Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
File:                     F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json)
Hash identifier:          5fv+hMZkQbEuvN5a0jTELijGRX+K2zpi05o3M7J42gI=
Subject key identifier:   1A:57:27:F9:8F:E7:8D:2B:CA:00:8B:4F:2F:74:5F:5A:2A:45:3F:4F
Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C
Certificate issuer:       /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C
Certificate serial:       35D3D71A2D360621DD7E04071BBE61D39F105C2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
Manifest number:          40
Signing time:             Thu 18 Jun 2026 15:56:11 +0000
Manifest this update:     Thu 18 Jun 2026 15:51:11 +0000
Manifest next update:     Fri 19 Jun 2026 16:09:11 +0000
Files and hashes:         1: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: s+CYmaf12csIXiO4B30E4wOfrPnlJAjYQDgKIhmaH+Q=)
                          2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl
                          rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 12:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d3:d7:1a:2d:36:06:21:dd:7e:04:07:1b:be:61:d3:9f:10:5c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C
        Validity
            Not Before: Jun 18 15:51:11 2026 GMT
            Not After : Jun 19 16:09:11 2026 GMT
        Subject: CN=1A5727F98FE78D2BCA008B4F2F745F5A2A453F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:6e:32:f3:ec:29:2b:ba:24:83:e3:9e:3d:
                    20:3f:bf:f4:4c:33:cf:a6:84:83:92:72:75:2e:7f:
                    c4:ea:df:09:f2:1b:c1:11:50:5e:50:da:85:34:51:
                    5f:20:35:46:9c:ab:20:a3:77:f6:4c:12:27:df:a4:
                    f1:13:8b:dc:08:33:64:84:90:fd:16:99:c7:d9:80:
                    fd:72:b7:28:98:d2:bc:22:b3:08:dc:05:8d:0c:a9:
                    0a:55:e7:4e:55:12:b9:78:88:33:dd:81:8d:e7:77:
                    b9:f9:aa:fe:75:2e:b8:9c:ae:b3:da:0d:bb:51:16:
                    49:19:41:3b:1e:54:ae:89:c7:64:91:26:06:4c:7c:
                    f6:04:71:4f:c6:09:74:de:42:7e:b6:81:79:ce:c0:
                    8e:a2:f6:59:b8:16:87:b2:d5:d6:38:9d:27:df:f0:
                    dd:4d:62:ef:c4:30:d7:57:27:f3:28:88:dd:8c:99:
                    f2:f2:92:2f:b2:29:81:92:54:8c:db:a8:bb:fe:50:
                    ad:24:af:f5:72:c1:48:2a:74:99:66:f6:ec:4c:32:
                    78:34:00:f6:c9:20:aa:8b:05:90:6e:86:5b:81:ad:
                    aa:e0:d2:26:ee:20:10:d0:2c:e4:4b:a0:5b:c9:ca:
                    7e:a7:f6:86:81:10:25:f1:8e:4f:3c:9c:57:e4:12:
                    3b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:57:27:F9:8F:E7:8D:2B:CA:00:8B:4F:2F:74:5F:5A:2A:45:3F:4F
            X509v3 Authority Key Identifier:
                keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:00:ce:d3:83:7a:da:3b:96:32:e8:f9:3a:3b:38:3a:ba:db:
         6f:1a:7e:02:98:34:58:8b:00:3e:8c:bd:0b:48:a9:2e:cc:d0:
         6b:af:c6:92:56:48:16:d5:4c:4a:7c:55:bb:55:10:31:ae:23:
         db:67:8d:89:60:fe:69:d5:e2:bd:36:8b:bf:b6:5e:c2:e1:11:
         88:3f:45:f9:d4:1a:a5:28:2c:01:cf:e4:59:c2:61:fe:39:63:
         fc:83:bb:4e:31:bc:f1:74:8b:ef:3e:57:66:b1:62:e7:fb:48:
         24:1c:34:83:5a:f1:65:11:7b:a8:f9:70:6b:ba:04:34:bb:06:
         44:21:12:78:5a:d4:34:40:e9:ba:24:23:14:f0:4b:39:f1:6a:
         6c:9f:a1:c1:29:66:23:28:8d:95:f8:f9:f4:4f:f5:e2:6a:48:
         46:56:ac:91:09:ff:d0:86:69:e3:33:e4:3a:ba:12:e5:de:20:
         b7:f2:98:02:bc:d4:0c:c8:31:76:be:42:02:65:6a:67:b7:00:
         70:17:54:42:67:5c:d2:93:41:c0:78:a7:53:63:8a:1b:bd:2a:
         ba:7d:3a:96:77:e6:3a:48:08:b0:c0:69:b9:8e:07:91:9d:80:
         6f:b9:aa:fe:2d:b9:d6:56:09:3c:61:a3:cd:eb:74:f9:ac:4a:
         dd:0b:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:55:50 2026 by rpki-client