Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft
File:                     AD238D07A804B8783FEA2C95818033D3F37F9B13.mft (raw, json)
Hash identifier:          tll8IfPBtB2srNYwGAClsFe9B22Juv3SwNY4P8I1TLg=
Subject key identifier:   70:51:2A:1F:81:CE:35:02:B4:8F:6F:04:57:4B:9F:5F:35:54:D4:DB
Authority key identifier: AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13
Certificate issuer:       /CN=AD238D07A804B8783FEA2C95818033D3F37F9B13
Certificate serial:       58088C4A0A5D9B85B11F6FADA2368F2DB87B8136
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft
Manifest number:          36
Signing time:             Thu 11 Jun 2026 16:31:39 +0000
Manifest this update:     Thu 11 Jun 2026 16:26:39 +0000
Manifest next update:     Fri 12 Jun 2026 17:50:39 +0000
Files and hashes:         1: AD238D07A804B8783FEA2C95818033D3F37F9B13.crl (hash: jJYUQ1B9Q3CXp/AmyFCujkb2J0tWkh2bTnQIogYeL5o=)
                          2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: qb/n9u4SdQIIMXQTv0C6H7ovI6oRYrEsrPfBnGqFhG0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl
                          rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 17:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:08:8c:4a:0a:5d:9b:85:b1:1f:6f:ad:a2:36:8f:2d:b8:7b:81:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD238D07A804B8783FEA2C95818033D3F37F9B13
        Validity
            Not Before: Jun 11 16:26:39 2026 GMT
            Not After : Jun 12 17:50:39 2026 GMT
        Subject: CN=70512A1F81CE3502B48F6F04574B9F5F3554D4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:38:7e:46:30:68:b9:2a:58:46:1d:74:d3:
                    5c:06:8b:26:35:35:d9:d5:ab:89:53:2a:ee:9a:08:
                    94:07:02:91:bc:33:e0:56:db:a3:a1:ae:29:9f:83:
                    0a:8b:4f:d9:29:d5:9a:0f:8b:08:38:87:8a:9c:2d:
                    41:e8:89:7b:95:23:6d:1b:49:17:c2:24:21:89:0d:
                    d3:f6:82:b1:ed:14:f6:6b:8f:01:1b:4b:8a:ab:78:
                    0b:c1:45:7b:eb:26:fa:c0:03:b1:7e:42:44:32:e1:
                    d4:ac:a6:43:5a:af:fd:7e:35:18:d1:e1:b1:36:28:
                    5f:50:f1:15:d1:40:08:8b:da:61:37:de:bb:05:02:
                    f9:c7:dd:41:d7:01:95:91:1b:5e:94:40:e3:50:00:
                    66:e5:1d:b9:72:06:be:52:fa:57:1b:67:b0:5b:59:
                    82:59:ba:f5:48:05:b1:02:3d:2d:37:63:f1:b1:ab:
                    79:0d:ff:f4:d4:97:d8:ea:1f:79:65:03:29:20:10:
                    85:9a:41:a4:71:02:56:1e:2d:e7:ae:37:ff:15:67:
                    10:93:fe:fe:94:0e:ad:b6:a2:2d:3d:10:ed:bb:09:
                    7d:8e:89:04:8c:f9:7a:6c:16:fd:39:f5:70:56:61:
                    c8:a5:a5:1e:c8:48:78:ac:5e:c2:c4:9f:14:e4:43:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:51:2A:1F:81:CE:35:02:B4:8F:6F:04:57:4B:9F:5F:35:54:D4:DB
            X509v3 Authority Key Identifier:
