Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
File:                     8369683C9C4A77F4B5AB05185F01C3C810502D34.mft (raw, json)
Hash identifier:          CyQ/KtutQNunilgUaarpR13iROk/vBAXPuOnyksMZWQ=
Subject key identifier:   ED:B4:38:AC:57:DF:80:B0:55:AD:1A:43:F9:BE:0D:92:90:9F:EB:D2
Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34
Certificate issuer:       /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
Certificate serial:       18F92237BA833BFF1B9FB6034003D33616237E52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:52:55 +0000
Manifest this update:     Tue 12 May 2026 17:47:55 +0000
Manifest next update:     Wed 13 May 2026 21:31:55 +0000
Files and hashes:         1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=)
                          2: 8369683C9C4A77F4B5AB05185F01C3C810502D34.crl (hash: 13i+3PqKj8JHwMF3IQP0St7VIXQBxy0dwcPr1smy1YI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl
                          rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f9:22:37:ba:83:3b:ff:1b:9f:b6:03:40:03:d3:36:16:23:7e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34
        Validity
            Not Before: May 12 17:47:55 2026 GMT
            Not After : May 13 21:31:55 2026 GMT
        Subject: CN=EDB438AC57DF80B055AD1A43F9BE0D92909FEBD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:db:05:ae:07:78:0c:b2:1b:52:1e:a8:c0:
                    5d:50:32:d7:11:b5:60:27:56:1b:f1:c6:d8:62:cc:
                    7f:17:3c:65:73:f8:c2:49:80:94:ab:c0:1b:d2:d1:
                    96:7d:67:b9:75:2b:db:38:7d:18:5f:94:82:35:98:
                    5c:14:58:bc:49:53:91:5f:4f:7b:20:f1:7d:58:31:
                    52:3b:86:ba:09:eb:f3:13:34:86:7d:5f:89:ee:87:
                    a9:41:60:78:d3:18:15:e4:6d:c7:d6:8a:71:12:f2:
                    9d:e5:7e:f7:5c:3a:67:fd:9c:66:eb:fe:22:8e:a6:
                    20:8c:47:25:5b:f4:08:13:ce:46:4f:c4:44:38:ea:
                    56:8c:e5:a9:be:51:cf:cf:e8:30:1d:42:5b:a1:37:
                    85:9b:fa:25:5b:58:17:27:2a:c6:af:76:66:bb:a8:
                    96:29:55:66:b2:d1:be:25:b3:15:e2:ba:24:ae:28:
                    f7:36:f6:22:00:45:d7:cf:2d:32:4a:49:2b:6e:d8:
                    92:71:0a:6b:85:8e:0e:d2:15:29:59:79:e4:4f:d4:
                    b6:44:24:d0:22:7c:b4:3c:01:26:ee:a9:f1:19:3c:
                    c8:41:97:24:35:cd:f2:b4:c6:3e:88:70:80:85:8d:
                    9c:6c:d7:0b:bf:bf:f6:de:1a:7f:fa:d3:2e:28:19:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B4:38:AC:57:DF:80:B0:55:AD:1A:43:F9:BE:0D:92:90:9F:EB:D2
            X509v3 Authority Key Identifier:
                keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:27:9d:40:1f:30:3f:41:0b:8d:af:f0:a9:a8:d1:58:4b:d1:
         38:2c:37:d6:a4:eb:96:33:12:43:cc:60:21:f2:fb:8f:13:d5:
         d8:5a:a0:40:04:5f:7e:ea:4e:bb:56:1a:c8:8a:b1:76:ea:55:
         f1:41:94:73:a9:e9:df:fb:76:34:98:aa:b0:aa:26:c8:04:e6:
         35:0c:2c:7c:1b:41:5a:98:1e:00:b2:cb:6f:60:ca:f9:2f:4b:
         9e:ad:5d:ae:78:d3:c4:e0:d9:c8:1b:00:9d:42:b9:98:94:16:
         1b:a2:03:4c:69:11:92:d0:f8:a9:da:24:7e:50:8d:11:4b:43:
         b8:3f:e6:33:65:27:d9:23:92:cb:48:b6:45:5a:67:ca:5a:42:
         09:59:a3:91:a1:cf:63:ee:ff:ef:4c:bc:d0:d0:67:97:e6:c2:
         01:6f:96:f3:fb:60:9a:fc:60:15:a3:6b:fb:2d:65:5f:e7:e3:
         ec:e4:c8:07:c9:c2:15:84:e8:b9:06:79:e5:81:a4:45:60:25:
         0a:d8:5c:c6:a8:cd:88:18:5f:16:e1:dd:8f:87:df:af:65:e2:
         11:51:cd:0e:f9:b3:59:1d:04:b8:59:ac:7e:1c:ca:e9:0b:d0:
         c3:af:f9:59:20:f5:a9:d0:25:34:fd:0f:93:47:c7:48:a9:30:
         33:76:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:51 2026 by rpki-client