Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
File:                     CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft (raw, json)
Hash identifier:          XYxGPUedvhuVp5s+/gKXK63RsjWxOZ+pKPKcaCrjk44=
Subject key identifier:   69:D7:85:D9:AC:DC:DF:57:08:94:C0:0A:05:8F:83:BE:05:29:13:4C
Authority key identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
Certificate issuer:       /CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Certificate serial:       4F5AC610F1D0ABAF7A5E835E32CD33FE691EE9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:22:12 +0000
Manifest this update:     Tue 12 May 2026 17:17:12 +0000
Manifest next update:     Wed 13 May 2026 18:20:12 +0000
Files and hashes:         1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: 9B18d/9Mq6o8AyxG94Kdqz2+xtB5eaKcmGvgMOaUWzk=)
                          2: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl (hash: 3ywhVfLU9Qv8sI1O/DOpRdkZi3DY2pVj+4QQNpN4+ak=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
                          rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5a:c6:10:f1:d0:ab:af:7a:5e:83:5e:32:cd:33:fe:69:1e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
        Validity
            Not Before: May 12 17:17:12 2026 GMT
            Not After : May 13 18:20:12 2026 GMT
        Subject: CN=69D785D9ACDCDF570894C00A058F83BE0529134C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:99:7f:d1:fc:5c:1b:9d:6b:21:0c:45:53:
                    d9:a9:3d:c2:0d:82:3b:a1:c0:68:2e:4b:56:af:f0:
                    46:e7:59:e3:98:db:fd:57:fb:d6:85:f5:2b:79:1f:
                    6e:88:1f:bf:d6:59:b5:05:fb:d2:db:22:e1:fb:a8:
                    e5:30:a9:5e:63:dd:66:dd:b7:b6:cd:e9:39:10:a6:
                    23:10:b5:52:8f:ab:3b:52:0b:e9:6b:83:ae:fa:95:
                    0d:c6:aa:f2:44:a3:f9:95:22:98:e5:89:a7:4d:66:
                    08:c5:5e:e2:cc:08:a3:4d:e3:cc:b9:a8:4d:3f:69:
                    e6:87:b7:75:52:06:b5:04:6a:95:15:f2:37:eb:5b:
                    e0:58:81:89:90:e8:fc:d4:8f:5b:5a:e3:ec:d3:b2:
                    b9:23:63:8f:9e:96:3d:04:51:75:ba:95:c6:42:3c:
                    d8:98:dc:19:a8:5b:ac:77:49:a8:69:02:4e:51:5b:
                    bf:64:be:c4:1e:2d:f1:b7:6c:4a:5c:b3:51:46:1d:
                    77:c8:96:13:f9:67:fc:f9:98:4a:5d:35:89:4e:d0:
                    d1:5f:e4:e8:ac:39:cd:10:af:85:fc:39:6c:24:0c:
                    a3:11:9d:70:57:d6:f2:74:18:3f:53:d1:da:74:d5:
                    18:1a:ef:e3:90:8a:71:e3:bd:1d:b1:aa:6b:ee:52:
                    3b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D7:85:D9:AC:DC:DF:57:08:94:C0:0A:05:8F:83:BE:05:29:13:4C
            X509v3 Authority Key Identifier:
                keyid:CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a9:da:af:2e:55:d4:fc:cb:81:f9:27:95:29:df:93:2b:9b:
         95:0c:64:35:fe:97:e1:f4:3f:01:a9:30:0f:53:ec:1e:44:fc:
         1b:da:8e:76:0e:38:f9:c4:e7:06:86:ec:dd:64:27:4f:80:c2:
         92:27:44:2c:ed:e1:9f:6f:58:34:a3:ac:23:20:d4:ea:0c:d0:
         ca:02:d2:aa:06:3c:4a:fa:a9:88:e8:e5:03:fb:9c:27:2d:93:
         3a:3a:6b:d2:de:e3:4e:d2:c1:a0:f9:7c:89:d9:1a:58:c6:a4:
         cf:48:9e:02:0d:5b:89:f1:b3:de:15:f0:a4:8b:34:b5:7e:41:
         7f:f4:90:82:66:d3:43:df:65:14:29:8d:49:00:e3:72:4c:bb:
         b2:fc:d0:9c:3f:a0:88:89:14:1e:73:fa:61:4e:7b:9e:4f:ce:
         46:77:7b:f8:49:a8:03:51:10:e8:56:9e:5b:c3:39:ac:dc:b1:
         f9:b8:de:f7:f2:d4:78:9a:75:31:d7:ac:6a:3e:5d:66:3f:3e:
         47:3f:d3:75:ea:d4:11:04:1c:4f:a8:e2:ee:45:79:3e:af:58:
         46:d5:b4:f9:56:b3:a2:a1:0e:f4:bb:f1:00:1a:85:e3:78:c0:
         99:17:6b:dc:ad:83:86:95:3e:b7:bd:99:cd:be:55:40:f5:45:
         dc:3c:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:20 2026 by rpki-client