Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft
File:                     FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft (raw, json)
Hash identifier:          rji+Lz9nP0Y0V8YkXPd7fK8OLXNBb8NZ2+OP7c/Tq+8=
Subject key identifier:   A6:D9:4D:E8:88:DC:85:CB:24:EF:80:E7:90:C1:88:05:F8:CB:77:32
Authority key identifier: FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B
Certificate issuer:       /CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B
Certificate serial:       1E6508FAFF0A3B2DEC532DB0988A09D16D1D264C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft
Manifest number:          40
Signing time:             Fri 19 Jun 2026 23:24:14 +0000
Manifest this update:     Fri 19 Jun 2026 23:19:14 +0000
Manifest next update:     Sun 21 Jun 2026 00:08:14 +0000
Files and hashes:         1: FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl (hash: ZywF6VidjsmumIoFvcbc9X/LpNK4ymSCn1n/Dm5TnQY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl
                          rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 00:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:65:08:fa:ff:0a:3b:2d:ec:53:2d:b0:98:8a:09:d1:6d:1d:26:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B
        Validity
            Not Before: Jun 19 23:19:14 2026 GMT
            Not After : Jun 21 00:08:14 2026 GMT
        Subject: CN=A6D94DE888DC85CB24EF80E790C18805F8CB7732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:c2:90:8e:dd:c2:08:ca:46:95:d1:0f:e4:
                    4f:a4:c9:f0:de:b5:5c:fe:1f:8d:1e:2d:7d:83:5c:
                    de:4f:ab:28:06:96:27:7f:e4:e8:ae:2d:91:da:5d:
                    e6:2c:ff:74:5c:7d:4a:8f:f9:76:6f:47:0c:0b:c6:
                    e9:a8:07:b3:52:68:8a:c2:36:8e:9a:29:ca:c9:8a:
                    0f:a2:1e:d8:9c:db:45:14:8f:02:68:1e:eb:92:4e:
                    45:32:0f:fc:27:ce:ec:af:d3:67:fd:59:28:d5:64:
                    b0:ac:2e:13:56:05:a3:01:29:a7:d9:f9:03:9d:09:
                    f0:fd:dc:0a:da:26:1b:32:18:3c:9a:03:8b:e7:57:
                    49:04:5d:b5:0f:c6:21:39:23:b6:3b:0e:52:bf:25:
                    58:10:96:a8:23:83:eb:16:4f:b6:81:60:5a:6e:e4:
                    32:7c:d4:82:a4:5e:da:63:d8:dd:1a:1e:0e:26:45:
                    7f:a3:44:bb:ec:c9:0e:15:cb:a0:74:36:44:a8:db:
                    19:13:5c:e4:64:84:f8:1c:bd:f9:01:ae:11:41:c4:
                    ce:7b:39:30:1e:4e:dc:e4:87:b6:b4:e0:2d:1f:bc:
                    20:90:c0:ba:3d:64:8f:0a:b0:5b:40:7e:4b:bb:32:
                    b5:a5:d0:d5:16:4c:72:ea:72:79:9f:1b:e6:3d:ef:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D9:4D:E8:88:DC:85:CB:24:EF:80:E7:90:C1:88:05:F8:CB:77:32
            X509v3 Authority Key Identifier:
                keyid:FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:52:bf:56:69:b8:b5:02:52:28:be:72:df:6e:d5:7c:40:
         4a:9a:d7:2c:63:b9:3f:f9:24:0e:b7:99:98:39:a6:35:dd:5b:
         f7:27:75:5c:98:77:13:a7:9f:2b:92:3a:4b:fb:f0:a1:1c:61:
         fe:f0:af:b2:78:6a:38:5e:bf:9b:e1:ad:e7:73:f8:fb:02:d2:
         75:8a:5e:0b:9c:27:98:1a:a0:b4:fe:61:09:39:57:9a:c5:f0:
         18:7e:5a:6e:d5:57:e8:7d:50:3f:47:45:84:43:00:c2:1d:b9:
         74:9f:1b:ed:e7:c9:37:5c:e0:0b:1c:d9:48:30:41:09:f0:d6:
         85:93:c8:7e:5f:15:10:c3:8f:69:c1:88:f7:ce:48:cb:1e:0c:
         6b:9d:5e:ac:9f:61:a6:87:9e:55:80:7d:21:a5:6e:b5:3f:0b:
         c0:1a:54:ba:10:74:bd:e8:16:8b:c0:8e:12:f1:57:e5:b0:16:
         76:31:38:79:d5:3e:34:1b:c9:00:05:13:17:01:27:50:e4:4e:
         1b:bf:49:ac:be:ce:c9:a5:c6:80:dd:bd:87:7b:4d:b9:f2:8a:
         d2:ed:56:c8:e7:36:f2:01:fd:50:ac:09:7d:14:20:62:d1:50:
         03:e5:b1:a4:34:72:92:2c:9f:ff:a3:63:46:01:cc:76:20:f5:
         da:9d:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:49:24 2026 by rpki-client