Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft
File:                     56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft (raw, json)
Hash identifier:          7ojw+v7Lur1OoEPeg47WSC1v1attoHa3NEddrhmL38g=
Subject key identifier:   87:C7:A2:01:97:00:96:25:7F:2D:3E:E7:24:D9:0F:FF:1D:2D:0E:DC
Authority key identifier: 56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C
Certificate issuer:       /CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C
Certificate serial:       02595B1A7F8550AF2E5A6B5AE69905F7A229C782
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 14:13:00 +0000
Manifest this update:     Fri 19 Jun 2026 14:08:00 +0000
Manifest next update:     Sat 20 Jun 2026 14:51:00 +0000
Files and hashes:         1: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: Mw0Zx/sSQWD0MgxT9iC938oEtx/GmaYcvCuMJEo7uW0=)
                          2: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: lmjjWgjg6JFV781/I03PASkaI491yTg94cYWOgkDO5Y=)
                          3: 56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl (hash: Vp2D6VUWMzTro0v5XiJS9RvhB05U9YSPgRWBlGc9+MU=)
                          4: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: wt9Ra/tPcAxIL+26JpZjFnizoxFKjLikDqtb0PRy/D0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl
                          rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 14:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:59:5b:1a:7f:85:50:af:2e:5a:6b:5a:e6:99:05:f7:a2:29:c7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B769F2B369FF1E22C3ADCD3D50EC1DC015246C
        Validity
            Not Before: Jun 19 14:08:00 2026 GMT
            Not After : Jun 20 14:51:00 2026 GMT
        Subject: CN=87C7A201970096257F2D3EE724D90FFF1D2D0EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:93:3d:0f:3f:3c:b4:80:90:d2:7d:39:dd:a3:
                    33:fb:48:8f:a1:d9:cc:97:2c:06:91:8c:33:00:ba:
                    48:e8:be:75:24:f0:c9:f0:57:34:d8:8a:00:31:f0:
                    99:b7:4e:94:7a:6a:b5:1d:db:53:b8:c4:42:4a:0c:
                    c0:95:2f:de:10:e2:de:6b:e0:f3:e5:99:bb:63:ab:
                    65:10:f6:24:87:ed:b7:2c:ad:bf:0e:35:a6:22:a0:
                    90:7d:d5:fb:c2:0b:07:87:f7:b2:8c:24:6f:d0:af:
                    4b:05:9b:a6:1a:b8:1f:6f:bf:c1:e1:50:f8:a1:dd:
                    bb:7a:d5:79:b5:9e:49:ee:f6:5b:2e:1f:7a:f1:d2:
                    9e:14:58:01:bd:77:11:e3:59:b3:1a:35:d1:91:58:
                    f2:0c:31:e9:4b:12:13:90:7a:6e:ac:ea:f9:8e:78:
                    e0:4d:58:4a:da:ce:fb:f1:5d:72:af:f7:c0:48:e1:
                    72:b4:c6:84:20:c2:5c:4a:b9:fd:90:a4:03:f3:7e:
                    e9:0b:7a:8f:cd:55:26:16:69:a0:2f:c5:61:6c:e9:
                    77:50:db:28:65:a6:a3:37:7c:a3:e0:7e:36:24:40:
                    2d:ad:31:28:48:f8:c8:4d:0a:6d:45:7f:d6:c3:4b:
                    d2:ea:82:db:70:1f:4c:88:96:6a:8b:bf:a1:30:8b:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C7:A2:01:97:00:96:25:7F:2D:3E:E7:24:D9:0F:FF:1D:2D:0E:DC
            X509v3 Authority Key Identifier:
                keyid:56:B7:69:F2:B3:69:FF:1E:22:C3:AD:CD:3D:50:EC:1D:C0:15:24:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/56B769F2B369FF1E22C3ADCD3D50EC1DC015246C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:aa:e7:98:a1:9f:fd:ca:1e:ad:06:b5:fe:dc:d5:9c:56:de:
         8d:84:5e:dc:e6:a7:5b:08:67:8a:7c:4d:84:f3:cc:c4:63:a3:
         12:4a:49:1c:a5:71:e8:4a:03:54:12:aa:ac:0c:97:47:eb:4d:
         3e:a8:a0:ea:94:03:67:3a:ef:d5:0d:6e:f9:af:3a:6d:8b:03:
         2d:61:96:78:c1:74:dc:0a:9f:5c:79:18:97:18:25:38:fc:07:
         a9:c9:34:75:fc:84:07:61:d5:ec:f0:94:24:64:9d:83:0d:c3:
         9f:e7:89:ba:9e:c4:2b:d5:f3:d8:8f:4e:8d:26:42:82:01:c1:
         fb:b6:d6:fa:04:91:ba:7f:50:df:fc:79:cf:50:dd:7c:6c:13:
         fd:39:44:9b:36:21:42:ca:91:60:5f:d6:15:b9:6a:8e:40:ee:
         3e:62:dc:2c:e7:ef:03:d5:1a:47:76:f8:36:a5:02:be:9d:6f:
         f4:db:12:65:b7:a9:6b:2d:10:1a:70:2a:20:55:e3:8c:1d:01:
         3b:19:30:f2:69:b1:64:01:86:89:3a:e8:b3:cd:0b:87:25:c3:
         b5:4a:ff:82:70:e3:53:1b:1a:a6:67:27:49:15:94:48:3a:53:
         76:da:1a:ab:e2:ef:0e:7a:db:a4:8b:cc:1d:9f:08:4e:89:d3:
         64:c8:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:14:05 2026 by rpki-client