Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
File:                     D280C077A9E801FBA933C9D0085012E09D686927.mft (raw, json)
Hash identifier:          ABsfVz20in7RWn9++JFt6SdYgl7GCulm5C85fS7u3Os=
Subject key identifier:   E0:6A:B4:3E:EE:40:58:18:F3:89:1E:00:9E:19:82:1A:4C:BD:83:37
Authority key identifier: D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27
Certificate issuer:       /CN=D280C077A9E801FBA933C9D0085012E09D686927
Certificate serial:       0C969CCE3F357C31663DB056DFFEF14EA1218542
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
Manifest number:          41
Signing time:             Sat 20 Jun 2026 02:32:49 +0000
Manifest this update:     Sat 20 Jun 2026 02:27:49 +0000
Manifest next update:     Sun 21 Jun 2026 06:22:49 +0000
Files and hashes:         1: D280C077A9E801FBA933C9D0085012E09D686927.crl (hash: UQ22RZlUEw6eF8f/r5lgbtTc2DLaJnt90h8nb0ie8OM=)
                          2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: RX42n1sKvH6RuNxwR829dnAhCVM69IdefkYN8dkI7/c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl
                          rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 06:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:96:9c:ce:3f:35:7c:31:66:3d:b0:56:df:fe:f1:4e:a1:21:85:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D280C077A9E801FBA933C9D0085012E09D686927
        Validity
            Not Before: Jun 20 02:27:49 2026 GMT
            Not After : Jun 21 06:22:49 2026 GMT
        Subject: CN=E06AB43EEE405818F3891E009E19821A4CBD8337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:58:9e:c8:fc:c1:c4:8a:ca:da:3b:ff:d3:c0:
                    31:fa:64:92:83:e0:8e:45:5a:5e:ea:4f:de:4e:67:
                    9f:a6:ce:35:ab:86:af:7d:55:f7:31:d7:82:a1:dd:
                    2b:07:44:62:37:07:02:fd:82:98:e8:fe:21:bf:f9:
                    c4:0c:e2:47:e3:05:8d:e1:9a:c7:c0:ef:53:a7:20:
                    5c:7b:ed:e9:a5:03:d7:4e:d3:31:f1:9c:f4:f9:ce:
                    4a:ca:b3:2f:53:3e:10:de:70:3f:f3:39:cc:f3:1f:
                    77:11:9e:5b:76:26:0a:ff:33:85:49:a5:b8:ef:df:
                    15:eb:30:58:c8:6f:ed:6e:fb:e9:8b:06:52:9b:e5:
                    a5:7f:dd:98:44:86:73:2a:8d:12:13:5c:89:24:94:
                    5c:0f:13:7e:c6:1c:97:a2:57:a4:6a:c4:1b:93:7c:
                    b9:e4:e9:91:d0:6f:fe:73:72:33:7d:05:6d:b3:12:
                    5e:be:ef:6d:07:fb:ae:3a:54:3c:24:e4:83:1f:2e:
                    d0:00:72:e8:de:37:71:f9:f0:4e:24:1a:7b:54:35:
                    ba:b2:3b:cd:f8:05:f1:02:ef:1f:eb:47:8c:2e:8d:
                    1b:93:86:c2:40:b8:74:30:d6:8a:c7:c7:ba:a4:66:
                    63:a9:61:e9:4d:da:63:41:a5:a8:82:2b:ed:0e:53:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:B4:3E:EE:40:58:18:F3:89:1E:00:9E:19:82:1A:4C:BD:83:37
            X509v3 Authority Key Identifier:
                keyid:D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:cc:9a:c0:40:bb:1d:b3:f2:31:b0:ab:84:29:8e:6a:b1:30:
         54:c6:bb:d8:6a:48:f7:c9:b6:2e:02:59:c0:87:75:2f:5c:e9:
         b3:64:93:57:bc:c7:c2:d4:39:a4:48:28:77:e9:d2:42:82:1d:
         34:5a:aa:dd:27:44:f4:a1:e5:df:66:01:d4:7c:8b:22:eb:7f:
         4d:78:8f:9d:b1:0e:fd:be:90:29:5c:0e:c8:df:5c:24:34:b8:
         b6:1c:83:ce:01:e0:70:62:98:4c:50:95:9e:9a:bd:e9:41:c1:
         9f:2a:38:d8:92:7e:b3:f3:d1:be:5b:cd:b8:32:fc:85:ce:6d:
         de:3f:5f:1e:d2:40:53:e6:6b:6f:c7:a4:12:f1:95:83:1e:29:
         1f:99:84:46:e0:e3:79:a3:6a:61:cc:af:13:c2:ed:42:e2:00:
         fb:ce:00:9c:c0:a7:ad:76:c5:59:97:08:87:ea:4c:84:c7:23:
         8a:01:ee:ef:ec:68:33:f5:7f:b5:50:70:6a:76:2f:56:ea:a2:
         ef:40:4e:8c:b8:10:f9:b8:95:ad:70:40:2d:9b:ff:5b:f2:be:
         b5:ff:31:d3:24:10:9a:8b:83:d8:b6:e1:34:73:3a:d8:db:6c:
         e0:23:b0:aa:70:d5:48:7b:c5:42:75:fc:e9:d6:76:7a:a1:4f:
         a7:3b:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:51:42 2026 by rpki-client