Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
File:                     101B41766786F11711DBC574AEB99665E513B990.mft (raw, json)
Hash identifier:          +1qrVzchZM6dfXLfR4DGWaQ+L1AiTyr66B3OADhLy8U=
Subject key identifier:   AA:AE:A3:E6:77:92:25:26:C1:64:7C:F0:2C:16:5D:E2:CB:5C:15:B3
Authority key identifier: 10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90
Certificate issuer:       /CN=101B41766786F11711DBC574AEB99665E513B990
Certificate serial:       3ADF6CFFAD20F5AA55603D996DD99903AAEF34C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 15:19:57 +0000
Manifest this update:     Tue 12 May 2026 15:14:57 +0000
Manifest next update:     Wed 13 May 2026 16:46:57 +0000
Files and hashes:         1: 101B41766786F11711DBC574AEB99665E513B990.crl (hash: 2kckdEicLtq/JbtE6BWkupVvHnsgelPPj0/AdMcxHhk=)
                          2: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: tb79wAUMyUmfRc6qR3g5nMJGZjZzsgDDiwuLvNDnRQA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:df:6c:ff:ad:20:f5:aa:55:60:3d:99:6d:d9:99:03:aa:ef:34:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101B41766786F11711DBC574AEB99665E513B990
        Validity
            Not Before: May 12 15:14:57 2026 GMT
            Not After : May 13 16:46:57 2026 GMT
        Subject: CN=AAAEA3E677922526C1647CF02C165DE2CB5C15B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:87:d0:a1:ad:dc:0f:7e:80:57:61:62:65:
                    ce:9d:e6:73:05:78:ee:b0:bc:fa:0b:22:10:fa:ed:
                    0b:19:fd:fa:f5:87:ce:bb:10:57:ad:50:32:54:39:
                    70:f6:57:ce:02:85:3f:eb:8d:21:71:28:37:c6:13:
                    3f:a1:b0:02:9c:0c:d5:25:b2:1a:86:70:ff:d2:42:
                    a4:c7:6c:76:b4:10:5e:30:b5:4b:b3:8b:65:2d:17:
                    72:bc:1c:7c:65:00:1f:f9:2f:27:40:8e:9c:cc:c6:
                    37:55:dc:ca:99:d1:d9:73:32:8a:0e:46:da:0d:e0:
                    f5:51:2e:e9:ee:e2:b9:ca:95:37:76:d3:ee:ea:0f:
                    31:c8:f3:c5:1b:c9:8c:c6:b4:e7:7c:43:7b:46:be:
                    0e:db:f3:ad:87:2e:6e:60:09:3e:c3:97:3e:8b:46:
                    4e:f7:ee:e3:bb:29:67:33:f4:9e:35:98:64:ad:c3:
                    43:5c:8f:05:4e:a3:75:b1:e8:03:42:0d:d4:0e:eb:
                    58:53:82:22:c7:b6:b0:14:4b:d6:02:29:ae:28:d7:
                    f0:56:f3:c4:57:22:eb:20:3c:13:60:6d:3a:f2:b3:
                    22:4b:f3:22:75:ad:f3:30:95:ef:5e:11:a8:b0:cb:
                    46:37:5f:a6:76:9f:d5:bf:12:1b:82:f0:90:04:dc:
                    ed:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AE:A3:E6:77:92:25:26:C1:64:7C:F0:2C:16:5D:E2:CB:5C:15:B3
            X509v3 Authority Key Identifier:
                keyid:10:1B:41:76:67:86:F1:17:11:DB:C5:74:AE:B9:96:65:E5:13:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/101B41766786F11711DBC574AEB99665E513B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/101B41766786F11711DBC574AEB99665E513B990.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:46:9e:80:1b:14:48:8a:27:91:98:eb:2d:4b:08:2b:0e:84:
         ae:bb:88:0a:4f:c7:be:96:62:a2:26:9f:8b:93:75:80:5f:88:
         18:e6:5d:6f:7f:a9:6f:d1:98:a8:ca:2a:74:dd:4a:26:c0:c2:
         28:dd:86:17:8c:22:5e:ed:da:d8:46:01:39:dc:01:64:9f:fc:
         0a:94:6e:1d:48:df:5e:a6:ec:8c:15:28:c4:5b:d3:67:ef:d8:
         33:4a:8b:93:c8:90:c6:13:b4:ae:f5:95:82:84:62:d4:98:5b:
         f9:83:c4:38:3c:5a:0b:6f:2a:6a:d1:e9:de:7c:26:32:40:0b:
         87:53:f9:bd:4b:68:3e:4c:f0:a0:4d:5b:d7:ee:d6:53:4e:75:
         f8:f0:97:2b:f0:0a:28:19:91:3f:21:19:6e:b3:da:8a:4d:a3:
         2b:ca:b4:40:62:e6:48:3b:5f:95:60:bd:3e:86:19:db:ec:85:
         d9:32:a2:63:da:6d:98:20:0f:7b:20:9b:58:a8:c6:38:32:76:
         ae:c3:9d:92:c4:da:66:9a:f5:af:49:90:30:a3:5f:09:34:88:
         da:b2:57:70:6d:9d:ec:d1:6c:b9:2b:cb:12:4f:94:37:b3:a1:
         52:69:0c:62:2c:17:5a:8a:8d:1a:ba:bf:88:29:9c:16:99:17:
         98:91:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:59 2026 by rpki-client