Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
File:                     6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft (raw, json)
Hash identifier:          mbq8/bdmx50L4+oM7HUg0mBaLiEeB+Q2H32LS4dj/oU=
Subject key identifier:   12:CA:61:E1:FF:E6:7C:D6:2C:47:BB:45:1B:CA:E6:1D:1A:8A:22:AA
Authority key identifier: 6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24
Certificate issuer:       /CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
Certificate serial:       02825F5296F71B8FDC5B32334175C6FC8FBABE38
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 16:34:58 +0000
Manifest this update:     Tue 02 Jun 2026 16:29:58 +0000
Manifest next update:     Wed 03 Jun 2026 16:47:58 +0000
Files and hashes:         1: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl (hash: //JRmBRneFoYDW6hyRUAk/sE/IVKmPMa2i4RqDGHny4=)
                          2: 3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (hash: /UiS0/YqAJP6vBXmUjstv/RqhsN7l6a5S8YjTvqIQ1U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl
                          rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:82:5f:52:96:f7:1b:8f:dc:5b:32:33:41:75:c6:fc:8f:ba:be:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
        Validity
            Not Before: Jun  2 16:29:58 2026 GMT
            Not After : Jun  3 16:47:58 2026 GMT
        Subject: CN=12CA61E1FFE67CD62C47BB451BCAE61D1A8A22AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:43:50:e6:c8:eb:1f:93:22:05:92:95:a6:
                    8c:54:3b:71:72:56:f3:16:35:11:4d:36:6b:5a:9b:
                    7a:7f:bd:c9:f7:d4:39:5f:2d:ef:02:4f:c2:44:0e:
                    5a:36:21:97:91:52:3d:1d:71:c1:57:8f:f1:a3:f7:
                    7c:c6:a1:9a:39:7c:aa:71:33:c1:15:32:7b:55:32:
                    59:41:cd:79:e2:6e:da:e6:33:28:5d:fb:cd:da:cf:
                    5d:18:59:92:35:b0:f4:ae:e9:26:3e:ec:5c:f0:37:
                    4f:da:4b:93:cd:fe:c6:23:35:af:b3:de:fc:ed:9f:
                    49:55:b8:0c:c4:8e:37:1f:ad:77:39:0d:00:00:57:
                    92:2e:19:a3:fb:6b:4c:d8:af:82:17:f9:bb:d2:41:
                    14:6d:83:3c:3c:0e:0e:2f:e8:b4:71:68:72:31:ad:
                    44:07:f7:42:c7:3c:19:a6:ae:00:dc:21:00:e7:e7:
                    a0:80:78:cd:3b:d8:28:d6:27:4f:0a:a2:80:e7:31:
                    55:31:ad:9c:52:a8:70:fb:53:a6:4e:55:e4:29:c1:
                    f7:d1:13:e3:b8:08:ff:b4:54:0b:ae:2d:c0:65:8c:
                    23:52:76:e6:f4:fd:af:8e:7c:4c:88:14:05:dd:8f:
                    35:cc:0b:8f:94:e6:6c:ff:dd:5b:2b:a4:4c:a7:bc:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CA:61:E1:FF:E6:7C:D6:2C:47:BB:45:1B:CA:E6:1D:1A:8A:22:AA
            X509v3 Authority Key Identifier:
