Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
File:                     50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft (raw, json)
Hash identifier:          oExODp+G4eypTgd+m6iOQkYr7BpC3boU0+T8E9JfgAc=
Subject key identifier:   E3:DB:30:2A:F3:5D:F8:91:05:66:6B:EE:DE:B3:8A:4F:5E:99:00:37
Authority key identifier: 50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
Certificate issuer:       /CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Certificate serial:       2CCD3A1AD0963FA7751E46FADD8D257F31361A29
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
Manifest number:          05
Signing time:             Tue 05 May 2026 10:51:21 +0000
Manifest this update:     Tue 05 May 2026 10:46:21 +0000
Manifest next update:     Wed 06 May 2026 11:26:21 +0000
Files and hashes:         1: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl (hash: v7A46ozAqvxk+EjMX0SyMOElzp0Erlyaa1HQvwg5h6E=)
                          2: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: QGPTzA7izmVWKWGQGI0Tmi8hRyZZX/Yh7zilSro+/Yc=)
                          3: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: WGwf4ZheCNstu5sMth6N0foU0qrM+z/FwSG3oFHTVv4=)
                          4: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: cxf9fFshB4+bhjoui5wSDBBSpnsVcVvhifdGqqzNgz4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
                          rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cd:3a:1a:d0:96:3f:a7:75:1e:46:fa:dd:8d:25:7f:31:36:1a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
        Validity
            Not Before: May  5 10:46:21 2026 GMT
            Not After : May  6 11:26:21 2026 GMT
        Subject: CN=E3DB302AF35DF89105666BEEDEB38A4F5E990037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:48:5f:d3:f1:bf:0c:c7:2d:65:49:1a:4f:f6:
                    0c:ad:57:ab:2f:59:ef:12:3e:cd:78:22:6a:cf:16:
                    cb:e1:99:fa:01:3d:31:3b:e9:19:da:f3:01:ab:c3:
                    86:b7:81:d1:f1:e2:d9:de:da:32:c9:e1:5c:df:73:
                    79:1e:a7:25:cc:c9:0c:eb:18:86:79:a7:ce:9f:1f:
                    91:c0:c7:db:7a:98:76:2a:69:56:50:a8:29:23:97:
                    89:4f:8f:a7:d0:dc:f3:4a:1c:74:09:4e:d7:4b:e0:
                    a5:94:71:9e:fa:20:13:a5:36:95:85:e8:77:32:c6:
                    10:23:08:9f:fa:6b:eb:0e:42:d0:43:a3:d1:d0:a3:
                    35:e9:c0:b3:e6:52:0c:2d:30:ab:59:77:e5:11:ac:
                    1f:44:d2:a0:6f:d5:44:37:f8:0e:a1:16:13:7b:8b:
                    e5:9c:2a:24:6e:27:5d:bc:b1:c2:be:0f:19:43:d9:
                    da:3c:5e:dd:40:a2:ff:8a:59:ae:42:fa:92:fc:a5:
                    6e:9e:2b:2d:d4:a6:eb:4a:19:bb:ff:d5:df:a6:88:
                    a7:3b:40:0a:29:8d:0b:70:0d:84:58:88:e6:56:81:
                    a8:46:4b:c2:37:53:b9:23:e0:b5:cf:c9:ec:e7:96:
                    ee:36:66:60:17:fa:b2:d9:0d:c2:83:13:2c:64:c6:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DB:30:2A:F3:5D:F8:91:05:66:6B:EE:DE:B3:8A:4F:5E:99:00:37
            X509v3 Authority Key Identifier:
                keyid:50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5e:f6:ab:66:fc:34:1e:b3:5d:01:b8:0a:e3:c1:0d:b5:a6:
         06:60:cc:ba:ae:a5:19:45:8b:12:8d:37:da:d8:cb:00:c6:02:
         a1:ec:d2:ba:c3:23:7b:a2:30:8f:3a:a8:e5:f4:17:05:2b:1e:
         40:bc:64:15:e9:ca:fa:40:12:45:20:3d:12:c6:24:10:23:c9:
         8a:a3:3e:8e:6c:a8:0e:9d:bb:9f:4f:d3:c8:7f:29:4c:82:19:
         24:4d:46:01:49:ca:12:86:c0:6e:f9:f7:f3:d6:07:86:27:e4:
         00:fb:f3:4e:7a:c0:80:3d:54:1c:22:c3:db:88:7b:ce:9c:d3:
         e9:9c:3e:4d:f7:e6:57:ab:af:3c:fe:d7:11:6b:84:d3:33:c7:
         a0:6c:25:2c:20:13:e5:be:b5:df:7b:05:5c:08:15:76:d5:68:
         79:e0:69:a0:4b:47:7d:77:5e:0a:d3:d2:29:05:9c:85:26:71:
         3f:51:2c:de:ed:cb:2e:7f:04:d0:85:98:54:4e:96:4c:bc:57:
         2b:e2:27:ba:62:2b:8c:c7:3e:7d:68:59:25:7a:da:49:80:3d:
         f7:c3:f1:60:3f:d2:24:81:29:13:42:45:51:f6:14:72:95:aa:
         6a:0e:17:3f:67:7b:df:0c:e5:a9:62:10:10:cf:c0:8e:16:bb:
         5f:32:06:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:06:58 2026 by rpki-client