Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft
File:                     D441988C2049D77F9D98652623A88108BD7A9AE0.mft (raw, json)
Hash identifier:          eljGgBMYv7T6jTYp4thT03wpP08nKymN+UhRHqs1rcY=
Subject key identifier:   83:95:E2:1C:F4:30:B1:14:E4:A1:ED:5B:53:05:1D:B2:CC:5B:61:92
Authority key identifier: D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0
Certificate issuer:       /CN=D441988C2049D77F9D98652623A88108BD7A9AE0
Certificate serial:       246D2CFEB33F06BBBB8F9D404F8152E637223E22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 23:20:57 +0000
Manifest this update:     Wed 17 Jun 2026 23:15:57 +0000
Manifest next update:     Fri 19 Jun 2026 01:23:57 +0000
Files and hashes:         1: D441988C2049D77F9D98652623A88108BD7A9AE0.crl (hash: S41Vyz06KB2xYUOdcF6yVyx58Su0GuBInd10W+/9rJo=)
                          2: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: Ncv7w2hXW8e/iglgpSl3KIA/3oBjq+9ZdH/1lNnm5C8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl
                          rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 01:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6d:2c:fe:b3:3f:06:bb:bb:8f:9d:40:4f:81:52:e6:37:22:3e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441988C2049D77F9D98652623A88108BD7A9AE0
        Validity
            Not Before: Jun 17 23:15:57 2026 GMT
            Not After : Jun 19 01:23:57 2026 GMT
        Subject: CN=8395E21CF430B114E4A1ED5B53051DB2CC5B6192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:1b:b7:6e:3d:10:72:0a:cc:c6:ad:ea:6b:
                    82:04:0f:c1:2e:01:8b:d6:f6:81:94:1a:31:88:50:
                    90:14:69:82:e7:39:ce:46:96:45:e6:3f:16:6e:28:
                    e0:c5:ae:ce:80:27:ac:b3:0b:f5:f7:c7:92:ea:e4:
                    b4:1c:fe:b5:6d:b9:56:5d:ea:c2:a7:2a:c9:c5:cf:
                    45:77:f3:e3:c9:64:ad:ea:e0:3c:73:a2:0b:89:45:
                    41:24:a4:d0:4d:56:d0:30:e1:b2:11:d5:ff:d1:dd:
                    2a:e4:41:c9:9d:b8:a5:5d:05:7c:ed:44:26:e0:64:
                    93:f2:2b:4c:84:38:83:03:23:0c:f8:85:20:db:cb:
                    d9:5f:eb:53:1d:fe:24:91:0d:8e:fb:e2:c8:91:05:
                    86:61:58:34:3d:df:51:11:e9:70:c7:10:40:ea:ef:
                    10:25:73:24:de:c2:74:fa:a1:5d:5b:a3:15:5e:9a:
                    9d:43:11:e6:c1:03:57:e0:fc:4e:b5:45:70:c3:04:
                    62:23:e4:85:7b:79:05:23:f3:a5:02:02:30:ce:6f:
                    88:c5:6f:a3:6c:c8:0d:3c:c0:f2:bd:fc:ed:e8:01:
                    49:6c:bc:1a:08:9b:c5:1b:cf:16:4f:2d:75:ab:67:
                    24:da:ba:5f:50:cc:a7:f7:ec:16:ed:f4:d4:7a:15:
                    a4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:95:E2:1C:F4:30:B1:14:E4:A1:ED:5B:53:05:1D:B2:CC:5B:61:92
