Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
File:                     883664DA613C9067C8155436693AEF1A82B3B1A7.mft (raw, json)
Hash identifier:          4Wst3217Jb4YUPpwcPhckD2EkjPin2p2dWbxPoLHIHI=
Subject key identifier:   84:CB:E2:F2:E0:E7:B4:64:9F:DB:6E:97:55:CB:56:41:C8:56:3C:EC
Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
Certificate issuer:       /CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Certificate serial:       77F495A1C0892AC0B1584C2BEC84C1F4B5689B7D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
Manifest number:          41
Signing time:             Fri 19 Jun 2026 16:20:24 +0000
Manifest this update:     Fri 19 Jun 2026 16:15:24 +0000
Manifest next update:     Sat 20 Jun 2026 19:54:24 +0000
Files and hashes:         1: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: ETbLJXXcJM3Uqzm41+hqN5GkUeg2ajdJtzrh7tkT7pM=)
                          2: 883664DA613C9067C8155436693AEF1A82B3B1A7.crl (hash: sNsRB3d/HnbOS+kVZj2J4gBEBawpywnaNHoTih92u4Q=)
                          3: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: lsAH30jSOhgM8OAAJtXdQCjaCWk5sZqIYZ6QuMuRymM=)
                          4: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: Yz7WTJdxRW1CYrN9boz8edyp4I9Scuuedk3B0vEsAGc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
                          rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 19:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f4:95:a1:c0:89:2a:c0:b1:58:4c:2b:ec:84:c1:f4:b5:68:9b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7
        Validity
            Not Before: Jun 19 16:15:24 2026 GMT
            Not After : Jun 20 19:54:24 2026 GMT
        Subject: CN=84CBE2F2E0E7B4649FDB6E9755CB5641C8563CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:13:a1:36:e4:80:df:14:3b:1d:29:30:9f:
                    79:7f:79:01:dd:f7:3b:20:ba:75:4d:73:30:17:c6:
                    b2:60:e0:34:22:db:6d:7e:38:e1:b1:c3:ab:82:ce:
                    c4:87:ef:f5:3b:2b:70:5c:9d:9b:55:e3:a1:ce:c1:
                    dd:c4:5b:95:6c:fe:0d:cc:18:c7:99:97:1e:be:9b:
                    4c:49:7f:b3:54:bf:49:b0:e9:46:3e:8f:bb:2c:aa:
                    ba:28:3b:81:bc:7f:32:e3:7b:41:37:e0:0f:c2:2f:
                    6c:c3:ff:1f:02:92:47:62:9c:f4:06:a9:5f:f2:c9:
                    b4:d9:1e:d6:d6:19:53:57:3f:1e:ed:f2:11:22:9c:
                    f6:0f:6d:be:3d:0f:88:aa:5e:fa:c9:9b:46:b3:63:
                    bf:39:11:75:51:3d:17:15:b5:37:01:96:66:30:a4:
                    cf:29:a9:ec:5d:7f:91:f5:05:a7:aa:36:0c:8a:5f:
                    ff:14:3d:ce:6c:4b:90:59:2e:78:09:0f:53:64:30:
                    f4:89:6d:79:c8:c0:5d:33:92:1e:e1:7d:3d:54:10:
                    30:8b:35:18:08:a1:d3:42:79:79:2c:9e:7b:d8:a1:
                    79:df:4a:43:d2:51:b9:3f:27:c9:4f:cc:14:cf:d5:
                    2c:04:c5:9d:aa:d5:73:86:f0:c7:7b:28:49:92:ab:
                    62:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CB:E2:F2:E0:E7:B4:64:9F:DB:6E:97:55:CB:56:41:C8:56:3C:EC
            X509v3 Authority Key Identifier:
                keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:7b:d1:67:1e:1b:91:23:80:44:f8:d4:84:ab:96:11:bb:
         43:db:b7:99:52:e9:27:56:5c:c3:1d:85:1c:10:ca:0a:9c:6c:
         f2:c2:2e:d8:75:3d:15:04:31:ad:f1:84:a4:e8:77:3d:64:ed:
         c5:4b:06:fd:c7:8a:52:57:d5:50:67:d1:c9:7d:bc:bb:21:4c:
         55:cd:5f:29:64:11:53:ef:a3:17:3c:63:1c:76:32:6f:06:50:
         26:6d:70:9b:63:60:34:c3:59:69:06:d7:2b:19:3e:2f:ba:30:
         1d:a4:ee:db:8b:a6:45:62:55:2a:14:0c:34:30:3a:93:a8:8f:
         40:38:8e:07:17:39:9f:20:7d:0a:28:59:f5:35:ef:33:d0:59:
         3e:68:14:e9:99:70:92:1a:1c:9c:68:24:5a:2a:f0:2b:5f:2a:
         ff:15:2f:e1:81:55:cb:c2:fb:bf:15:86:8b:04:4f:a2:0e:60:
         67:8a:9f:89:33:b2:b4:7b:f6:70:ac:b6:e5:29:9f:27:46:1b:
         94:15:e7:5f:88:30:68:b2:b4:fc:24:d5:0e:cf:70:f0:bb:2f:
         e6:47:d9:76:8d:7d:ca:7e:67:30:e9:e7:30:8f:1b:84:04:32:
         5b:a4:39:b6:c0:3d:19:7c:2a:8a:61:a7:31:59:35:0d:30:86:
         67:67:1c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:20:37 2026 by rpki-client