Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
File:                     1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft (raw, json)
Hash identifier:          6x5MmgE6FOUrjouAazMIsD58eTw2j/k8g+NwlxFHzY4=
Subject key identifier:   16:ED:BF:8E:8C:55:A7:DE:8F:74:37:43:A7:31:A5:6C:EA:8A:BC:F2
Authority key identifier: 1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E
Certificate issuer:       /CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
Certificate serial:       0A9A6546689529602582710539745EBE0EF69C30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 06:19:55 +0000
Manifest this update:     Thu 18 Jun 2026 06:14:55 +0000
Manifest next update:     Fri 19 Jun 2026 06:24:55 +0000
Files and hashes:         1: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (hash: SYMIAQW6lQfm+rZplODVm3xwEprXIfjqtxhwRoNnM10=)
                          2: 1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl (hash: SG/qPKTi5ujortzHdpn66o6fKQbzFPtSp7U4M60WwCw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl
                          rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 06:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9a:65:46:68:95:29:60:25:82:71:05:39:74:5e:be:0e:f6:9c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4E21B5B06FE9A04643A702C72B9616D450DE8E
        Validity
            Not Before: Jun 18 06:14:55 2026 GMT
            Not After : Jun 19 06:24:55 2026 GMT
        Subject: CN=16EDBF8E8C55A7DE8F743743A731A56CEA8ABCF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:a9:12:a5:06:81:98:f5:ad:52:d0:17:a3:
                    28:f6:c6:5c:ca:c5:78:67:de:f3:f1:67:d6:7e:73:
                    f4:76:87:40:5a:14:c5:88:e6:47:cf:33:42:93:09:
                    aa:98:4c:c5:3c:2b:f5:6c:be:d5:4b:0c:44:50:a7:
                    4a:ab:6e:67:e9:d8:e0:57:45:87:1b:ca:f9:7a:3f:
                    73:bb:9a:5c:ac:8c:74:0a:12:d4:b6:ac:a9:70:26:
                    e3:71:34:36:5e:e8:a2:06:a8:d2:50:c5:01:cd:4d:
                    5f:65:b1:f6:47:3c:e7:52:ab:d7:20:22:59:9c:77:
                    86:50:d7:a1:62:2e:7f:76:c0:58:2d:13:5c:4d:89:
                    87:f9:39:5f:4b:2b:4e:1d:bd:67:ec:21:ef:3b:20:
                    a9:b5:c4:4c:05:fe:da:56:2e:7a:f1:6c:f9:67:c5:
                    85:8c:d8:e1:45:a4:4c:f9:ce:20:2c:81:e8:6b:9f:
                    3b:30:2e:1a:86:61:3a:1c:00:18:ec:b8:56:8f:8d:
                    11:90:60:05:60:6a:46:ce:8a:f9:08:40:27:89:f1:
                    72:15:06:ac:8d:34:9e:8c:c6:30:19:79:0e:45:9e:
                    2a:58:cc:22:7f:8a:e0:75:87:c4:20:e2:61:c1:c5:
                    8c:17:41:c3:67:78:22:da:ef:5e:91:cc:d3:2a:17:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:ED:BF:8E:8C:55:A7:DE:8F:74:37:43:A7:31:A5:6C:EA:8A:BC:F2
            X509v3 Authority Key Identifier:
                keyid:1D:4E:21:B5:B0:6F:E9:A0:46:43:A7:02:C7:2B:96:16:D4:50:DE:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/1D4E21B5B06FE9A04643A702C72B9616D450DE8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:04:e1:0b:07:07:1e:32:0d:7b:0c:3f:33:84:81:d7:5b:32:
         f3:27:4a:46:0c:cb:08:fb:92:24:26:2a:07:06:fc:24:1a:6d:
         30:82:ba:f9:03:95:0c:61:14:f8:58:df:2a:29:b9:42:47:6c:
         76:4e:94:cd:55:b1:ec:36:18:38:88:61:16:9a:a2:18:82:eb:
         9d:ff:9f:d4:0c:c3:ed:24:84:70:76:93:47:f1:fd:b4:54:90:
         8e:b8:c1:cf:11:4d:91:35:55:4f:b4:c2:4a:f5:d3:b8:68:21:
         00:93:c4:8a:f9:f2:8a:f0:71:7d:be:13:48:0d:fe:73:73:17:
         76:02:8a:d6:a2:cd:42:51:10:8d:95:4b:79:4f:8c:48:69:e6:
         91:d3:6b:b6:b8:5b:04:4c:f5:91:c3:26:08:5e:2c:18:a4:48:
         90:bc:f3:38:3a:f8:0e:fc:20:8d:2f:03:e0:98:92:35:63:ff:
         6e:67:87:20:a1:7f:c0:19:da:3d:16:c7:1d:94:9a:65:da:44:
         b8:d3:89:20:8a:36:fd:a2:05:21:65:da:12:cf:55:e5:5a:2f:
         4d:10:28:dc:17:a4:fd:d7:f4:6c:96:dc:cb:2d:31:e9:c4:33:
         7f:2f:bc:e1:50:ae:49:34:4d:ed:fe:61:6a:a5:f8:4c:c9:a7:
         cf:ab:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:19:38 2026 by rpki-client