Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
File:                     44428DF327C8FF800708E2196181BCB000E14F9B.mft (raw, json)
Hash identifier:          pmzqb6SnL8lpbSCydWBo/UH/GH3OhFv+M8SMCjS8NFw=
Subject key identifier:   C1:84:AB:21:0B:34:59:53:FA:0C:CB:53:32:97:03:6A:26:F6:6F:C5
Authority key identifier: 44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B
Certificate issuer:       /CN=44428DF327C8FF800708E2196181BCB000E14F9B
Certificate serial:       0C29AC49BA95935B98935EA4A4D0C085A846B21A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 18:18:35 +0000
Manifest this update:     Tue 12 May 2026 18:13:35 +0000
Manifest next update:     Wed 13 May 2026 18:38:35 +0000
Files and hashes:         1: 44428DF327C8FF800708E2196181BCB000E14F9B.crl (hash: kBJzQp+xCJtZ0H3W74xC7V77DtylLO0NRPAn4Hgbzko=)
                          2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: 85/rZ6LwJ+jBT8qlN/LTVMyuVN987z9Fl30YQ8p1+qo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl
                          rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:29:ac:49:ba:95:93:5b:98:93:5e:a4:a4:d0:c0:85:a8:46:b2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44428DF327C8FF800708E2196181BCB000E14F9B
        Validity
            Not Before: May 12 18:13:35 2026 GMT
            Not After : May 13 18:38:35 2026 GMT
        Subject: CN=C184AB210B345953FA0CCB533297036A26F66FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:78:1e:07:55:5a:33:82:2f:73:07:a1:f2:
                    1d:9f:81:37:80:9a:64:e7:ce:32:ab:bd:ab:36:73:
                    39:77:e8:66:f2:92:18:e1:7a:47:fc:76:74:c8:7b:
                    7b:71:13:9d:aa:2f:64:f9:5b:d5:42:88:65:5a:26:
                    cf:7b:60:c9:3d:e0:9d:5d:3e:dc:b5:4d:19:23:c4:
                    01:94:37:d5:83:b5:53:06:e8:24:c0:a1:5b:7a:66:
                    1e:b5:e3:cf:7a:1b:9b:2f:33:d5:d2:8f:c9:81:b4:
                    12:09:55:70:af:cc:92:9e:e8:b8:e1:53:45:fa:1d:
                    4b:d2:97:2b:00:29:cd:e3:4d:ad:ed:e6:84:dd:45:
                    81:9c:65:6e:db:e0:6d:16:7c:92:b8:9e:d7:9e:30:
                    3e:97:58:bb:c8:88:3a:25:64:c8:f7:f2:af:97:c6:
                    bc:42:09:d5:34:dc:2c:3e:b7:03:fb:f3:76:e9:93:
                    1b:72:8c:53:20:d7:fa:2f:50:db:52:41:6d:99:4f:
                    d5:c8:5a:44:0f:1c:e0:6b:16:2c:38:c7:ad:23:3e:
                    7f:eb:2f:da:fb:d4:1a:fe:b4:8a:46:f1:98:11:61:
                    b4:b9:41:a2:39:17:52:75:54:0f:fc:03:e9:31:7a:
                    a3:58:42:05:c2:c5:b0:aa:bf:6b:42:6b:a6:d1:34:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:84:AB:21:0B:34:59:53:FA:0C:CB:53:32:97:03:6A:26:F6:6F:C5
            X509v3 Authority Key Identifier:
