8:33:b0:8b:16:7d:cb:ae:95:ce:
         45:3e:48:7f:8b:6c:7a:de:3e:69:95:53:ea:a3:60:67:df:9a:
         5f:9b:6e:9c:cf:5b:0a:18:41:b0:8e:81:34:97:ee:6d:4b:3e:
         59:2d:cc:be:3e:29:41:6c:f8:22:bb:d9:30:66:28:3b:27:c7:
         a2:5d:18:cc:88:5a:87:c1:ad:86:4a:a9:67:16:8c:3b:0c:4a:
         32:83:7d:4c:a6:e9:63:04:61:fc:7b:5c:f5:b0:9e:24:87:61:
         4d:2c:d0:b6:18:5e:2c:59:10:ef:6a:b9:f2:44:c0:71:51:ab:
         fc:10:bf:74:fa:0d:cb:f4:7b:18:f1:c5:18:2f:6d:fa:0a:28:
         9d:4f:af:bc:a5:02:77:21:1c:0f:db:c4:5f:1a:f4:73:d4:26:
         4c:d1:fe:a2:c6:fa:cc:c0:86:20:fd:74:d7:83:60:f6:bc:7b:
         e4:a1:2e:83:80:89:00:67:a3:6a:63:d9:ae:5e:9b:6a:87:44:
         4f:d5:08:d1:12:37:84:c3:89:ea:4f:60:4d:2f:57:b0:70:bf:
         e9:f5:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:19:57 2026 by rpki-client