Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft
File:                     A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft (raw, json)
Hash identifier:          gOnaGjN4BTwO9l2xcZIupWWxwKxG2nBJTZOazAs4IAo=
Subject key identifier:   E9:83:F5:30:2F:4E:12:76:7C:48:30:BF:EB:A3:CD:35:BF:B7:53:56
Authority key identifier: A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2
Certificate issuer:       /CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2
Certificate serial:       3B7D14715C9119850F5F52525AA6EAFC7DCD31B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 01:03:07 +0000
Manifest this update:     Thu 18 Jun 2026 00:58:07 +0000
Manifest next update:     Fri 19 Jun 2026 04:28:07 +0000
Files and hashes:         1: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl (hash: rT6drXqg29TDKWVuSgQ8Ci0k6lz7YufwJPa/3VuQvXQ=)
                          2: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: C+h1+9cN0GpUOXDh90MHekCqY6uk6Swn27VB4kNaByQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl
                          rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 04:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7d:14:71:5c:91:19:85:0f:5f:52:52:5a:a6:ea:fc:7d:cd:31:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2
        Validity
            Not Before: Jun 18 00:58:07 2026 GMT
            Not After : Jun 19 04:28:07 2026 GMT
        Subject: CN=E983F5302F4E12767C4830BFEBA3CD35BFB75356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:42:8a:9c:0a:1b:40:11:1f:11:76:0d:60:
                    21:9e:07:10:ec:e8:6e:32:8c:b1:62:4d:a9:dd:e7:
                    c0:9e:88:ea:f3:71:42:76:45:83:af:dd:e6:12:ac:
                    2b:33:d7:ac:26:87:94:c6:b8:ba:4a:77:ed:f9:8f:
                    32:1d:c0:a7:5e:d3:cb:bb:0b:33:f8:c5:cd:98:69:
                    f5:f6:5f:a5:43:ab:d5:d0:30:90:c0:ba:a9:34:61:
                    9d:72:7e:b5:18:26:76:2a:78:ed:e8:da:40:79:bf:
                    b1:7b:97:cd:52:bb:3b:9b:57:7f:14:2f:0d:d5:65:
                    75:66:d6:76:06:ac:f0:71:71:93:36:6e:4d:2b:f0:
                    1f:30:24:ab:22:82:92:98:1c:46:c2:96:39:17:0b:
                    91:43:e4:57:91:b8:01:24:27:85:07:c4:f2:57:37:
                    85:f8:ea:8e:98:3e:ca:51:c2:6a:4d:60:09:9b:b3:
                    5c:81:00:99:a0:88:03:1a:24:bd:8e:a2:17:04:5a:
                    fe:c9:2e:e3:05:62:9c:e8:a9:b1:a7:73:c6:1b:6e:
                    2c:e2:c6:0b:57:1f:21:0b:9f:f3:4b:48:fa:79:f8:
                    93:a7:bd:8b:43:ad:0a:3c:7f:ce:84:9a:cf:ba:c7:
                    70:4a:86:74:fe:19:4f:75:0a:f8:e7:51:8f:97:f3:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:F5:30:2F:4E:12:76:7C:48:30:BF:EB:A3:CD:35:BF:B7:53:56
            X509v3 Authority Key Identifier:
                keyid:A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:61:8b:be:1d:c1:f8:d6:60:39:c2:96:08:2e:93:b0:b0:08:
         44:dd:bc:8f:a0:1c:8f:9f:e3:f4:67:0e:74:db:bb:ec:5a:1a:
         ed:cb:60:ba:c4:c8:d7:68:3a:aa:e6:d6:81:b4:3e:87:f0:10:
         bd:e8:48:4d:dd:b8:98:5b:bb:6b:07:4b:52:85:1c:b7:ed:bd:
         5f:b7:e1:ca:95:59:be:26:f9:a2:42:84:d4:8a:50:a0:d7:cf:
         2c:c1:de:9a:f5:dc:87:c0:5f:5b:39:1f:f9:32:af:32:87:f6:
         0e:12:7f:d2:2e:93:f7:0d:e0:73:4f:bb:be:9a:6f:f6:93:10:
         6d:b4:e5:e2:47:6a:df:ce:fe:b2:1a:bd:00:ff:36:66:d8:31:
         b8:25:05:2e:e9:3c:ad:30:71:3c:57:d8:80:91:ef:23:e1:c7:
         a8:76:0a:13:7f:c0:db:72:6b:73:7f:e1:a9:0b:92:f0:78:9d:
         60:56:20:f0:3e:8b:e0:a6:d3:f3:b7:9f:da:ea:ca:7a:72:c4:
         7f:4c:3b:d0:ac:49:02:dc:6e:93:6e:18:dd:26:8c:e5:ec:fc:
         a0:5c:06:42:5c:f1:09:96:24:28:a8:5e:e9:4d:b4:e3:5e:47:
         72:85:5c:60:4c:b2:e1:01:1e:ef:e8:24:f8:4f:40:4e:66:13:
         8a:00:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:10:43 2026 by rpki-client