Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft
File:                     A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft (raw, json)
Hash identifier:          KlvEAgcKv+27dYqsvBPfQgGFWWltGoDxOowJq7lhmm4=
Subject key identifier:   18:5D:8A:A6:3C:AD:AF:DF:40:0E:FC:26:9A:89:5D:B2:BE:5F:C9:92
Authority key identifier: A1:DF:67:76:AD:2D:FE:35:EE:13:69:E0:2E:52:4F:DE:56:AE:EB:36
Certificate issuer:       /CN=A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36
Certificate serial:       5DD14CC2AEA6F908B3FC9619B0AE1A3066CCE84B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 20:32:25 +0000
Manifest this update:     Tue 12 May 2026 20:27:25 +0000
Manifest next update:     Wed 13 May 2026 22:41:25 +0000
Files and hashes:         1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: 9jew+9sCaLR4uEzM2fOlDSLlwcDUwMl5EIbO/d6WI20=)
                          2: A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl (hash: WD8pOrw1w+xtVpxkRRTNTK8NS2l9SzWRUqaBhS6o/So=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl
                          rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d1:4c:c2:ae:a6:f9:08:b3:fc:96:19:b0:ae:1a:30:66:cc:e8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36
        Validity
            Not Before: May 12 20:27:25 2026 GMT
            Not After : May 13 22:41:25 2026 GMT
        Subject: CN=185D8AA63CADAFDF400EFC269A895DB2BE5FC992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:61:7a:c7:af:72:ef:38:ab:f9:cd:9e:41:
                    7b:88:ab:f1:92:95:e0:07:79:3c:f8:5a:da:8c:43:
                    62:54:09:34:8b:71:5a:05:70:5c:19:03:5a:38:7e:
                    d3:cc:2f:3e:37:87:90:6e:c3:ef:86:c8:26:f8:5c:
                    b8:6d:77:bc:ba:3b:8d:62:bf:dc:cb:93:ba:10:18:
                    94:69:06:02:e1:5c:ff:44:ca:4d:b4:86:1e:1d:a2:
                    10:0e:dd:00:8e:2a:e7:48:ad:95:2f:63:8a:ad:52:
                    55:9a:a2:82:97:4f:6a:75:7d:ca:3e:8a:40:e9:06:
                    14:a4:10:ee:24:d2:39:3a:55:35:d0:82:4d:d4:28:
                    e8:38:c8:a5:76:dc:29:0e:9a:c7:0f:90:48:db:a0:
                    d9:42:4b:27:56:c6:f6:91:f7:31:4b:b4:f8:35:1f:
                    4f:15:c8:76:cb:00:e1:09:e2:82:7c:ee:71:f6:56:
                    33:ea:01:ee:ae:5b:eb:f9:35:c4:c5:58:8d:c8:2c:
                    7c:9f:ff:bd:14:89:c9:69:51:39:17:26:35:57:b8:
                    fb:d6:b1:71:db:5b:07:3c:fa:7b:2f:b4:8a:46:e7:
                    63:9d:6b:87:b7:5f:7f:bf:43:15:17:4b:c3:5b:9b:
                    01:31:28:f2:eb:f3:e5:5a:11:3d:07:f8:34:2d:73:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5D:8A:A6:3C:AD:AF:DF:40:0E:FC:26:9A:89:5D:B2:BE:5F:C9:92
            X509v3 Authority Key Identifier:
                keyid:A1:DF:67:76:AD:2D:FE:35:EE:13:69:E0:2E:52:4F:DE:56:AE:EB:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/A1DF6776AD2DFE35EE1369E02E524FDE56AEEB36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e6:c7:59:67:40:9a:f9:dc:70:cc:37:c1:d8:94:fb:04:05:
         8e:6a:43:38:5a:12:4c:2f:12:45:8a:2b:2a:ee:5f:d6:20:0b:
         99:28:f1:48:07:33:bc:da:8d:2b:7f:07:5c:6f:d9:b3:64:eb:
         47:07:01:1c:e0:65:3f:8b:25:97:39:09:83:b8:3f:e6:39:f2:
         82:75:cf:dd:16:20:4e:d8:9f:ff:8c:34:0d:47:94:2e:bf:c1:
         fb:2c:25:5f:37:a6:3f:78:6e:90:9d:96:8a:7e:86:e9:46:19:
         f5:bb:fd:a7:cc:e4:75:f1:90:92:22:11:db:21:3d:ce:0f:2c:
         85:c9:57:7e:bc:cd:9c:52:df:07:b6:5b:78:4e:06:01:56:15:
         87:5c:f8:f6:f9:bc:94:43:d7:83:55:47:c1:1b:72:bf:5b:b9:
         7a:a8:9f:bf:55:c5:14:84:7b:2e:9f:18:f9:24:6d:73:13:a7:
         5c:b6:89:2b:2f:c4:69:25:57:41:94:b2:a7:27:97:f7:be:04:
         ae:0a:fe:98:73:35:ef:17:d8:14:b6:ef:42:1b:cb:ba:c6:2b:
         14:0d:8c:70:d4:9f:f7:40:c0:0f:d1:7a:8e:06:cb:55:0a:64:
         78:68:c2:34:c5:4d:77:25:d7:0b:72:ed:8f:38:cf:e8:62:b1:
         93:67:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:57 2026 by rpki-client