Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft
File:                     D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft (raw, json)
Hash identifier:          MPraKrK6dqKLiUycQw0/fsjBIzIXkSnAe8fLduCvpfk=
Subject key identifier:   33:9C:E0:18:94:1E:8E:04:7A:EC:24:BB:DB:58:FB:56:6D:8D:F1:9B
Authority key identifier: D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30
Certificate issuer:       /CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430
Certificate serial:       5085CEDFF2DC5D32B7F2ECDB51571B0141CF94D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:56:30 +0000
Manifest this update:     Tue 12 May 2026 22:51:30 +0000
Manifest next update:     Thu 14 May 2026 02:00:30 +0000
Files and hashes:         1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: eAwax4YpAFVnhFTpTcP/7sxY2Fc6q05CXGATtMyPlAE=)
                          2: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: Sxgj/jIWe1519euOI3Cc2FFGv49kzekxQhzGH0BLJlM=)
                          3: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl (hash: nU83S7VD7lZ6q+a7ExAXlCNchQQDQnbmn7pGa40aSVc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl
                          rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:85:ce:df:f2:dc:5d:32:b7:f2:ec:db:51:57:1b:01:41:cf:94:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430
        Validity
            Not Before: May 12 22:51:30 2026 GMT
            Not After : May 14 02:00:30 2026 GMT
        Subject: CN=339CE018941E8E047AEC24BBDB58FB566D8DF19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:dc:04:59:ba:c4:24:fc:5f:6d:c6:76:95:
                    bc:9f:0a:f2:f0:d1:eb:5c:32:b9:0a:46:92:40:62:
                    4c:12:8e:2c:87:1d:cf:c1:a4:79:5c:4a:e7:21:71:
                    a3:a0:97:89:80:eb:30:e4:e1:50:c8:b9:be:ea:53:
                    b5:ef:44:bc:09:76:38:45:49:7a:bd:3e:6d:5b:96:
                    cd:1c:63:52:3e:74:0a:5a:1d:80:dc:07:f1:7a:99:
                    69:a1:5b:99:6f:24:02:dc:24:cf:d2:82:08:de:06:
                    b1:ae:5e:fb:02:5c:22:15:55:a9:2e:e8:68:50:69:
                    ce:99:8c:41:61:70:43:71:aa:25:ed:76:0f:3f:87:
                    95:43:ef:da:27:c7:72:d7:f1:f8:2e:ea:fa:b2:3c:
                    56:26:6d:46:3b:7c:6b:4e:f7:49:19:3e:c8:c4:e4:
                    0f:eb:07:d7:3b:d0:80:79:14:52:4b:12:a7:b2:7d:
                    5c:84:e1:5e:52:be:7f:7a:74:df:3b:47:04:83:9f:
                    1f:04:8d:90:32:c0:96:a8:39:f4:25:ec:e1:45:d4:
                    9a:94:8c:0b:e1:0a:c7:c9:68:43:5c:70:64:b3:c5:
                    ee:6d:a0:e2:51:d3:22:57:9c:0d:9e:71:da:af:81:
                    71:76:a9:ce:ad:5e:56:d4:87:4b:12:6f:fc:58:95:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9C:E0:18:94:1E:8E:04:7A:EC:24:BB:DB:58:FB:56:6D:8D:F1:9B
            X509v3 Authority Key Identifier:
                keyid:D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:56:1b:ec:80:fb:0b:80:fb:24:eb:3e:cf:0a:86:06:29:0f:
         7b:70:90:6d:b0:09:f2:fd:2e:1a:14:88:2b:3b:22:21:c0:3d:
         dd:3a:10:8e:3f:b3:77:b9:88:a8:69:2a:c5:a1:34:e7:1e:15:
         5a:5e:a2:09:91:f4:61:a4:52:bc:17:d5:e3:d1:15:3a:82:3f:
         ba:8d:3d:fb:45:79:18:24:20:9e:86:02:ac:b0:ce:99:8e:1d:
         f4:30:67:d3:df:5b:2c:75:6d:0b:bf:35:c0:6f:72:e6:e9:1b:
         50:78:4b:f3:b2:19:d1:a5:d9:3b:81:17:07:02:4f:88:34:4c:
         e0:1c:7d:31:85:c4:53:b3:9c:86:4c:46:a1:e7:4d:8a:ee:b8:
         d9:33:44:50:4f:c6:62:f2:e9:b6:18:80:51:21:cf:c1:40:ad:
         29:b2:21:19:94:2e:39:06:2e:9b:21:c4:b0:c3:b3:dc:57:d6:
         d5:f7:b5:6b:20:b6:27:bd:47:f8:e2:f8:24:88:8b:8d:c6:ed:
         6d:0c:c4:43:7a:ee:d9:05:28:82:ea:ae:a1:4a:3a:29:b8:f2:
         5f:10:7d:94:92:e0:35:3b:4c:e0:7f:77:0c:f3:71:4d:bd:ab:
         6d:b7:b3:d3:42:3b:8a:2f:7b:3f:db:2f:09:15:2d:f4:98:42:
         50:5f:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:36 2026 by rpki-client