            X509v3 Authority Key Identifier:
                keyid:D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:6c:74:6d:5d:9a:5f:4e:0d:fa:b1:75:e8:cd:ee:07:22:
         c3:2f:c3:7b:bc:0e:e2:83:b5:87:bc:ea:80:21:b5:9a:7b:16:
         7b:55:86:2d:64:d8:26:b0:ea:0a:f7:6c:59:36:c4:09:42:bc:
         08:e5:f1:e9:d1:65:39:88:f9:d7:e0:1e:5b:9d:cd:3b:32:1c:
         c9:81:54:fd:1d:f8:e6:9a:09:fc:1d:01:1d:6b:e7:7f:20:29:
         25:aa:38:f7:7e:99:4a:34:44:b9:39:ac:fd:bb:52:06:09:99:
         0c:8d:6c:b4:2d:31:66:91:94:e0:86:6c:26:1c:54:c0:0a:ec:
         21:bd:5d:4a:de:bb:b4:70:d3:3e:16:d7:c9:b4:b5:5d:af:25:
         5e:ea:26:a1:d9:d9:ea:11:08:cc:4a:0d:3c:c5:c3:4c:60:93:
         bf:a0:02:9c:87:3b:92:59:cc:ee:eb:13:85:6b:86:f8:3a:53:
         73:0a:b7:fc:a4:6e:c0:90:a1:ca:ed:ba:72:cf:1a:a5:54:fd:
         79:75:56:19:a3:57:c4:9f:e8:0c:87:c4:73:c8:01:11:19:2c:
         fc:8b:28:da:98:2e:d3:30:4d:7d:fa:c3:08:22:ca:9e:60:10:
         42:d6:2f:76:cb:d8:cd:f6:93:fa:61:54:86:7b:c8:29:9e:c3:
         d6:b8:4f:89
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJG0s/rM/Bru7j51AT4FS5jciPiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhC
RDdBOUFFMDAeFw0yNjA2MTcyMzE1NTdaFw0yNjA2MTkwMTIzNTdaMDMxMTAvBgNV
BAMTKDgzOTVFMjFDRjQzMEIxMTRFNEExRUQ1QjUzMDUxREIyQ0M1QjYxOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJxu3bj0QcgrMxq3qa4IED8Eu
AYvW9oGUGjGIUJAUaYLnOc5GlkXmPxZuKODFrs6AJ6yzC/X3x5Lq5LQc/rVtuVZd
6sKnKsnFz0V38+PJZK3q4DxzoguJRUEkpNBNVtAw4bIR1f/R3SrkQcmduKVdBXzt
RCbgZJPyK0yEOIMDIwz4hSDby9lf61Md/iSRDY774siRBYZhWDQ931ER6XDHEEDq
7xAlcyTewnT6oV1boxVemp1DEebBA1fg/E61RXDDBGIj5IV7eQUj86UCAjDOb4jF
b6NsyA08wPK9/O3oAUlsvBoIm8UbzxZPLXWrZyTaul9QzKf37Bbt9NR6FaShAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUg5XiHPQwsRTkoe1bUwUdssxbYZIwHwYDVR0j
BBgwFoAU1EGYjCBJ13+dmGUmI6iBCL16muAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWQ4MjNiYjMtNWEwMS00NjU4LWE3ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMy
MDQ5RDc3RjlEOTg2NTI2MjNBODgxMDhCRDdBOUFFMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9ENDQxOTg4QzIwNDlENzdGOUQ5ODY1MjYyM0E4ODEwOEJEN0E5
QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3
ODMtZjhlODlmYWRjZjQ1LzAvRDQ0MTk4OEMyMDQ5RDc3RjlEOTg2NTI2MjNBODgx
MDhCRDdBOUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG03bHRtXZpfTg36sXXoze4HIsMvw3u8DuKD
tYe86oAhtZp7FntVhi1k2Caw6gr3bFk2xAlCvAjl8enRZTmI+dfgHludzTsyHMmB
VP0d+OaaCfwdAR1r538gKSWqOPd+mUo0RLk5rP27UgYJmQyNbLQtMWaRlOCGbCYc
VMAK7CG9XUreu7Rw0z4W18m0tV2vJV7qJqHZ2eoRCMxKDTzFw0xgk7+gApyHO5JZ
zO7rE4Vrhvg6U3MKt/ykbsCQocrtunLPGqVU/Xl1VhmjV8Sf6AyHxHPIAREZLPyL
KNqYLtMwTX36wwgiyp5gEELWL3bL2M32k/phVIZ7yCmew9a4T4k=
-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:57 2026 by rpki-client