Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft
File:                     6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft (raw, json)
Hash identifier:          MZOuN/c8iSsc/Cvg6pAz/dUmF69E7coA43XH+1aQvao=
Subject key identifier:   31:91:C8:E5:81:53:28:07:3C:9F:BA:CC:A0:EE:F9:79:CA:D8:50:A2
Authority key identifier: 63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC
Certificate issuer:       /CN=6340B85B817E071CA1087080DE8CCB9ED89BC9CC
Certificate serial:       488D948415B802D3E1565CFD8F46662B6B7C766C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft
Manifest number:          D3
Signing time:             Wed 07 Oct 2026 14:41:12 +0000
Manifest this update:     Wed 07 Oct 2026 14:36:12 +0000
Manifest next update:     Thu 08 Oct 2026 18:13:12 +0000
Files and hashes:         1: 6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl (hash: ZWV37AOSMV0Ryjfi7ywEiWTpjTQinPwtt2+sirsD4kU=)
                          2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: C1l+SKZdvmsGoFL66tN6deMpQsnd5mLdq6lfMgLgcng=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl
                          rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 18:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8d:94:84:15:b8:02:d3:e1:56:5c:fd:8f:46:66:2b:6b:7c:76:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6340B85B817E071CA1087080DE8CCB9ED89BC9CC
        Validity
            Not Before: Oct  7 14:36:12 2026 GMT
            Not After : Oct  8 18:13:12 2026 GMT
        Subject: CN=3191C8E5815328073C9FBACCA0EEF979CAD850A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:7e:96:11:5b:73:0a:d5:91:55:63:c5:c3:
                    73:98:3a:82:f7:34:e3:f9:68:f0:41:4e:33:72:e5:
                    3c:29:fd:67:57:66:9c:a6:99:be:3c:81:ba:79:bb:
                    fc:c3:c1:59:70:3b:0d:3d:c8:f0:1f:66:cf:c2:90:
                    98:0b:fc:ae:9c:a2:1a:ed:c8:3e:e3:74:d8:0f:26:
                    f7:21:67:b5:54:d5:28:e6:30:f6:66:ad:b4:b1:fe:
                    9f:e7:db:7b:b2:1a:2b:7c:2d:a2:20:ee:b3:85:31:
                    44:16:13:d8:59:61:c0:ee:9a:81:f9:98:1d:46:db:
                    8d:17:a4:a8:28:11:94:36:98:7f:58:d5:8b:51:23:
                    17:e5:b2:3c:c1:4f:61:49:d8:fb:46:f9:72:03:bb:
                    9f:db:f5:b9:53:8f:96:e9:9b:e6:9d:8c:1c:46:85:
                    77:d6:00:6c:73:80:3a:51:f9:3f:c3:bd:ba:69:47:
                    72:e4:08:bd:90:08:b5:76:be:f6:32:24:30:5d:51:
                    f1:fc:a5:9c:4d:c3:b2:9c:7e:73:50:2a:6a:e7:0a:
                    35:5e:8a:98:08:47:ca:af:c7:36:e4:88:07:8c:73:
                    17:f5:cc:1e:83:ae:18:a1:c9:2d:f8:1a:7a:c1:42:
                    12:14:76:63:39:4e:02:ee:ed:43:e3:52:a9:37:09:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:91:C8:E5:81:53:28:07:3C:9F:BA:CC:A0:EE:F9:79:CA:D8:50:A2
            X509v3 Authority Key Identifier:
                keyid:63:40:B8:5B:81:7E:07:1C:A1:08:70:80:DE:8C:CB:9E:D8:9B:C9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/6340B85B817E071CA1087080DE8CCB9ED89BC9CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:43:4e:f8:59:04:fe:da:99:71:2e:2f:5a:76:95:b8:41:f4:
         20:3e:5f:8c:4b:29:05:3a:54:1e:50:57:fc:df:88:66:a1:8c:
         27:a6:f2:cb:56:e3:00:d2:77:43:46:1e:61:22:b2:5c:bf:04:
         08:f2:f9:ca:40:4d:e7:d9:45:b9:17:bb:1a:04:68:f8:cb:93:
         5f:f0:81:e2:a5:79:57:6c:3a:c7:56:42:47:a9:9a:be:d1:66:
         e1:14:10:52:2f:04:a2:11:23:51:f7:95:b9:00:d1:32:7e:78:
         d6:63:3a:71:0c:3e:29:1c:2c:95:0d:95:29:54:1d:20:f7:da:
         0c:6b:3c:42:4d:52:dd:76:15:06:52:38:8a:ff:f3:b1:f5:5c:
         b7:08:73:e5:82:1a:48:2e:4c:b6:67:3d:26:9b:5a:1a:ce:32:
         4e:66:f6:55:f6:7a:86:4e:10:a4:81:80:9e:68:b9:df:98:e8:
         db:16:0c:f1:41:6d:c6:39:47:6c:35:2f:78:4a:67:9c:aa:21:
         44:39:1a:eb:76:db:4f:a6:b4:22:b7:20:81:fc:95:0f:31:24:
         80:77:26:eb:f8:71:9d:a6:33:31:bb:19:8f:8d:a7:42:af:71:
         38:1f:df:5f:7d:8b:a7:e6:b3:d2:ae:0a:cc:1d:87:7b:0c:13:
         e0:31:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:57:10 2026 by rpki-client