Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft
File:                     DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft (raw, json)
Hash identifier:          2lU7FApx7gM8y9Smcu1+GS8L4HCw0wArwlJHUxinjn8=
Subject key identifier:   4F:6E:98:FF:5D:DD:94:75:05:59:A5:53:E8:55:32:63:04:AF:E3:B6
Authority key identifier: DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60
Certificate issuer:       /CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60
Certificate serial:       59DDFC2C3AFE2A75A4052FFCDD08E511D0CEDCEF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 03:22:34 +0000
Manifest this update:     Tue 12 May 2026 03:17:34 +0000
Manifest next update:     Wed 13 May 2026 07:16:34 +0000
Files and hashes:         1: DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl (hash: ptsSVq7fpXbG7cjjLHmmyZiahCPplBk1/F7SoJMd0uo=)
                          2: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: Sq/TPHjnHcU8BdlRhTUGNyaSgFRduqyHP60YOl+s/e4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl
                          rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dd:fc:2c:3a:fe:2a:75:a4:05:2f:fc:dd:08:e5:11:d0:ce:dc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60
        Validity
            Not Before: May 12 03:17:34 2026 GMT
            Not After : May 13 07:16:34 2026 GMT
        Subject: CN=4F6E98FF5DDD94750559A553E855326304AFE3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:3b:2b:7a:7c:b1:3f:34:36:cc:d8:cf:5c:
                    31:9f:77:7e:38:73:be:87:fd:7b:0a:66:5c:67:70:
                    b8:41:36:74:ec:52:fa:ea:0e:93:a3:b0:7d:2a:af:
                    9c:78:94:99:0c:0a:20:93:a0:75:18:f8:8d:36:43:
                    41:7b:67:f7:ce:df:a7:7b:5c:1d:cc:9b:a7:a9:20:
                    5f:89:15:ab:9c:cc:31:b4:b7:14:1d:f4:dd:c8:d2:
                    8f:6c:a9:bf:af:26:97:7b:43:f1:70:2f:5e:51:82:
                    7a:ff:eb:2e:59:68:45:c3:7c:cc:f0:66:44:99:2d:
                    72:d5:a8:ae:91:2f:12:b2:76:a1:af:86:2e:fc:4c:
                    f0:01:e9:ae:c6:7b:f8:7b:32:a4:2e:7e:3e:7f:f7:
                    d8:b8:f6:83:19:cd:28:00:74:f6:c9:ba:93:ed:b0:
                    77:b9:df:e8:2b:47:7e:1a:78:4d:da:b1:4e:c9:ee:
                    6a:45:98:24:7a:82:b9:f9:c0:78:57:d6:73:8a:2a:
                    42:33:cb:d9:8c:eb:a0:af:4e:c2:95:52:5c:f2:b8:
                    10:c4:dd:fd:88:9b:0f:90:e7:82:07:f2:6c:15:fd:
                    95:2a:6c:ab:6d:bd:9a:7e:d4:69:80:03:98:aa:34:
                    93:29:9c:5f:ef:81:12:01:eb:e6:65:ce:48:82:a4:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6E:98:FF:5D:DD:94:75:05:59:A5:53:E8:55:32:63:04:AF:E3:B6
            X509v3 Authority Key Identifier:
                keyid:DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:c1:11:8c:23:d8:7c:0f:a7:18:d0:14:07:69:de:44:41:16:
         8e:34:45:b7:db:14:8d:8b:96:dc:53:61:78:de:36:55:60:8e:
         b6:20:f5:21:a6:25:ad:0d:34:2e:84:cc:d6:b1:36:70:66:6f:
         d3:42:3c:7c:31:c6:80:fc:ac:9d:8e:1f:a2:21:32:50:9c:21:
         4a:89:e0:77:0a:22:31:b8:c8:4d:e3:a5:e0:5f:58:d6:1a:93:
         cc:f2:a8:b6:7f:e0:9d:3a:25:89:b3:56:1c:7e:b8:9a:05:41:
         28:e7:d7:09:d1:ef:e4:d8:05:3d:80:04:25:df:8d:3e:63:8a:
         5d:c9:3f:d3:58:11:35:b9:dd:78:f7:30:06:93:41:0b:02:3a:
         57:b0:55:6d:73:7f:cd:29:b6:72:ab:80:77:18:56:9c:c6:b1:
         de:4b:59:4a:3e:70:18:71:98:28:10:e9:57:bb:4e:17:fe:c4:
         52:d5:a8:d6:f4:e6:ec:ca:19:af:58:54:63:34:17:2d:c3:38:
         86:82:f4:1d:69:ee:71:60:36:3a:a0:41:68:ea:1b:b6:79:d8:
         54:78:dc:10:d3:bb:e3:ac:61:3d:9d:b3:d7:67:0d:5d:6e:16:
         dd:1e:e0:d4:ab:53:6b:39:26:9b:e2:41:05:fa:5a:f0:e1:d7:
         2c:1f:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:45 2026 by rpki-client