Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft
File:                     000F2B21BC5C00475E698BA18880BB67B774EC97.mft (raw, json)
Hash identifier:          dUuzNS50L+HU8sl+ML+c2BNpLtm81uTFydrrQjLLsNQ=
Subject key identifier:   58:EF:D2:B8:F8:25:55:D2:82:27:CD:5D:A5:01:D1:55:A1:84:AB:B8
Authority key identifier: 00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97
Certificate issuer:       /CN=000F2B21BC5C00475E698BA18880BB67B774EC97
Certificate serial:       563DA88925337E1EA2AB4607237B8C196C1BB1EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft
Manifest number:          0E
Signing time:             Wed 13 May 2026 00:03:26 +0000
Manifest this update:     Tue 12 May 2026 23:58:26 +0000
Manifest next update:     Thu 14 May 2026 02:55:26 +0000
Files and hashes:         1: 000F2B21BC5C00475E698BA18880BB67B774EC97.crl (hash: zBF49NGLDNq4BmW3bfjeN71q8KItgAHocCXr6874cvQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl
                          rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3d:a8:89:25:33:7e:1e:a2:ab:46:07:23:7b:8c:19:6c:1b:b1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000F2B21BC5C00475E698BA18880BB67B774EC97
        Validity
            Not Before: May 12 23:58:26 2026 GMT
            Not After : May 14 02:55:26 2026 GMT
        Subject: CN=58EFD2B8F82555D28227CD5DA501D155A184ABB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:2f:71:3d:35:9a:65:15:00:d6:37:ae:b9:
                    d5:a3:af:52:f5:c8:ad:30:80:83:e8:ce:18:1e:7a:
                    af:c1:2c:8e:00:ac:1b:d6:2d:b9:ef:98:d3:d4:aa:
                    8f:d0:fb:80:fc:fd:c5:a9:1d:c5:41:e4:eb:6f:10:
                    f4:8b:f0:e7:0f:3a:ea:88:9a:93:9b:f2:9d:c8:be:
                    ab:75:e8:fc:00:42:7e:15:a3:43:64:ec:12:ae:37:
                    e8:81:f0:92:6a:54:5a:9d:58:ac:f6:b4:1c:a0:38:
                    45:04:66:64:16:a9:92:cb:9d:19:e9:93:36:20:9e:
                    7b:b8:96:44:01:ae:11:e9:be:e1:ce:2b:d2:26:b3:
                    c4:52:fa:aa:28:30:d4:48:f5:a3:2a:de:a5:04:c8:
                    df:b2:83:1a:8d:5f:43:1a:22:cb:5a:db:cc:fc:78:
                    dd:ab:ae:86:47:a2:5d:3b:aa:d0:c3:ed:9d:e1:cb:
                    05:ef:24:73:c8:71:02:d4:bb:b6:d7:71:9e:ee:7f:
                    be:a2:a0:27:38:61:5f:af:e0:de:84:9a:67:06:83:
                    dc:71:1b:ad:14:d4:ab:cc:70:a2:45:7d:bd:87:06:
                    12:ad:42:7e:5f:53:94:a7:70:38:d6:ca:f4:de:a0:
                    6d:79:8e:32:3a:3a:98:dc:0c:6b:cb:ba:a3:12:93:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EF:D2:B8:F8:25:55:D2:82:27:CD:5D:A5:01:D1:55:A1:84:AB:B8
            X509v3 Authority Key Identifier:
                keyid:00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2d:2e:04:6a:42:28:85:d7:fa:23:99:3f:3f:76:80:dc:54:
         ae:12:13:f3:cc:4a:91:56:1c:5f:8b:23:dd:e5:bb:11:ad:fd:
         2e:1e:1d:1d:77:e1:b1:98:c9:92:30:9b:82:d7:69:1a:2c:93:
         54:dd:52:32:e2:30:fd:71:9b:18:07:4c:70:91:0f:99:97:f7:
         29:b5:a6:04:92:04:53:c4:f8:e0:8a:43:f6:2a:94:32:cc:0a:
         b9:61:22:28:6c:00:64:8d:60:d7:d8:85:e4:bb:71:03:72:0e:
         05:e7:78:2f:5a:7a:f4:46:83:15:ce:76:30:f1:5e:fa:01:b4:
         81:69:07:5d:a5:d6:6c:4e:9e:9f:c0:ca:7d:5a:cf:57:80:44:
         d1:a2:dc:75:2c:0a:5d:11:50:82:ec:7f:74:38:71:c3:20:80:
         c1:99:86:7e:25:13:54:f1:99:37:32:62:17:b8:87:40:6f:0d:
         c8:38:b4:fe:cc:70:b9:7b:ac:a5:29:61:58:44:1c:f9:69:9a:
         90:c3:4e:2c:b6:f7:32:fc:77:dc:57:02:df:fe:3e:46:60:40:
         91:a5:47:9b:6e:e3:de:1f:32:76:50:8a:a0:81:d7:d4:eb:ff:
         7b:60:7c:23:37:fd:60:22:f4:42:ec:9d:af:dd:88:da:b5:23:
         0d:63:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:01 2026 by rpki-client