Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
File:                     02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft (raw, json)
Hash identifier:          ETamIJvR+3MolzeBw+4AXlQvX6tI5ZJmv5rxNOmLHBM=
Subject key identifier:   C6:B8:F5:FC:DD:CA:84:A5:B7:F4:C8:71:D0:99:4B:99:EC:DE:49:41
Authority key identifier: 02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67
Certificate issuer:       /CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
Certificate serial:       673950F244D4BC3C451D5A61A876086D44C7060E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
Manifest number:          42
Signing time:             Sat 20 Jun 2026 02:58:20 +0000
Manifest this update:     Sat 20 Jun 2026 02:53:19 +0000
Manifest next update:     Sun 21 Jun 2026 03:24:19 +0000
Files and hashes:         1: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: oJ8l8dMFPY8CyTy4Q0yxOCLUg4RyDgditXXqmbGk6Sg=)
                          2: 02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl (hash: pZttH7OXcLMO2F9H3176BkrPRT7Uir4CgPdzv6qmqnE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl
                          rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 03:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:39:50:f2:44:d4:bc:3c:45:1d:5a:61:a8:76:08:6d:44:c7:06:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
        Validity
            Not Before: Jun 20 02:53:19 2026 GMT
            Not After : Jun 21 03:24:19 2026 GMT
        Subject: CN=C6B8F5FCDDCA84A5B7F4C871D0994B99ECDE4941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:1a:62:02:87:b4:8e:44:8b:19:12:a7:a2:
                    81:5d:85:d3:ea:f4:f7:4a:18:7e:28:8b:a5:62:a1:
                    75:6f:08:ab:50:20:20:57:36:9a:5d:98:67:5b:35:
                    c4:03:c1:96:71:a8:2f:af:13:b0:e1:c8:ba:57:7e:
                    32:c4:7d:0c:d1:98:28:cf:e8:9e:7f:1d:1f:e4:5b:
                    6e:c5:d4:cf:44:83:04:02:19:ca:c9:8b:04:22:b3:
                    f8:c8:8e:8b:3d:4e:f4:7a:d9:72:27:26:86:52:18:
                    84:2f:cd:58:fa:17:48:9f:ad:5f:1e:46:7a:e5:9a:
                    e7:fd:97:cf:a1:d4:19:6f:ac:1c:f0:43:f1:bc:11:
                    e3:f4:0c:01:d5:5b:58:fa:fa:99:5e:ad:38:38:3c:
                    6c:14:f0:0f:0f:68:3e:d8:13:72:6c:28:02:1d:88:
                    3c:e8:ef:ce:0b:0e:a9:90:2b:ec:dd:74:8c:87:f1:
                    97:ce:2d:12:f1:a8:1f:39:8d:bb:f3:98:d2:91:53:
                    42:b8:50:bd:22:8c:27:7d:86:a5:46:c9:43:1e:62:
                    dc:77:b4:d9:35:31:8c:fc:8d:dc:f7:99:42:46:20:
                    19:e1:c0:d2:6e:84:c8:cf:59:31:26:2a:71:48:a2:
                    e6:c4:1d:4b:a5:cf:a5:42:7f:c3:74:3d:c3:88:25:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B8:F5:FC:DD:CA:84:A5:B7:F4:C8:71:D0:99:4B:99:EC:DE:49:41
            X509v3 Authority Key Identifier:
                keyid:02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:87:49:a8:01:26:05:bb:f0:6d:2f:3d:c7:49:ec:42:cb:95:
         34:fc:ba:15:50:0e:b0:1c:04:70:2a:b5:db:a6:56:bd:c8:c4:
         f2:a8:77:50:56:57:cb:46:02:e8:77:d1:6b:0a:c7:d1:6a:4d:
         7e:53:2d:19:38:0b:82:94:73:84:ab:f3:8c:87:2b:45:33:2f:
         c7:20:f4:40:6f:1c:5d:48:51:f4:dc:22:dd:2a:6f:3d:64:7c:
         db:7b:21:02:20:a1:f4:d6:d6:b0:57:1f:cc:ab:9e:f6:92:b4:
         90:29:63:a7:8c:a5:c5:1a:b4:48:ba:b5:a6:c9:96:5e:e9:e3:
         17:70:28:5b:b2:b5:80:4c:ed:5e:de:ab:ef:32:b1:f0:0f:31:
         cd:4d:0b:ed:6b:30:8c:e7:2a:ea:5f:32:89:3d:a0:73:9a:46:
         c9:82:d4:bf:16:64:b0:be:b7:8a:a5:c1:03:d8:92:88:f6:a8:
         84:38:6d:d8:d5:9d:de:6c:84:ad:8a:e4:26:ea:9e:dc:a6:86:
         49:f2:5f:6e:84:e5:87:36:f8:2f:bf:36:52:7a:52:be:11:a4:
         16:c8:61:fb:0d:48:ac:ab:de:c2:16:d7:c8:a4:ad:3c:24:f4:
         71:8b:74:04:e6:00:09:93:9b:ea:93:6b:f9:b7:9d:9d:6b:ae:
         25:8b:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:15:18 2026 by rpki-client