Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
File:                     F61FC33006E4D563052A74A3344CBDB712A9CE42.mft (raw, json)
Hash identifier:          DyAwHzeA4kgu6Tp3E0h9wN2EDbaW6N7ewS4/LSWuhfk=
Subject key identifier:   F2:5C:88:97:86:5C:0B:AF:BA:A2:9D:AB:17:DD:79:91:5E:7A:93:AD
Authority key identifier: F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42
Certificate issuer:       /CN=F61FC33006E4D563052A74A3344CBDB712A9CE42
Certificate serial:       191CE07A41D21FFFC81075624BDC4F79961CF8D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:22:08 +0000
Manifest this update:     Tue 12 May 2026 17:17:08 +0000
Manifest next update:     Wed 13 May 2026 17:31:08 +0000
Files and hashes:         1: F61FC33006E4D563052A74A3344CBDB712A9CE42.crl (hash: DUkloeyyxm+xtT7TJLGOe1P4NRFeRhtsEl/LJipbWaE=)
                          2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: slYjvzyCrVX4GgCGyd9rvovLqFZzNIshufZkbhVSrC0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl
                          rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1c:e0:7a:41:d2:1f:ff:c8:10:75:62:4b:dc:4f:79:96:1c:f8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61FC33006E4D563052A74A3344CBDB712A9CE42
        Validity
            Not Before: May 12 17:17:08 2026 GMT
            Not After : May 13 17:31:08 2026 GMT
        Subject: CN=F25C8897865C0BAFBAA29DAB17DD79915E7A93AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:44:49:10:63:4c:94:27:58:ee:c7:b3:99:
                    b7:41:65:6a:3a:94:24:d3:fe:a1:61:ed:38:66:ff:
                    47:09:b0:d1:2e:b5:41:7b:93:ef:44:fa:02:5f:0d:
                    69:b7:c2:4b:a6:cf:45:96:8b:bd:d4:7b:55:6f:12:
                    f1:3c:6c:61:17:0f:6a:e0:e8:63:85:1b:f0:c2:e0:
                    59:29:d9:7a:82:80:42:4a:9a:16:cf:a4:08:4f:72:
                    fb:f0:4a:5e:e2:5f:9e:61:2c:76:dc:a6:88:66:f3:
                    5e:4b:0c:03:01:75:69:c5:04:27:f0:a2:a8:13:df:
                    a4:ac:13:d1:3b:1f:f4:16:0b:e5:4e:6d:6a:4c:bf:
                    74:51:f3:3e:7a:de:db:5a:68:84:5d:7d:46:40:55:
                    51:31:c7:04:1d:73:f2:75:aa:5a:25:90:fc:85:ea:
                    89:a6:7d:cf:3a:03:12:c6:15:66:f2:d0:67:13:d0:
                    96:49:98:ba:cc:81:f9:71:8e:26:fe:fd:45:a2:5e:
                    31:91:b9:48:20:cf:cf:cc:f2:3a:f8:a3:a4:81:ae:
                    5c:0f:ac:ae:67:c2:4d:2a:94:54:40:77:2b:ff:bf:
                    83:69:cb:e5:07:96:21:5f:ae:6e:12:d8:6a:c6:bd:
                    30:b7:5d:42:d5:ff:66:06:b9:cb:55:d5:11:df:e4:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5C:88:97:86:5C:0B:AF:BA:A2:9D:AB:17:DD:79:91:5E:7A:93:AD
            X509v3 Authority Key Identifier:
                keyid:F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c0:19:be:7d:0a:9b:5c:b6:f0:6a:9f:65:45:0a:ae:77:6f:
         58:15:94:31:91:6c:0a:e1:df:54:f1:58:d3:fa:94:ea:8a:1e:
         ea:7a:c5:3b:3d:eb:dc:a6:ca:7c:ce:6a:1d:71:e2:33:32:37:
         3d:d7:41:79:96:fa:c6:68:6e:ca:46:d4:a1:d1:9d:16:3d:e7:
         fb:df:bd:06:d7:45:bc:75:47:ed:e1:39:cf:49:ca:70:41:e9:
         55:e8:d7:52:a2:c8:16:36:ad:3e:2e:78:3c:7f:b1:46:81:8a:
         1a:0d:e0:7b:e7:0f:04:75:53:4a:3b:87:a0:26:5a:c0:6b:c3:
         4b:e3:46:e8:cc:61:5b:ca:de:b4:e1:1c:c3:b8:5b:bb:93:ed:
         1c:f2:f5:2a:f2:2b:11:11:df:14:d2:3c:68:99:40:48:6b:7a:
         2b:b7:2e:2f:41:04:bf:d8:c8:5b:36:da:32:bd:e6:76:76:ac:
         7a:d7:af:2c:f8:12:09:26:06:71:06:ff:6e:29:d1:19:7c:e4:
         75:39:ec:13:9a:01:d3:8a:d3:23:85:98:5c:25:31:62:5a:20:
         24:df:ad:1c:8b:bf:99:06:54:d7:69:e9:e0:72:c8:1a:60:b3:
         04:54:78:91:5b:a2:60:e4:58:f8:0b:9d:e7:46:6a:55:ee:89:
         f1:a9:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:51 2026 by rpki-client