Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
File:                     37F03E3124DF827AEC6F617458716798083055BC.mft (raw, json)
Hash identifier:          A5hdlBeYiFn18prouJ6av7+KF7+VOo3x53nEz1B57ZY=
Subject key identifier:   BA:03:79:48:CD:AA:7D:28:DD:D8:9E:F8:33:EC:4B:21:C6:AC:60:E0
Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
Certificate issuer:       /CN=37F03E3124DF827AEC6F617458716798083055BC
Certificate serial:       40E690A5EAEA56AA2F5332280D3805E6ECF5D4E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
Manifest number:          41
Signing time:             Fri 19 Jun 2026 16:45:56 +0000
Manifest this update:     Fri 19 Jun 2026 16:40:56 +0000
Manifest next update:     Sat 20 Jun 2026 17:42:56 +0000
Files and hashes:         1: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: zaT8QtBX8CWaeAVSKVLb2kSXw2+Ap6i51NDs3hsOZzg=)
                          2: 37F03E3124DF827AEC6F617458716798083055BC.crl (hash: nZnJv15GXasq99SO8elWMiYigkrjgMkH6vzQ8+hLXik=)
                          3: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: dsSBEZ+RmcKKQ/S8RAk9jCD+91Y66d5ktHEFnBxIwCc=)
                          4: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: p+akLfy0WmwcWwKoICEgVlXEAKS1XaUc7gLYGzrKupw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
                          rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 17:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e6:90:a5:ea:ea:56:aa:2f:53:32:28:0d:38:05:e6:ec:f5:d4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC
        Validity
            Not Before: Jun 19 16:40:56 2026 GMT
            Not After : Jun 20 17:42:56 2026 GMT
        Subject: CN=BA037948CDAA7D28DDD89EF833EC4B21C6AC60E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9e:53:6e:0a:cc:5b:77:95:0e:ee:1c:bb:41:
                    38:4b:94:a4:30:3f:38:ad:89:49:8c:bb:4b:df:6a:
                    82:af:80:d7:26:19:de:6f:bb:5d:d6:04:cc:d8:61:
                    6a:40:e9:55:44:16:14:68:2a:e9:4c:e1:e1:b4:e1:
                    f4:bd:c7:34:88:e4:5b:56:04:e6:2e:fb:e0:d6:dd:
                    e4:7d:b5:13:e7:48:ae:36:4d:34:ed:bd:2b:63:28:
                    6e:a4:02:61:36:71:d9:4b:d8:8b:42:da:4d:44:2e:
                    cc:f8:98:97:f6:a3:51:2e:ce:9e:cc:e9:4b:cb:00:
                    db:ec:af:35:2a:1b:d9:85:17:db:fe:5e:dd:56:db:
                    ae:ba:6e:50:5f:64:da:e8:3f:19:da:dc:18:31:fd:
                    8c:94:8e:07:a9:a3:9d:ca:a4:53:4e:7f:0b:33:6b:
                    0e:86:b7:31:5e:3c:15:e4:20:ec:8f:c0:9c:5c:4b:
                    7a:97:2e:63:8b:3c:81:42:f0:1d:58:1f:e3:73:f4:
                    a6:5d:bc:7e:e0:b1:b0:0e:74:a5:65:bd:31:9a:30:
                    26:29:5d:47:35:14:9e:8d:ad:37:93:d6:ae:3e:d2:
                    98:6e:f2:5f:c1:72:bd:df:ed:57:10:cb:33:31:fd:
                    f6:98:e7:8a:23:0f:53:41:56:c9:a2:1c:9c:92:d6:
                    70:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:03:79:48:CD:AA:7D:28:DD:D8:9E:F8:33:EC:4B:21:C6:AC:60:E0
            X509v3 Authority Key Identifier:
                keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0e:6c:cb:15:6b:62:00:87:b5:a5:69:f2:1c:90:45:4f:dd:
         00:ac:53:09:4b:63:e7:dc:88:0e:b7:fc:2b:06:8c:a7:1a:95:
         50:04:88:40:84:c1:1f:03:5f:3d:21:34:77:f5:48:43:ae:26:
         7b:54:1f:73:73:6e:88:f4:c3:33:14:ff:df:0f:7e:d1:bf:92:
         b0:5f:35:ab:c0:ea:0f:17:b1:ef:72:48:cd:66:79:4e:72:b3:
         6e:5f:0a:37:e6:a8:6d:43:82:18:45:22:3e:8a:4a:ac:3c:86:
         87:7a:ca:17:03:0b:ee:82:e4:30:ba:ba:7c:e7:52:06:7a:30:
         5a:d0:a3:ac:10:08:28:c5:bd:2b:5e:c3:aa:dc:45:e7:14:a5:
         36:1d:c2:f6:a9:36:92:0a:72:13:45:17:79:38:66:7a:44:e7:
         1c:4c:af:30:79:b4:eb:a5:bb:40:f5:7c:be:b6:55:be:af:ac:
         ba:89:eb:02:9c:b1:84:e2:54:4d:6e:a7:f5:cc:af:de:09:c7:
         73:38:2f:5b:40:06:64:49:6f:93:54:a9:6c:89:26:28:bd:04:
         dc:bc:e0:e0:c1:f5:02:2b:2f:27:9c:2e:c4:85:45:5c:c9:67:
         f5:88:de:e5:e3:66:00:35:a4:51:71:4a:86:67:f5:c3:2c:32:
         7a:cd:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:24:27 2026 by rpki-client