Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft
File:                     F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft (raw, json)
Hash identifier:          iWa4ykQgsEk3Gj0xPRlSj2KAcvdxaYkikBmY4ATN7fY=
Subject key identifier:   86:59:C2:57:A9:3D:68:1A:24:CC:3C:BF:61:01:34:8F:D0:39:D4:10
Authority key identifier: F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91
Certificate issuer:       /CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491
Certificate serial:       1E898172415DE87F1ABBA0F35B0DBCAC4123A166
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:03:40 +0000
Manifest this update:     Tue 12 May 2026 03:58:40 +0000
Manifest next update:     Wed 13 May 2026 07:33:40 +0000
Files and hashes:         1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: stKJlVY4X9Us0gcPWRVnra1On9usS4UIj80SOb9p2sg=)
                          2: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl (hash: n4aA7M+/N4aDVzrFHFDtIonjhTmE6SKAy+Ba02Kpsv8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl
                          rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:89:81:72:41:5d:e8:7f:1a:bb:a0:f3:5b:0d:bc:ac:41:23:a1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491
        Validity
            Not Before: May 12 03:58:40 2026 GMT
            Not After : May 13 07:33:40 2026 GMT
        Subject: CN=8659C257A93D681A24CC3CBF6101348FD039D410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:85:8d:be:13:9b:c5:8b:e7:b6:45:08:dd:1b:
                    f8:7f:d8:10:1e:8a:a4:a2:48:ae:7e:e2:3a:fb:a5:
                    35:d5:92:87:0c:ac:98:a3:b1:8a:a9:12:86:6e:9e:
                    86:02:26:3b:90:c7:07:d6:f7:9e:8a:eb:38:86:84:
                    4c:ec:38:e7:b7:9e:fe:83:f5:6e:b4:a4:4f:53:ab:
                    25:bd:b7:88:04:b1:f7:3e:36:48:9d:92:9d:0e:a0:
                    42:df:06:72:c5:30:5c:5e:19:60:d1:c1:0a:5f:c1:
                    62:c5:eb:95:ef:3a:cd:43:e0:50:fa:2c:a0:b2:72:
                    6e:37:69:ed:6f:60:28:c2:0a:39:c8:43:f3:9e:04:
                    fb:c5:da:0d:3f:2c:9f:90:08:26:5e:a0:28:ab:d3:
                    01:97:c3:4d:cc:2e:67:b6:bb:c3:09:30:d2:1d:26:
                    c6:be:2d:ef:55:51:85:25:98:42:5a:48:c5:7c:d5:
                    6f:9b:67:fa:fa:4f:fd:23:17:d2:6c:d5:08:24:75:
                    f0:ae:8f:75:91:91:4a:61:98:5c:b9:03:9b:2b:7b:
                    a0:e6:8f:ec:45:01:15:83:28:06:d6:9c:8d:cb:64:
                    c3:36:f5:dc:bf:f3:22:27:52:c0:92:2e:44:bb:0e:
                    78:d3:36:93:27:5e:20:cd:1d:61:e4:60:36:a8:92:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:C2:57:A9:3D:68:1A:24:CC:3C:BF:61:01:34:8F:D0:39:D4:10
            X509v3 Authority Key Identifier:
                keyid:F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:22:70:65:6b:bf:90:0f:57:f1:9b:0f:e8:62:e3:16:3d:ef:
         a8:9c:1e:56:d1:db:9a:2c:71:9e:f8:00:e1:1e:56:3f:3f:3c:
         e3:d3:12:1d:de:e9:a2:f3:08:1d:29:a3:34:28:d9:fa:8f:1a:
         c5:68:e3:f4:ed:41:f1:1a:9a:a9:71:91:b5:73:77:2c:c8:70:
         ea:00:b7:48:8e:b3:1e:35:ea:aa:d8:8c:f6:c2:bb:9b:f3:dc:
         02:67:83:a6:95:99:d5:e7:6a:1c:d1:02:a9:44:f3:bd:49:a3:
         91:7c:45:96:af:bb:40:9e:6b:e3:5e:f0:81:ff:e6:26:55:6f:
         26:51:08:e2:aa:9e:fb:12:76:ce:98:c7:5b:a0:1c:80:f2:90:
         c5:eb:82:fb:70:85:df:49:19:0d:06:a9:fd:5d:dd:d4:2a:dd:
         37:f8:36:b3:ac:07:eb:dd:eb:c4:cd:4d:b5:52:d4:9b:ab:62:
         43:6f:80:52:d8:6a:e1:6d:89:b6:cf:f5:42:f4:5f:33:ac:f6:
         f2:e4:79:04:76:e0:a1:1f:95:58:37:f8:f3:a2:ac:c3:66:a9:
         72:1d:3e:a5:68:24:50:cb:6d:15:6e:8b:85:8f:cc:e8:1b:d9:
         bb:09:88:10:c0:5e:30:6a:2d:80:31:ff:5b:4e:99:1b:86:04:
         35:3d:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:52:41 2026 by rpki-client