Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft
File:                     602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json)
Hash identifier:          Yr0stGTY7VhYtNs7FHvQV6s6DAY8TZCme3iG4+WvLns=
Subject key identifier:   EC:C1:3D:23:F1:C3:BE:89:9A:04:39:B0:17:4D:81:E2:B8:C1:01:47
Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6
Certificate issuer:       /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6
Certificate serial:       7F7C209DE0BCF2E1245143DF72A33C4BE6356005
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 15:45:18 +0000
Manifest this update:     Tue 12 May 2026 15:40:18 +0000
Manifest next update:     Wed 13 May 2026 18:01:18 +0000
Files and hashes:         1: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=)
                          2: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: LK3xiSxjkQQlyIU3fdD8yNBdslNEOglkFF6RfNaQem0=)
                          3: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl
                          rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7c:20:9d:e0:bc:f2:e1:24:51:43:df:72:a3:3c:4b:e6:35:60:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6
        Validity
            Not Before: May 12 15:40:18 2026 GMT
            Not After : May 13 18:01:18 2026 GMT
        Subject: CN=ECC13D23F1C3BE899A0439B0174D81E2B8C10147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:53:18:6e:57:78:55:38:6f:72:05:fe:0a:
                    ba:9c:be:e9:48:17:b1:17:ed:ee:7f:3c:66:c8:f8:
                    4e:4b:8b:f9:05:44:a3:22:bb:89:df:34:b7:59:08:
                    a3:39:fd:1e:8f:9b:63:ba:ac:21:66:e4:91:f8:a0:
                    f3:f1:d1:78:7f:04:44:45:ba:27:9a:1e:cd:20:06:
                    a3:0e:06:d0:e1:d8:a1:69:1d:91:20:df:2a:56:b5:
                    1f:49:59:1c:27:36:08:6e:a0:ae:c2:71:15:03:9d:
                    a6:02:96:9d:04:6a:1d:37:aa:df:34:33:40:a3:91:
                    59:a0:45:82:e5:c0:56:e7:0e:9d:9f:e8:e9:cf:81:
                    56:c4:a6:f7:c1:c0:6f:a2:74:d7:a3:be:a6:8d:1e:
                    ab:2a:18:74:07:0c:4c:a4:b9:41:c4:17:2d:a1:e6:
                    73:1c:7a:41:02:7a:87:4c:d1:23:43:92:4d:b7:19:
                    2e:cc:94:07:4f:02:d1:89:e0:58:be:a1:14:a1:4a:
                    40:d3:99:cd:ff:46:a6:33:a6:a3:33:e5:b7:d4:3b:
                    f5:a0:a0:6f:97:73:90:a7:99:22:45:f9:cd:98:b9:
                    05:69:15:43:a8:bd:37:9f:a0:39:c7:bd:8d:e7:cd:
                    50:ab:bc:22:87:55:01:e7:3f:2f:5b:d3:50:03:0d:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C1:3D:23:F1:C3:BE:89:9A:04:39:B0:17:4D:81:E2:B8:C1:01:47
            X509v3 Authority Key Identifier:
                keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f3:44:0c:89:88:eb:1d:a9:a8:ad:a2:e5:75:f0:58:7c:d0:
         56:7a:16:cd:84:cc:60:98:ff:c8:23:2c:d2:a6:fa:05:ff:44:
         2f:11:61:7e:21:20:72:25:28:ce:15:94:f2:e5:37:9e:cd:30:
         2d:b4:76:7b:6a:30:5f:94:d4:e3:36:25:9f:f0:40:cb:5c:9d:
         79:34:00:ed:23:95:e3:d4:a8:e4:2a:c9:7b:4b:0c:1b:2b:7b:
         53:b7:88:1b:b1:e0:ae:61:3d:e7:85:b1:b6:b7:0a:14:d7:a5:
         30:50:5f:c4:c9:b9:e8:30:12:f3:ab:6c:40:32:72:e4:9c:d5:
         ca:b2:1a:32:97:86:a1:6c:80:8b:b9:5b:cb:b1:7e:8f:f9:52:
         52:4b:bb:b2:24:38:88:24:8b:60:a3:41:c9:76:bc:d3:ae:24:
         5f:70:1f:9d:44:59:23:27:5e:3e:f2:7a:1c:1a:21:b2:a2:a6:
         2f:3a:ea:ee:4f:08:a9:1e:0e:90:13:1e:63:d3:54:34:9e:65:
         3d:c9:27:74:7e:7b:0d:a8:70:a3:0b:24:a1:d8:b7:d9:6e:1c:
         c5:8c:0e:aa:32:67:5e:18:b8:7c:21:c7:14:e0:c8:d2:df:5b:
         da:d1:22:7a:50:97:40:5b:eb:94:fd:44:3a:24:4b:ca:d7:d9:
         92:2b:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:30 2026 by rpki-client