Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft
File:                     3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft (raw, json)
Hash identifier:          J5opcSr8gZKCmGqGwsz+hy6mrZT70sylVVRwU/i8rdg=
Subject key identifier:   A8:53:7A:64:DE:40:A3:39:EB:51:B8:7E:5F:03:04:8E:4A:DD:35:47
Authority key identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47
Certificate issuer:       /CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47
Certificate serial:       33F1017E8301909B582871F1321C5C3E4711E932
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 21:29:13 +0000
Manifest this update:     Tue 12 May 2026 21:24:13 +0000
Manifest next update:     Thu 14 May 2026 01:17:13 +0000
Files and hashes:         1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: cwuI5/SSK6CyR1JmdzwFEJUddA+iJMuPYmNhyqVybOU=)
                          2: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl (hash: Sz2LN4PYc6mdRlJPR5Rsv9lRrBSwW9Zt1PE1zIkDAwY=)
                          3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: YjIMELRXEclhQMTB2bkatZ5wI5uWZ25f1kc6MK+WlkM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl
                          rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f1:01:7e:83:01:90:9b:58:28:71:f1:32:1c:5c:3e:47:11:e9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47
        Validity
            Not Before: May 12 21:24:13 2026 GMT
            Not After : May 14 01:17:13 2026 GMT
        Subject: CN=A8537A64DE40A339EB51B87E5F03048E4ADD3547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:5a:17:fe:3b:04:e4:26:4a:11:d4:c8:56:
                    f7:ea:61:f5:08:e4:26:a4:70:8d:42:c5:8e:ed:29:
                    5c:0a:8a:e4:37:0d:b8:d7:d8:2e:39:48:ea:ed:ab:
                    f2:7f:cf:37:e7:ed:82:f7:2d:80:ec:e0:05:2c:1a:
                    1e:6d:2e:07:3e:a4:ef:d1:3b:87:db:cf:94:62:09:
                    46:d0:98:11:9c:08:7e:21:c0:dd:e3:5f:2f:63:f3:
                    c0:50:25:35:e9:8f:90:a1:b5:ce:8b:c5:5d:73:5d:
                    28:c5:ec:70:0b:72:53:3b:7a:ad:62:20:81:7e:49:
                    5b:31:c4:a4:d4:e5:31:4e:3c:1b:9c:6f:84:17:df:
                    fc:a8:ca:7e:29:11:65:6f:a9:67:5f:3f:c5:50:8a:
                    7b:d1:5d:b5:77:68:89:2d:3f:8b:c7:38:4e:91:0c:
                    35:76:81:1b:f4:e2:6a:08:d1:47:7f:5c:f4:99:81:
                    f5:76:0b:29:ba:c5:41:80:af:b7:4a:8b:b1:05:71:
                    5e:88:74:7a:5a:5d:99:4d:3a:e9:85:cf:30:bd:c4:
                    f1:90:42:cc:ce:7a:2e:7b:34:ed:5e:f9:81:57:43:
                    88:c6:51:51:db:cb:1c:b9:f9:62:b9:fb:df:bc:fe:
                    42:e5:b8:ca:65:33:b3:19:87:41:8e:85:a1:0a:c1:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:53:7A:64:DE:40:A3:39:EB:51:B8:7E:5F:03:04:8E:4A:DD:35:47
            X509v3 Authority Key Identifier:
                keyid:3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ee:2b:34:5e:e0:12:92:be:47:07:6b:08:89:11:01:ce:bd:
         71:63:73:82:1f:45:5f:9f:aa:2a:94:8f:f5:44:d7:bb:2c:67:
         3f:33:62:cf:28:d4:d5:4d:a0:fa:df:e9:d4:be:f1:a4:12:36:
         35:b7:19:e1:9b:b6:e5:ff:87:a6:9d:5e:46:c7:01:b1:77:6c:
         3b:55:fe:a9:06:a4:83:2a:83:e6:bf:66:d8:0c:63:59:08:25:
         86:61:74:db:7d:06:c2:ce:19:e3:8f:6a:e3:ad:a4:02:e9:ba:
         cd:f2:50:1e:4b:86:b0:16:2f:c8:32:4e:00:a3:f4:e5:83:21:
         96:0b:ec:c9:93:06:a2:94:f4:84:a3:bc:3a:5c:9d:03:ad:be:
         fb:54:32:ce:e0:8f:94:bb:29:aa:f2:20:8c:65:65:65:2d:df:
         be:e7:df:87:71:c4:ae:6f:81:d7:53:41:7a:85:05:d2:a4:49:
         95:68:2b:21:c0:df:90:a3:8f:33:b6:bc:8b:8e:6b:b6:f2:07:
         3b:d1:f0:34:84:cb:68:76:1b:38:ca:8d:f8:c5:a0:d1:c8:fa:
         9a:e7:84:6e:a1:94:78:87:90:8e:f7:cf:bb:63:f7:a1:96:cf:
         7f:96:52:fb:7c:f5:f6:6c:9e:50:1e:ec:1c:b8:e4:cc:03:6c:
         14:41:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:58 2026 by rpki-client