                keyid:44:42:8D:F3:27:C8:FF:80:07:08:E2:19:61:81:BC:B0:00:E1:4F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/44428DF327C8FF800708E2196181BCB000E14F9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/44428DF327C8FF800708E2196181BCB000E14F9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:88:e7:17:a7:cb:e1:af:50:8b:95:a2:69:0d:71:92:ff:7d:
         33:80:a3:b6:6f:aa:73:3e:33:e7:cb:2f:2a:16:9d:4a:17:80:
         fb:04:35:07:9c:48:08:95:04:a4:a7:f5:04:09:4e:86:51:3e:
         7e:4b:48:5a:85:44:7d:50:dd:90:35:6d:0d:2a:1d:4e:04:5a:
         11:0d:a0:b4:ac:03:c6:ce:d4:80:07:dd:72:b1:4e:6d:3f:38:
         3c:40:32:64:4b:0d:42:31:cf:fa:58:47:9e:d7:bd:2b:c3:80:
         a4:9f:6e:86:04:8c:77:0c:05:8e:51:4a:2e:8f:05:26:fb:18:
         19:39:f3:38:9f:58:4b:96:55:f4:5b:b9:b7:18:4f:27:fb:e0:
         5c:4f:ea:10:47:25:4d:17:d5:32:a5:6d:46:5d:78:10:5e:a5:
         b3:36:02:a5:ff:31:8e:d1:ea:1a:e0:cf:af:91:4b:4b:fe:4d:
         bd:65:ff:cc:e0:d5:d5:91:37:69:26:8b:42:c2:ac:a6:d1:4e:
         49:37:2c:8f:3c:69:e8:7c:03:65:d6:99:e3:03:22:d4:b3:d0:
         f7:ef:07:64:18:a4:85:d2:40:f7:b7:40:cf:2e:3c:54:47:5c:
         43:6c:f3:8a:89:71:51:6b:d4:ee:4e:33:f9:aa:2a:e2:c8:52:
         1d:93:5e:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDCmsSbqVk1uYk16kpNDAhahGshowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ0MjhERjMyN0M4RkY4MDA3MDhFMjE5NjE4MUJDQjAw
MEUxNEY5QjAeFw0yNjA1MTIxODEzMzVaFw0yNjA1MTMxODM4MzVaMDMxMTAvBgNV
BAMTKEMxODRBQjIxMEIzNDU5NTNGQTBDQ0I1MzMyOTcwMzZBMjZGNjZGQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZ3geB1VaM4Ivcweh8h2fgTeA
mmTnzjKrvas2czl36Gbykhjhekf8dnTIe3txE52qL2T5W9VCiGVaJs97YMk94J1d
Pty1TRkjxAGUN9WDtVMG6CTAoVt6Zh614896G5svM9XSj8mBtBIJVXCvzJKe6Ljh
U0X6HUvSlysAKc3jTa3t5oTdRYGcZW7b4G0WfJK4nteeMD6XWLvIiDolZMj38q+X
xrxCCdU03Cw+twP783bpkxtyjFMg1/ovUNtSQW2ZT9XIWkQPHOBrFiw4x60jPn/r
L9r71Br+tIpG8ZgRYbS5QaI5F1J1VA/8A+kxeqNYQgXCxbCqv2tCa6bRNJEhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwYSrIQs0WVP6DMtTMpcDaib2b8UwHwYDVR0j
BBgwFoAUREKN8yfI/4AHCOIZYYG8sADhT5swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzEvNDQ0MjhERjMy
N0M4RkY4MDA3MDhFMjE5NjE4MUJDQjAwMEUxNEY5Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NDQyOERGMzI3QzhGRjgwMDcwOEUyMTk2MTgxQkNCMDAwRTE0
RjlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3
ZjctZjdiOGI2NjU5YWM0LzEvNDQ0MjhERjMyN0M4RkY4MDA3MDhFMjE5NjE4MUJD
QjAwMEUxNEY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC6I5xeny+GvUIuVomkNcZL/fTOAo7ZvqnM+
M+fLLyoWnUoXgPsENQecSAiVBKSn9QQJToZRPn5LSFqFRH1Q3ZA1bQ0qHU4EWhEN
oLSsA8bO1IAH3XKxTm0/ODxAMmRLDUIxz/pYR57XvSvDgKSfboYEjHcMBY5RSi6P
BSb7GBk58zifWEuWVfRbubcYTyf74FxP6hBHJU0X1TKlbUZdeBBepbM2AqX/MY7R
6hrgz6+RS0v+Tb1l/8zg1dWRN2kmi0LCrKbRTkk3LI88aeh8A2XWmeMDItSz0Pfv
B2QYpIXSQPe3QM8uPFRHXENs84qJcVFr1O5OM/mqKuLIUh2TXsI=
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:57 2026 by rpki-client