Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
File:                     A5251C27E1AF09AE2F28618250807EA4D573694B.mft (raw, json)
Hash identifier:          TbTMV8/CVYmWAPsUFuWFrK7c5G+hdTbPjpG5hanRs1o=
Subject key identifier:   AE:C0:FA:6E:65:22:3B:F8:E0:37:AD:5F:3E:37:A3:B3:D2:10:3E:B9
Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B
Certificate issuer:       /CN=A5251C27E1AF09AE2F28618250807EA4D573694B
Certificate serial:       25047010A0E24E9D90BD6C5F1CC9ACE56DE08C0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 03:05:41 +0000
Manifest this update:     Thu 18 Jun 2026 03:00:41 +0000
Manifest next update:     Fri 19 Jun 2026 04:59:41 +0000
Files and hashes:         1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: 8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=)
                          2: A5251C27E1AF09AE2F28618250807EA4D573694B.crl (hash: glw/0ziuFk2VNEutOnyk+yt512zlee5ctysIwXBjkPE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl
                          rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 04:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:04:70:10:a0:e2:4e:9d:90:bd:6c:5f:1c:c9:ac:e5:6d:e0:8c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B
        Validity
            Not Before: Jun 18 03:00:41 2026 GMT
            Not After : Jun 19 04:59:41 2026 GMT
        Subject: CN=AEC0FA6E65223BF8E037AD5F3E37A3B3D2103EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:32:08:49:66:c4:43:d5:d8:52:1d:e0:65:
                    54:d0:1f:0d:88:15:72:52:0d:93:77:34:9b:e8:61:
                    93:c8:d1:e4:67:24:b3:8f:6a:2b:80:35:8a:be:61:
                    5b:59:f4:62:24:4c:be:9f:b5:b2:d2:04:dd:54:4b:
                    73:3f:65:86:fb:44:cc:6b:ec:eb:ac:5b:6b:66:8e:
                    6f:6f:92:0b:36:67:73:81:6c:be:d4:2b:b7:cc:98:
                    d9:f1:01:2a:84:f1:52:f4:f9:1b:8c:94:84:6b:85:
                    09:76:dd:84:36:e6:a9:2d:85:2c:aa:62:f6:69:12:
                    92:20:7b:00:8b:cf:af:de:83:1e:3a:2e:80:fc:85:
                    99:69:37:84:94:be:36:99:80:7c:b1:60:39:1a:a8:
                    0b:8f:c3:24:7c:42:53:65:8c:67:23:df:f3:28:49:
                    a4:3e:a2:f5:be:ca:ea:1d:b6:1a:36:9b:f7:3d:1d:
                    a0:d2:39:bb:e7:71:29:37:4e:4c:51:69:3d:0f:64:
                    d2:32:23:26:24:2d:f6:e4:f1:40:14:ad:74:42:fa:
                    4e:1d:a1:0e:cd:41:4f:6a:ec:7d:29:43:20:01:72:
                    16:d9:87:7e:60:53:be:35:21:16:68:73:14:2f:b0:
                    00:de:0a:77:d9:77:91:4d:a9:1b:e2:b1:18:9a:f2:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C0:FA:6E:65:22:3B:F8:E0:37:AD:5F:3E:37:A3:B3:D2:10:3E:B9
            X509v3 Authority Key Identifier:
                keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:bd:a2:79:ac:17:49:86:91:a6:b3:8f:14:13:4c:cd:88:
         c7:8a:81:7f:a7:b5:5d:54:6b:25:2e:bb:24:77:03:30:c0:21:
         fd:2b:25:fe:60:42:af:c0:3e:e6:38:45:7a:18:7c:e4:d4:c5:
         d7:52:76:0c:e7:1c:54:b9:27:e5:1d:15:1a:c6:8e:ca:91:f2:
         aa:f5:5a:28:60:3f:e7:27:15:80:2c:36:d0:b7:68:4c:5b:a7:
         8e:f4:0f:52:12:ca:fb:93:0f:05:f8:c5:53:af:0d:1a:e8:b0:
         f6:67:28:0b:d9:d1:58:ab:83:90:67:ea:2f:aa:8b:67:64:85:
         88:83:b3:a2:e2:6a:f2:5f:f4:0d:3e:d2:05:9a:36:04:06:0a:
         54:d2:41:a1:ff:b6:ed:25:f0:7a:3f:79:4a:72:4b:87:69:3a:
         32:ef:8c:f4:48:6d:b7:45:cc:c2:e4:24:54:1b:8e:6a:07:ae:
         8d:3f:a5:ab:50:31:68:1d:12:3c:c1:d0:96:bb:c6:6a:76:d6:
         2a:f5:07:03:cc:e3:c4:88:a6:11:88:6a:1b:bc:36:a6:93:40:
         3c:66:3e:2b:b6:ae:a7:6d:66:2b:c9:3f:7c:fe:2c:e5:89:6b:
         4c:6f:a8:ca:09:7c:48:46:35:77:cf:7a:bf:05:45:23:6d:43:
         6c:28:48:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:18 2026 by rpki-client