Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
File:                     D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json)
Hash identifier:          xgMkg4/ui817zNqpRfz9j9GB9VVFSJVlm/hR+cZo6hE=
Subject key identifier:   04:96:1B:C0:DA:EC:E2:91:3B:F7:26:E8:6C:60:57:07:24:43:5F:23
Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
Certificate issuer:       /CN=D61B761F0598B8998BF802A069F51103270C6CC0
Certificate serial:       7840208ACF06B7254C63021EFDD988C6399094F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:52:53 +0000
Manifest this update:     Tue 12 May 2026 17:47:53 +0000
Manifest next update:     Wed 13 May 2026 21:14:53 +0000
Files and hashes:         1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=)
                          2: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: mDK7PggwvCAphkVN0Ai/Q0QW9wxHszyL2oVs7R7pRQc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
                          rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:20:8a:cf:06:b7:25:4c:63:02:1e:fd:d9:88:c6:39:90:94:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0
        Validity
            Not Before: May 12 17:47:53 2026 GMT
            Not After : May 13 21:14:53 2026 GMT
        Subject: CN=04961BC0DAECE2913BF726E86C60570724435F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:2e:93:6c:bf:61:5f:a2:65:95:e4:91:fa:
                    43:12:77:3f:53:b0:b9:38:6a:3d:7b:a8:d0:37:dc:
                    d9:29:da:44:6f:5d:d4:d7:4f:6e:79:46:15:3a:b6:
                    81:ef:2c:11:fa:d2:65:11:9f:ea:bc:75:c5:73:dd:
                    ef:4a:33:2f:96:4e:54:c5:71:c3:8a:2b:37:83:f7:
                    71:a7:a3:2a:7e:53:1c:2f:e4:f0:94:c1:03:04:9d:
                    ed:76:e7:20:a4:be:cf:50:34:9c:a9:7a:3d:f7:f3:
                    ee:06:d3:b2:cb:e7:76:2e:98:dc:40:2e:22:db:2a:
                    1b:31:d1:14:b4:f8:e9:3d:95:2d:dc:78:81:e3:2d:
                    fd:ce:c1:77:be:67:4e:d1:27:ee:66:e2:45:84:a6:
                    c0:00:87:7e:30:81:96:2f:da:8e:17:e1:11:ca:64:
                    08:17:8a:86:bf:92:86:e6:0c:06:18:53:37:cc:d4:
                    57:5c:d5:e4:1a:63:84:f2:cc:ae:ab:f6:5d:87:b9:
                    f7:64:d0:c6:08:65:87:fb:21:54:05:c6:bf:c6:97:
                    c3:89:87:6c:67:20:28:34:33:84:f1:45:17:e2:a5:
                    a3:11:7e:c9:08:d7:29:ce:80:de:5e:12:cd:a6:02:
                    c2:0e:54:01:a9:27:7a:24:9f:02:9d:74:96:af:20:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:96:1B:C0:DA:EC:E2:91:3B:F7:26:E8:6C:60:57:07:24:43:5F:23
            X509v3 Authority Key Identifier:
                keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d4:3b:ce:26:fc:97:6a:cc:9a:88:74:e6:9b:5f:d2:ad:d7:
         17:d6:34:98:3b:b4:2c:d2:9f:9a:72:56:4b:87:bf:a6:d5:94:
         19:6d:df:11:ac:c8:26:31:7b:d7:7c:f0:cb:e1:36:0d:c7:90:
         27:41:9b:48:b9:82:3a:3b:2f:57:8d:97:c7:ab:8a:c4:07:e8:
         bd:46:08:50:73:63:da:86:1a:2b:da:85:c8:46:dd:4a:c5:63:
         98:77:f0:d5:fb:1a:d4:1e:fb:81:5c:bc:86:d8:d5:fd:62:f9:
         4f:a8:ec:6a:4d:bd:47:e2:f9:ba:5d:fd:15:9a:02:fb:98:55:
         71:d5:2b:00:09:16:3f:85:14:7f:fa:94:54:a3:c7:cf:7f:6f:
         1f:46:9e:ee:7e:17:6c:f4:9f:e6:2f:5f:0e:da:2b:62:8d:15:
         37:09:78:e3:80:62:3f:d7:e4:5e:05:0a:ea:31:ec:ec:c2:62:
         c1:96:05:e8:a9:3d:73:8d:87:91:6f:57:38:55:d0:98:2e:db:
         2b:ca:e7:8b:15:26:ce:94:34:e6:fc:ae:2e:12:05:02:47:bb:
         f5:76:1e:5b:1d:73:8e:4f:99:6c:8a:5f:73:ac:ef:70:f4:6a:
         c6:96:41:2d:f9:7c:7c:ef:b2:69:7e:56:d1:c0:69:38:49:d4:
         ed:74:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:34 2026 by rpki-client