Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
File:                     A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft (raw, json)
Hash identifier:          kGjgBWCxoZqACtlEGYNrBu/CxVtu+XdWTGfagkDCcTY=
Subject key identifier:   0F:41:66:D9:56:95:9B:02:FB:1C:C8:DC:36:35:1E:BC:4E:01:66:FD
Authority key identifier: A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
Certificate issuer:       /CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Certificate serial:       4CAE38E9CB2427C920C9CA900A5A0E5B3F5CE505
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 16:00:31 +0000
Manifest this update:     Tue 12 May 2026 15:55:31 +0000
Manifest next update:     Wed 13 May 2026 17:38:31 +0000
Files and hashes:         1: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: s+sTY2aYtG/SFja7fxXnQbGi+haO9AYfperyGy23oaM=)
                          2: A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl (hash: SpPxhVqfsry8P0Mn/fXUo8efF7Wzr/3i3qf0Mlx0INM=)
                          3: 3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (hash: xGJx+r1ntKLFX7/fs8KLZEY5oObqr/E40CahT7/MaA0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
                          rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ae:38:e9:cb:24:27:c9:20:c9:ca:90:0a:5a:0e:5b:3f:5c:e5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
        Validity
            Not Before: May 12 15:55:31 2026 GMT
            Not After : May 13 17:38:31 2026 GMT
        Subject: CN=0F4166D956959B02FB1CC8DC36351EBC4E0166FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:33:3e:c4:be:11:7a:0b:b0:d4:40:12:71:
                    8c:d6:40:00:11:26:60:b4:a0:74:e9:d7:dd:db:18:
                    fb:23:16:f1:1f:74:e2:d3:49:4c:2c:fe:f1:04:a7:
                    9a:1e:b8:97:62:df:62:e7:6d:d7:88:0c:3b:8a:a1:
                    09:c6:f9:c4:df:68:82:9b:0a:4e:68:ef:e7:c8:b3:
                    06:20:bb:3f:a7:2f:36:4c:f3:3b:d2:50:a3:72:ee:
                    23:52:bb:73:42:a0:f8:2d:80:57:56:a0:61:6f:38:
                    a2:ba:8f:3c:29:bb:8c:b6:00:c6:de:4b:f3:dd:bf:
                    da:79:78:14:23:11:b2:e3:40:cc:8d:6c:91:95:da:
                    a8:c1:87:67:f6:9f:3a:d3:be:d9:ab:44:55:40:fb:
                    ea:a7:5f:1c:e6:e9:96:2f:51:86:c3:e9:51:86:e6:
                    ef:4c:d2:43:93:5e:df:c7:11:e7:f5:9f:e9:83:3a:
                    14:90:dd:22:60:e7:e0:a3:db:a1:da:97:9e:8d:c4:
                    1b:16:3b:97:67:3f:b4:e7:9b:66:d1:c7:78:a6:a9:
                    75:55:78:26:b3:3b:e1:5e:ac:47:0b:a6:fc:39:26:
                    f7:4b:33:41:a0:f2:cb:bb:9c:4f:e5:6c:79:a0:e1:
                    c6:39:5b:01:80:9e:ab:09:0d:46:02:e2:63:7e:28:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:66:D9:56:95:9B:02:FB:1C:C8:DC:36:35:1E:BC:4E:01:66:FD
            X509v3 Authority Key Identifier:
                keyid:A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:dd:e0:08:ac:e5:aa:64:fc:cd:a9:dd:a2:53:19:81:2b:
         1a:ef:fe:68:aa:c4:c7:22:66:36:74:07:58:e4:5d:ae:60:95:
         eb:de:2e:07:1c:6b:0b:29:15:c1:42:35:bd:94:94:96:10:c3:
         45:56:c7:23:7f:a0:bb:b4:e9:2c:d5:b4:c5:b1:91:3f:b4:7b:
         fd:85:f3:da:44:b5:03:ca:aa:e2:dd:6d:23:97:57:57:25:f6:
         4d:d6:35:ab:c9:ab:aa:d6:e4:2c:cf:30:a5:27:b7:d3:fe:ef:
         90:74:82:d2:d8:2e:22:75:d0:00:22:d8:f1:26:58:0e:49:84:
         ea:6e:b0:ad:14:e6:d3:f8:e2:17:45:f6:b9:90:d2:1b:3a:f5:
         16:71:79:75:8e:64:4f:f7:aa:ce:b2:32:a5:dd:fc:f3:18:a0:
         dc:f2:65:3b:fc:98:69:23:3e:ec:08:29:ae:26:29:5d:ac:fa:
         21:b1:15:3c:43:b8:aa:37:db:7a:ee:64:65:be:72:69:c6:93:
         0e:9c:86:61:44:67:cf:a9:34:2e:05:53:ee:c6:91:e6:5b:4d:
         ac:6c:ba:92:26:0d:f0:6d:74:f4:d5:eb:02:a6:5b:37:d2:bd:
         3c:06:7b:3a:fc:9c:9f:25:90:75:e8:23:77:5b:e8:35:2c:fc:
         0f:bb:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:06 2026 by rpki-client