Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
File:                     F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json)
Hash identifier:          lMHONn9uffOWVtIaCWGAvImCD+4osWqiPycA4ys3Bek=
Subject key identifier:   FC:7B:5D:27:A1:92:FB:76:FD:D7:F1:06:8A:F6:C2:A4:76:2A:CF:82
Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
Certificate issuer:       /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Certificate serial:       7266A836A195ED51067105A5B858157C4268FFC7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
Manifest number:          40
Signing time:             Thu 18 Jun 2026 03:46:34 +0000
Manifest this update:     Thu 18 Jun 2026 03:41:34 +0000
Manifest next update:     Fri 19 Jun 2026 04:01:34 +0000
Files and hashes:         1: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=)
                          2: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: QXAi007f6V07W4kQDumJJj2n/li1THgM+CnUQu2u1ZA=)
                          3: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
                          rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:66:a8:36:a1:95:ed:51:06:71:05:a5:b8:58:15:7c:42:68:ff:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
        Validity
            Not Before: Jun 18 03:41:34 2026 GMT
            Not After : Jun 19 04:01:34 2026 GMT
        Subject: CN=FC7B5D27A192FB76FDD7F1068AF6C2A4762ACF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:c4:b3:64:2b:4e:7e:78:0d:fe:ff:8a:b4:
                    50:8b:e0:a1:37:44:89:f2:19:23:40:32:3b:a4:98:
                    5e:68:45:27:5e:b8:e3:c6:3b:20:da:10:cb:db:ed:
                    84:7f:94:31:d3:75:a7:b4:fd:39:2c:7a:87:87:4e:
                    35:60:1e:f8:7c:96:1b:1f:38:8f:57:b1:2c:7e:02:
                    b6:f0:30:9a:53:65:dc:20:88:3f:05:39:78:62:ba:
                    72:83:b8:db:f7:d8:77:de:9f:6f:87:4c:90:9b:c1:
                    c8:4b:24:89:b5:a2:0c:d1:14:89:c1:80:e1:ac:99:
                    e9:a7:60:08:25:16:f4:f6:76:5e:d0:9e:e0:c8:bd:
                    b6:8b:ce:0b:b6:36:66:01:95:95:72:1e:b7:03:ec:
                    ad:8f:55:35:75:66:4c:59:c9:91:d4:19:be:35:c0:
                    90:e6:f1:52:34:9e:22:dd:40:fe:3c:ef:f0:34:1f:
                    d3:09:1e:15:13:97:54:76:c7:70:72:e7:08:d8:0f:
                    4e:b4:47:e8:0b:63:ce:14:9b:7a:5f:5a:df:8a:61:
                    87:47:cd:74:56:1b:32:ed:06:5e:81:21:9d:b3:18:
                    76:e5:90:10:ca:93:7a:b3:5f:17:d2:e9:76:42:f1:
                    d0:16:21:93:91:c6:67:ee:fb:f9:d0:8e:33:e9:2f:
                    fa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7B:5D:27:A1:92:FB:76:FD:D7:F1:06:8A:F6:C2:A4:76:2A:CF:82
            X509v3 Authority Key Identifier:
                keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:15:d3:f0:d9:2d:d0:c7:cc:76:de:c8:6f:1e:3f:83:7c:4a:
         9e:58:d5:2c:6e:cf:74:b2:b0:51:a8:b1:a9:f5:08:03:55:6d:
         fa:2f:24:5d:9c:d7:4c:eb:6e:2a:69:ad:80:f8:01:37:95:7d:
         4b:cd:d3:09:cf:fa:f1:bc:3b:91:aa:7d:d5:ca:56:1f:67:49:
         30:bf:68:98:a2:b5:45:60:92:a6:a1:4a:95:7a:52:fb:58:d8:
         af:e6:c3:1e:06:09:a8:b2:61:23:d5:9c:68:13:08:83:d0:60:
         a5:93:e1:c5:5f:3a:cf:60:64:8e:60:ea:46:59:ad:ab:bd:c0:
         c4:e3:d7:e7:1b:fe:ba:17:ab:59:0b:52:2c:21:c6:c0:44:05:
         fc:5e:04:74:5a:64:74:8c:f3:2a:13:8d:cf:88:ce:91:be:cf:
         0d:b0:55:d3:87:9f:ae:53:8a:b5:b5:60:c1:84:6e:85:1b:7a:
         f6:0f:4c:e4:0e:fc:66:23:ab:48:fc:88:60:7b:13:ba:60:50:
         1b:fc:77:ff:d6:35:b3:4e:dd:72:2f:41:7b:42:d3:32:30:35:
         73:ae:7f:bb:fa:2e:31:bb:9b:e9:8b:72:cc:5a:73:ff:5b:cb:
         db:fa:b9:92:27:b1:b4:9e:a9:32:d4:73:dc:02:3c:27:f9:87:
         d4:2a:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:11:16 2026 by rpki-client