                keyid:6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bb:f3:a6:64:e0:46:a7:34:52:64:f2:c5:ab:fc:62:50:38:
         dd:62:82:fc:10:2d:de:37:8b:d6:69:55:2f:dd:8a:49:b7:7a:
         21:8e:8c:41:94:6d:aa:1b:5c:bb:1a:ac:07:15:3d:cc:d1:d8:
         69:d2:1d:eb:48:3a:ae:29:e1:2f:b1:7b:a0:0e:55:28:d0:af:
         26:be:46:aa:d3:00:f3:ec:04:66:33:a3:56:fb:c4:63:39:fc:
         01:ed:8e:9b:74:14:43:1a:a7:27:1d:4e:68:6a:d8:de:cf:7d:
         c7:83:93:dc:29:23:0b:2c:06:8a:6a:f7:ff:85:84:5f:b0:23:
         ac:3c:26:c7:3f:0c:a4:91:c1:24:0f:31:7f:e6:bc:df:ed:00:
         13:8d:f7:15:6e:fa:5a:7a:e3:7f:9a:71:5f:4e:d8:14:e6:4c:
         01:ce:d2:11:f7:d9:5c:c0:44:8c:f0:ae:1d:88:a4:14:e1:2e:
         f2:18:bc:e3:12:69:94:13:b2:97:7e:3f:86:bb:45:71:5d:d3:
         c2:49:61:ac:7c:6d:62:19:18:60:b0:b8:35:7d:c3:20:8f:1b:
         9c:de:bd:2c:8e:d9:ff:d8:5e:f1:6c:91:02:97:76:59:ba:68:
         be:18:88:1b:07:d9:9c:16:f6:5c:8e:8a:66:9d:41:4a:17:bb:
         ba:4f:42:89
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAoJfUpb3G4/cWzIzQXXG/I+6vjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQyNUIwODQ0QTUxRUZDMUY5Qzk1M0EzRDQwODY4QUFE
MjE5NjgyNDAeFw0yNjA2MDIxNjI5NThaFw0yNjA2MDMxNjQ3NThaMDMxMTAvBgNV
BAMTKDEyQ0E2MUUxRkZFNjdDRDYyQzQ3QkI0NTFCQ0FFNjFEMUE4QTIyQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaENQ5sjrH5MiBZKVpoxUO3Fy
VvMWNRFNNmtam3p/vcn31DlfLe8CT8JEDlo2IZeRUj0dccFXj/Gj93zGoZo5fKpx
M8EVMntVMllBzXnibtrmMyhd+83az10YWZI1sPSu6SY+7FzwN0/aS5PN/sYjNa+z
3vztn0lVuAzEjjcfrXc5DQAAV5IuGaP7a0zYr4IX+bvSQRRtgzw8Dg4v6LRxaHIx
rUQH90LHPBmmrgDcIQDn56CAeM072CjWJ08KooDnMVUxrZxSqHD7U6ZOVeQpwffR
E+O4CP+0VAuuLcBljCNSdub0/a+OfEyIFAXdjzXMC4+U5mz/3VsrpEynvCvVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEsph4f/mfNYsR7tFG8rmHRqKIqowHwYDVR0j
BBgwFoAUbSWwhEpR78H5yVOj1AhoqtIZaCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Nzg2NTk5YTYtZDg2Yi00NzFhLWEwNWItYTlmYWZlM2JiNjlhLzAvNkQyNUIwODQ0
QTUxRUZDMUY5Qzk1M0EzRDQwODY4QUFEMjE5NjgyNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RDI1QjA4NDRBNTFFRkMxRjlDOTUzQTNENDA4NjhBQUQyMTk2
ODI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzg2NTk5YTYtZDg2Yi00NzFhLWEw
NWItYTlmYWZlM2JiNjlhLzAvNkQyNUIwODQ0QTUxRUZDMUY5Qzk1M0EzRDQwODY4
QUFEMjE5NjgyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAq786Zk4EanNFJk8sWr/GJQON1igvwQLd43
i9ZpVS/dikm3eiGOjEGUbaobXLsarAcVPczR2GnSHetIOq4p4S+xe6AOVSjQrya+
RqrTAPPsBGYzo1b7xGM5/AHtjpt0FEMapycdTmhq2N7PfceDk9wpIwssBopq9/+F
hF+wI6w8Jsc/DKSRwSQPMX/mvN/tABON9xVu+lp643+acV9O2BTmTAHO0hH32VzA
RIzwrh2IpBThLvIYvOMSaZQTspd+P4a7RXFd08JJYax8bWIZGGCwuDV9wyCPG5ze
vSyO2f/YXvFskQKXdlm6aL4YiBsH2ZwW9lyOimadQUoXu7pPQok=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:21 2026 by rpki-client