Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
File:                     F440C463790421765C0B198FBF82B80F70529E23.mft (raw, json)
Hash identifier:          rlM9pU9pdItfHKYIrBNAzj8H9ql5bQyKoyz8H0aSeuw=
Subject key identifier:   A9:41:9B:4A:F2:04:BE:7B:F3:9D:5C:12:95:5B:D9:AF:55:8B:C0:51
Authority key identifier: F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
Certificate issuer:       /CN=F440C463790421765C0B198FBF82B80F70529E23
Certificate serial:       206713987CC95DD0041A713CF21C9F92CE70AE49
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
Manifest number:          41
Signing time:             Fri 19 Jun 2026 13:16:59 +0000
Manifest this update:     Fri 19 Jun 2026 13:11:59 +0000
Manifest next update:     Sat 20 Jun 2026 16:28:59 +0000
Files and hashes:         1: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: DUNSj4kP6eOZRckNiWJJBeXQEQuZewuUxpFimv6tinc=)
                          2: F440C463790421765C0B198FBF82B80F70529E23.crl (hash: 6y7o3SRsLH5fuX4k25e7yeJC6XrERClkMHFOW7xMeFY=)
                          3: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: vIUCd1IemIKCQ+NzE6xQfnpmhwQEajDU6BevZYDhd68=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
                          rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 16:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:67:13:98:7c:c9:5d:d0:04:1a:71:3c:f2:1c:9f:92:ce:70:ae:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F440C463790421765C0B198FBF82B80F70529E23
        Validity
            Not Before: Jun 19 13:11:59 2026 GMT
            Not After : Jun 20 16:28:59 2026 GMT
        Subject: CN=A9419B4AF204BE7BF39D5C12955BD9AF558BC051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:80:79:d6:a9:e7:72:22:e3:50:19:c9:9d:
                    50:82:c2:03:37:0d:01:dd:ab:85:ba:9b:06:43:9f:
                    fa:47:14:83:2f:d2:a4:c3:49:cd:8d:d2:2f:c0:3c:
                    25:41:e5:d0:19:fd:9f:2a:44:2c:e5:17:3d:04:64:
                    e1:ed:37:f5:6f:46:3b:0e:69:a9:15:82:05:8b:c1:
                    27:b2:5a:9b:b7:4f:7d:f4:bc:3c:ad:7d:6a:52:a4:
                    d1:6f:f9:f8:8d:c5:d4:2c:6e:34:0e:46:c2:02:04:
                    67:0b:ad:a9:b8:f7:62:d5:75:81:4b:cf:83:3e:1e:
                    56:76:1e:de:c0:73:46:ac:3a:07:ce:d2:be:a1:a4:
                    a0:fd:fa:b5:a3:36:ba:ca:6f:69:57:2b:7d:d6:a6:
                    9f:23:85:81:59:c7:64:20:7c:1f:29:19:72:60:91:
                    75:38:e0:46:46:9f:50:ca:81:d2:47:68:33:bc:6b:
                    7f:6f:37:cd:b8:aa:29:65:be:99:13:3e:9e:8c:14:
                    67:ad:3c:5f:aa:1a:38:a0:54:d9:94:17:9b:7f:92:
                    6e:11:91:c6:f7:2c:d2:f2:c8:14:80:c4:4e:8f:0e:
                    84:b6:e3:47:c0:3e:cf:d0:58:55:51:7f:55:cf:4c:
                    71:86:03:24:5f:91:53:89:eb:a4:9b:95:51:7f:3f:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:41:9B:4A:F2:04:BE:7B:F3:9D:5C:12:95:5B:D9:AF:55:8B:C0:51
            X509v3 Authority Key Identifier:
                keyid:F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:18:80:c5:3a:9a:2a:c4:d5:43:f1:aa:74:e0:ad:cf:7d:4b:
         88:64:71:91:b4:ce:1a:6b:dc:87:04:6c:11:26:d8:a0:02:a4:
         e5:d8:e1:2c:2b:a6:90:4a:53:88:e9:88:60:f5:df:04:69:8e:
         d7:3e:1e:c2:5c:a1:79:c6:3b:20:32:5e:3e:d3:b5:0d:ce:d0:
         dc:de:70:05:47:62:b6:c1:48:92:73:d1:25:1f:04:6c:ee:13:
         e6:6a:22:fb:f3:c5:d9:25:3b:54:ce:2b:d8:3f:b8:b1:6c:ca:
         54:5b:64:a0:b4:0d:9c:26:c1:27:92:a0:47:f2:29:18:72:97:
         7d:2a:8c:09:23:42:66:cc:40:1e:8e:2c:98:49:c8:de:71:60:
         be:08:af:bc:7c:af:2b:1c:df:8f:9a:f3:8d:cd:a7:01:e9:53:
         e5:e2:ad:fc:1a:2d:6e:9b:63:68:78:11:ee:80:76:ba:d9:8c:
         3c:60:51:01:20:fe:db:fd:6d:bb:88:89:3d:60:42:cb:f6:ac:
         2e:ae:02:6d:c9:f5:86:ee:6b:39:db:90:1a:69:66:4a:89:5d:
         f7:81:42:b0:b7:2a:f2:b3:b1:1d:65:b3:0d:e6:0b:8c:cd:2a:
         57:e6:57:c3:78:4f:bb:4b:8c:33:e7:5b:80:a8:90:d2:04:c2:
         f1:fd:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:00:58 2026 by rpki-client