Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft
File:                     2111C1DE0964BA3363560863B0A6338C56E44B27.mft (raw, json)
Hash identifier:          AzqzwiBtd9CRXHvg/LtVfUTeS9y2edf0JprEnBbeFxc=
Subject key identifier:   51:C7:55:7F:A5:5D:B0:D6:A0:DC:36:5D:14:53:D7:22:AE:5D:9B:F6
Authority key identifier: 21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27
Certificate issuer:       /CN=2111C1DE0964BA3363560863B0A6338C56E44B27
Certificate serial:       3B34781237E43009C4DBC4673D78C633B8233A14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 21:34:22 +0000
Manifest this update:     Tue 12 May 2026 21:29:22 +0000
Manifest next update:     Thu 14 May 2026 01:18:22 +0000
Files and hashes:         1: 2111C1DE0964BA3363560863B0A6338C56E44B27.crl (hash: ucRuebYaFGqk3HXaRaZWtIsz5q5dx5wxjYNS6p3peL4=)
                          2: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: reUfW2xUZcOA3UU73tVnYqvdrqLkl2f35VFNF05Zufw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl
                          rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:34:78:12:37:e4:30:09:c4:db:c4:67:3d:78:c6:33:b8:23:3a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2111C1DE0964BA3363560863B0A6338C56E44B27
        Validity
            Not Before: May 12 21:29:22 2026 GMT
            Not After : May 14 01:18:22 2026 GMT
        Subject: CN=51C7557FA55DB0D6A0DC365D1453D722AE5D9BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:7f:34:c4:c8:ec:db:f3:87:4f:ad:be:bf:
                    60:39:05:85:b4:56:a8:29:9c:cc:96:67:8b:e6:cc:
                    8a:6b:af:a2:e8:80:ad:df:c9:24:d8:9c:3a:b2:76:
                    16:fa:a9:7a:ee:e0:b8:4e:07:85:12:cd:4d:85:36:
                    b7:39:84:7d:ce:cf:c6:1d:bc:ff:55:80:d5:8e:bd:
                    86:6a:b0:ca:4e:ea:ac:b1:94:72:78:18:f0:68:f9:
                    1d:d3:0e:55:10:41:3f:a5:72:58:11:ec:23:84:a5:
                    2b:db:ed:9f:8b:7d:1d:42:00:a7:52:a1:f6:f5:81:
                    8a:b6:03:0b:45:76:0b:84:95:6a:14:09:ff:6e:a8:
                    ae:bd:9b:fa:be:9d:7e:57:dc:a7:3c:0d:c2:74:48:
                    93:2c:0c:bd:4a:99:52:de:b7:ee:29:66:1a:50:70:
                    ea:76:21:07:40:16:86:96:91:d5:6d:3f:d9:74:95:
                    b6:d3:a8:ca:cf:fe:de:d0:84:b3:74:60:c2:9c:1a:
                    71:2c:fd:d3:16:7e:4f:88:80:f7:e8:9a:1c:e7:7a:
                    1b:d5:69:e1:ec:ee:45:ba:46:ec:9f:81:04:b3:2b:
                    78:f9:06:56:4f:03:40:cb:d9:4f:31:7e:d2:58:12:
                    66:6a:4d:1a:49:8c:82:d1:5b:3a:6d:92:61:1e:af:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:55:7F:A5:5D:B0:D6:A0:DC:36:5D:14:53:D7:22:AE:5D:9B:F6
            X509v3 Authority Key Identifier:
