Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
File:                     D769452C15749C457029AB81E06B7D36C9F48804.mft (raw, json)
Hash identifier:          sw5wffjSh/Y2D/zbxXlMqwiJ6x1dbwz3eEMq5YYWgjc=
Subject key identifier:   01:65:D0:AB:8D:BD:78:58:ED:76:69:82:18:B0:B4:D1:27:06:08:C2
Authority key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
Certificate issuer:       /CN=D769452C15749C457029AB81E06B7D36C9F48804
Certificate serial:       6F8FFB4D4641DA10E4A2EC7B2CE173F877617E36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 03:53:20 +0000
Manifest this update:     Tue 12 May 2026 03:48:20 +0000
Manifest next update:     Wed 13 May 2026 05:41:20 +0000
Files and hashes:         1: D769452C15749C457029AB81E06B7D36C9F48804.crl (hash: jJDFyYyGx1KMKkZvHmi1T/CqrWANTWipZMCPl8/8+kY=)
                          2: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: FxemyMpIsKKyeyZF+nt8pq/Wh2yMuBg7NUlyoxRZXT8=)
                          3: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: Wgp2Ly277xiC/SJ4ahqqMWo1yKBGTp7hlr1qa44tvrs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
                          rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 05:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8f:fb:4d:46:41:da:10:e4:a2:ec:7b:2c:e1:73:f8:77:61:7e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D769452C15749C457029AB81E06B7D36C9F48804
        Validity
            Not Before: May 12 03:48:20 2026 GMT
            Not After : May 13 05:41:20 2026 GMT
        Subject: CN=0165D0AB8DBD7858ED76698218B0B4D1270608C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c5:53:1f:da:6e:8e:c1:2c:a4:d2:d9:a2:b6:
                    27:45:bb:9c:96:fb:7b:f6:b7:eb:05:e9:e1:8b:30:
                    f0:c4:06:ac:99:92:2e:29:df:b2:94:ec:b1:cb:64:
                    0e:fc:3c:0e:33:13:f8:be:75:85:00:e1:ac:aa:64:
                    cd:ef:f3:81:47:32:ea:cb:01:6d:e5:56:1a:87:70:
                    b8:48:60:ad:d8:17:d3:70:e5:15:a9:97:6d:77:f3:
                    85:c6:ed:e0:1b:ca:2c:f8:eb:e2:23:2b:c2:9b:5c:
                    3b:b3:a8:eb:a2:ed:08:8d:b7:18:54:72:fb:7f:9e:
                    4e:c9:fd:bf:3a:44:88:f8:40:59:15:3b:7f:c8:f8:
                    49:12:ae:1e:d4:a9:87:9f:a6:b8:f0:a3:9f:ad:3b:
                    9c:7b:eb:e0:39:b0:79:5a:f2:a1:64:f6:7d:89:e8:
                    c4:34:af:c6:90:b7:ac:e9:17:c1:22:db:9d:9d:96:
                    f7:a3:c4:03:e4:06:e6:a5:2b:b1:93:9c:9e:d3:2c:
                    75:58:c3:c9:af:78:8d:68:00:5a:55:13:fb:07:a7:
                    91:7c:0d:05:3d:db:b9:56:2a:55:ae:ba:16:15:92:
                    fc:06:d0:4a:23:df:f0:1c:b0:d7:fd:e7:5f:f7:ae:
                    0d:c1:15:2f:75:a2:a0:7a:b3:47:03:04:a6:3d:bf:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:65:D0:AB:8D:BD:78:58:ED:76:69:82:18:B0:B4:D1:27:06:08:C2
            X509v3 Authority Key Identifier:
                keyid:D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:82:d4:bd:3b:d0:7e:af:f6:cb:21:27:f7:e4:29:8e:bf:3a:
         83:b4:5e:22:3a:a2:91:52:47:fc:6e:9d:a2:e8:37:2c:31:32:
         c4:b4:14:05:62:1b:47:e0:03:7a:3f:92:cf:3b:41:c8:2d:d0:
         d1:e7:d1:47:db:7f:16:fa:ef:b0:2e:4d:1d:4d:d2:b3:7b:b2:
         2e:14:e1:f5:f2:c4:90:a1:04:f9:91:7d:c0:53:3e:61:33:35:
         e6:22:08:0d:e5:53:8d:f7:4a:17:8a:37:9d:7b:b9:78:4f:04:
         9f:e9:98:ba:e9:f8:38:f9:59:f6:d4:b4:75:dc:11:31:e1:9c:
         b4:3a:f2:c7:7c:36:2a:44:bf:a2:af:e5:e9:3c:43:8e:4b:98:
         75:3a:81:0a:a4:06:40:6e:6f:d6:25:e2:d6:d0:14:3c:e4:b5:
         ac:6d:6b:24:14:6b:f2:42:64:32:4b:4f:44:c5:2e:56:02:55:
         bb:0e:72:c4:85:f3:58:62:2e:c0:3a:8f:05:63:68:ef:b9:ac:
         84:35:6c:fe:87:65:40:30:c7:4e:75:ad:73:3b:c3:e7:2a:f5:
         c3:4f:23:52:6c:e6:2b:74:f6:fe:10:80:85:76:b7:03:94:7f:
         3c:d1:3d:0d:78:25:e8:f6:d4:ce:91:bf:fa:d3:ec:30:07:6b:
         bc:b1:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:26 2026 by rpki-client