Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
File:                     F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft (raw, json)
Hash identifier:          w/GwJ+1LGLzZ7qi/GPCjpBK88w4isceFRx+P1EKVKm4=
Subject key identifier:   E8:AB:AE:F4:3F:C5:5C:F9:64:AE:28:06:E2:33:C1:BE:03:66:6F:E9
Authority key identifier: F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17
Certificate issuer:       /CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17
Certificate serial:       53595CAE4545FB30B666FBCA4723CCA08CFBED49
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
Manifest number:          40
Signing time:             Thu 18 Jun 2026 04:32:25 +0000
Manifest this update:     Thu 18 Jun 2026 04:27:25 +0000
Manifest next update:     Fri 19 Jun 2026 06:52:25 +0000
Files and hashes:         1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: eW2jjvdvI19U+UGpZwOooilR+jDpj7dTH79DXIcMLCo=)
                          2: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl (hash: ZmnFl+8JehkyaiVEL2LDZvIt5gNGXwp7W66NnS3Aarg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl
                          rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 06:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:59:5c:ae:45:45:fb:30:b6:66:fb:ca:47:23:cc:a0:8c:fb:ed:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17
        Validity
            Not Before: Jun 18 04:27:25 2026 GMT
            Not After : Jun 19 06:52:25 2026 GMT
        Subject: CN=E8ABAEF43FC55CF964AE2806E233C1BE03666FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1a:46:fc:3d:43:86:6f:3d:77:ca:8f:7d:ed:
                    86:09:4d:13:9a:d0:41:dd:62:b9:18:ca:c2:f1:b7:
                    be:2f:65:47:fd:d5:eb:54:f2:39:a2:6e:e1:45:f2:
                    f6:ab:47:fd:79:d7:85:1c:69:a7:e3:36:71:bd:6c:
                    a6:19:6a:55:59:7f:8b:ff:e2:d8:f7:6d:87:87:33:
                    75:46:a3:3a:d0:db:7b:ed:a0:58:71:9c:e5:17:86:
                    42:47:a3:7d:29:55:36:50:ec:41:02:2d:28:98:ec:
                    af:d3:7a:f7:70:3b:a2:ab:57:eb:b0:db:a4:3e:55:
                    f1:b2:86:72:c4:fe:a7:4e:6c:8c:65:79:bf:39:d5:
                    30:72:c5:4b:9a:52:14:3d:01:d2:18:6c:8b:47:13:
                    fd:36:5c:ea:46:f9:32:b6:b7:81:2b:fb:50:af:d0:
                    9b:ef:a4:2e:67:6b:e1:64:69:1d:e6:3f:d7:5c:f1:
                    3f:ab:8f:98:f6:83:f1:b8:97:8d:12:bb:38:31:0d:
                    a0:a6:83:b4:f1:32:90:a7:9c:45:3b:dc:f1:83:e5:
                    9a:93:61:b4:c7:5e:e5:4a:1a:e7:af:e0:dd:32:e9:
                    f9:fe:30:46:2e:a6:a4:9a:3b:52:40:c0:43:3a:36:
                    fc:73:1c:35:47:9e:d9:fd:0d:2e:34:4b:ad:26:f6:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AB:AE:F4:3F:C5:5C:F9:64:AE:28:06:E2:33:C1:BE:03:66:6F:E9
            X509v3 Authority Key Identifier:
                keyid:F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:97:31:e0:08:98:b4:fb:2a:67:8d:21:d1:81:d5:ec:95:21:
         a8:5a:ef:da:34:07:4d:d9:a3:dd:9a:fe:fa:9a:ce:bd:61:94:
         98:7d:79:d7:92:61:d4:38:29:ce:39:77:a7:9f:23:f6:22:c5:
         4b:2c:02:6f:c7:84:b8:b3:f2:bb:e0:d3:17:e8:ed:e8:4d:d3:
         2a:2f:f2:39:e9:c8:c5:c7:14:11:bc:ea:37:bf:6a:64:d0:8f:
         cf:b7:4d:b0:83:4a:f5:6a:5a:65:f7:37:c1:b9:ed:be:6c:5b:
         bb:24:eb:8b:26:d6:3c:60:b4:1b:68:02:2e:ce:f8:ee:9f:33:
         ac:a3:ed:00:6f:30:61:0c:96:25:a2:ae:09:9a:c6:12:d4:c3:
         0a:69:b6:e6:8b:0f:07:b3:c6:d4:4d:57:5b:e2:5e:2f:f5:31:
         de:22:6e:bf:7d:e2:54:48:5f:12:03:1d:97:45:53:3e:11:b6:
         d1:0c:0c:5e:d1:e4:b5:21:b3:6a:67:6d:50:bd:dc:c8:81:33:
         80:ac:86:36:67:a8:85:62:f5:e4:f9:79:f2:b6:41:aa:5a:f0:
         49:46:d6:f1:f9:8c:f4:5a:61:4c:ca:be:a8:86:d4:23:28:d8:
         5d:34:2b:24:2c:c2:b5:a4:d4:6f:96:38:60:6e:cf:ba:7d:63:
         e5:a6:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 21:12:05 2026 by rpki-client