                keyid:21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:30:e8:f9:7e:23:55:c9:83:f8:12:c3:e4:b2:9e:2a:a6:56:
         81:a2:f7:ed:f3:c9:dc:29:ee:71:34:09:c0:24:a5:b3:09:ce:
         59:ac:a3:7a:f5:c9:36:e2:13:7f:78:d3:1f:8e:03:8c:c0:d1:
         4b:59:f6:eb:c0:03:ea:df:c9:7c:f5:79:cc:fa:1b:24:9e:ff:
         e4:1b:7d:5a:9e:62:b2:03:84:11:ee:6f:6a:f9:35:0b:39:c1:
         a6:c6:7b:49:e1:f8:bd:24:01:4b:99:a3:4f:47:a1:73:98:27:
         40:8e:80:99:75:6f:b0:5b:c5:de:9b:7c:4e:4d:87:00:b0:42:
         7c:fb:50:6a:41:53:8c:3c:de:1f:ba:59:db:7c:34:58:21:f0:
         55:86:b5:d5:f4:ab:a8:6b:b7:c3:19:4f:82:1a:4a:b0:68:ab:
         e7:37:43:84:5a:69:28:fe:17:f4:ad:c6:dd:c7:34:2e:8e:bc:
         7a:2f:b7:02:00:71:09:a2:d5:b6:fb:10:f4:55:25:9f:67:d0:
         c9:73:db:53:f5:41:ce:6d:59:73:4e:ac:36:ba:56:de:4c:96:
         7c:2e:fd:e0:7d:8a:42:88:c2:18:7a:0d:82:51:a5:a8:af:fb:
         06:1f:8d:13:ed:fc:0c:b9:bd:ab:eb:4d:e1:4a:52:ec:e0:d6:
         5d:8f:8c:09
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOzR4EjfkMAnE28RnPXjGM7gjOhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1
NkU0NEIyNzAeFw0yNjA1MTIyMTI5MjJaFw0yNjA1MTQwMTE4MjJaMDMxMTAvBgNV
BAMTKDUxQzc1NTdGQTU1REIwRDZBMERDMzY1RDE0NTNENzIyQUU1RDlCRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqH80xMjs2/OHT62+v2A5BYW0
VqgpnMyWZ4vmzIprr6LogK3fySTYnDqydhb6qXru4LhOB4USzU2FNrc5hH3Oz8Yd
vP9VgNWOvYZqsMpO6qyxlHJ4GPBo+R3TDlUQQT+lclgR7COEpSvb7Z+LfR1CAKdS
ofb1gYq2AwtFdguElWoUCf9uqK69m/q+nX5X3Kc8DcJ0SJMsDL1KmVLet+4pZhpQ
cOp2IQdAFoaWkdVtP9l0lbbTqMrP/t7QhLN0YMKcGnEs/dMWfk+IgPfomhznehvV
aeHs7kW6RuyfgQSzK3j5BlZPA0DL2U8xftJYEmZqTRpJjILRWzptkmEerwrfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUcdVf6VdsNag3DZdFFPXIq5dm/YwHwYDVR0j
BBgwFoAUIRHB3glkujNjVghjsKYzjFbkSycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzcyMjQzNjAtMjQ1ZC00YTFhLWFmMzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUw
OTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1NkU0NEIyNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMTExQzFERTA5NjRCQTMzNjM1NjA4NjNCMEE2MzM4QzU2RTQ0
QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm
MzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMz
OEM1NkU0NEIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIYw6Pl+I1XJg/gSw+SyniqmVoGi9+3zydwp
7nE0CcAkpbMJzlmso3r1yTbiE3940x+OA4zA0UtZ9uvAA+rfyXz1ecz6GySe/+Qb
fVqeYrIDhBHub2r5NQs5wabGe0nh+L0kAUuZo09HoXOYJ0COgJl1b7Bbxd6bfE5N
hwCwQnz7UGpBU4w83h+6Wdt8NFgh8FWGtdX0q6hrt8MZT4IaSrBoq+c3Q4RaaSj+
F/Stxt3HNC6OvHovtwIAcQmi1bb7EPRVJZ9n0Mlz21P1Qc5tWXNOrDa6Vt5Mlnwu
/eB9ikKIwhh6DYJRpaiv+wYfjRPt/Ay5vavrTeFKUuzg1l2PjAk=
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:26 2026 by rpki-client