                keyid:AD:23:8D:07:A8:04:B8:78:3F:EA:2C:95:81:80:33:D3:F3:7F:9B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD238D07A804B8783FEA2C95818033D3F37F9B13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/AD238D07A804B8783FEA2C95818033D3F37F9B13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1c:5e:7c:1f:53:48:b1:ed:62:24:8b:15:8b:e8:9f:87:d3:
         39:9e:63:13:8c:ea:d5:26:7a:b5:22:c3:09:8a:a4:a4:a4:57:
         47:20:a7:78:20:09:f0:b7:48:46:ab:31:a3:5c:ac:56:b3:86:
         6c:ba:48:ee:3d:5e:a9:ff:63:55:8d:49:e6:d2:71:9c:eb:80:
         b5:6a:c0:7b:f0:b8:ce:0d:8a:5b:f3:b8:65:46:8d:60:da:7e:
         74:36:1d:4f:93:a6:27:31:84:18:64:80:8f:91:dc:1a:be:f6:
         9a:0d:4e:56:33:06:96:45:0d:f5:c3:5b:6d:b1:ee:ef:85:7f:
         51:a2:14:7c:2e:63:39:c7:b6:77:a6:b7:68:42:fa:e9:45:c6:
         d6:5a:5d:76:a9:a1:ca:84:b3:53:13:24:e5:26:b3:6d:39:0c:
         fc:c5:89:69:82:6a:f8:2f:e6:fa:5f:c2:5c:c5:14:31:53:4a:
         05:f9:9a:01:b2:12:58:67:71:35:3d:ef:6a:ca:dc:fa:52:2a:
         34:9b:7e:96:16:7c:d7:43:4f:67:0b:5d:d7:48:14:f7:8a:e1:
         a7:02:16:55:8e:a8:3d:e9:28:0a:3b:9e:2b:a3:fd:93:58:b6:
         6e:93:53:07:c3:cb:de:21:85:a4:2f:b4:8f:ec:47:0a:c1:fd:
         dd:9b:7c:5b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWAiMSgpdm4WxH2+tojaPLbh7gTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNG
MzdGOUIxMzAeFw0yNjA2MTExNjI2MzlaFw0yNjA2MTIxNzUwMzlaMDMxMTAvBgNV
BAMTKDcwNTEyQTFGODFDRTM1MDJCNDhGNkYwNDU3NEI5RjVGMzU1NEQ0REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGCzh+RjBouSpYRh1001wGiyY1
NdnVq4lTKu6aCJQHApG8M+BW26OhrimfgwqLT9kp1ZoPiwg4h4qcLUHoiXuVI20b
SRfCJCGJDdP2grHtFPZrjwEbS4qreAvBRXvrJvrAA7F+QkQy4dSspkNar/1+NRjR
4bE2KF9Q8RXRQAiL2mE33rsFAvnH3UHXAZWRG16UQONQAGblHblyBr5S+lcbZ7Bb
WYJZuvVIBbECPS03Y/Gxq3kN//TUl9jqH3llAykgEIWaQaRxAlYeLeeuN/8VZxCT
/v6UDq22oi09EO27CX2OiQSM+XpsFv059XBWYcilpR7ISHisXsLEnxTkQzxfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcFEqH4HONQK0j28EV0ufXzVU1NswHwYDVR0j
BBgwFoAUrSONB6gEuHg/6iyVgYAz0/N/mxMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGU0NWM5ZWItM2JiNi00MjAzLThjODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdB
ODA0Qjg3ODNGRUEyQzk1ODE4MDMzRDNGMzdGOUIxMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRDIzOEQwN0E4MDRCODc4M0ZFQTJDOTU4MTgwMzNEM0YzN0Y5
QjEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj
ODYtZjA4YjY0ZGEzZWE5LzAvQUQyMzhEMDdBODA0Qjg3ODNGRUEyQzk1ODE4MDMz
RDNGMzdGOUIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADMcXnwfU0ix7WIkixWL6J+H0zmeYxOM6tUm
erUiwwmKpKSkV0cgp3ggCfC3SEarMaNcrFazhmy6SO49Xqn/Y1WNSebScZzrgLVq
wHvwuM4NilvzuGVGjWDafnQ2HU+TpicxhBhkgI+R3Bq+9poNTlYzBpZFDfXDW22x
7u+Ff1GiFHwuYznHtnemt2hC+ulFxtZaXXapocqEs1MTJOUms205DPzFiWmCavgv
5vpfwlzFFDFTSgX5mgGyElhncTU972rK3PpSKjSbfpYWfNdDT2cLXddIFPeK4acC
FlWOqD3pKAo7niuj/ZNYtm6TUwfDy94hhaQvtI/sRwrB/d2bfFs=
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:04:01 2026 by rpki-client