Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
File:                     4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json)
Hash identifier:          QcyQ7zvGFBVfgFp1xZpUbXCrna+5s9ftJz56ljih750=
Subject key identifier:   43:77:74:B7:2E:CB:7A:2A:DD:CF:44:28:F1:AD:C8:D9:FD:6D:FA:25
Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
Certificate issuer:       /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Certificate serial:       4317B12FEBA63591F31200783931D847169CFBF2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 17:10:22 +0000
Manifest this update:     Sat 13 Jun 2026 17:05:22 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:22 +0000
Files and hashes:         1: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=)
                          2: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=)
                          3: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: znBDvJCcZJ7lkSyd0WJg3IaQPTI9lrb+ZjpLL/OdyZY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
                          rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:17:b1:2f:eb:a6:35:91:f3:12:00:78:39:31:d8:47:16:9c:fb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
        Validity
            Not Before: Jun 13 17:05:22 2026 GMT
            Not After : Jun 14 18:00:22 2026 GMT
        Subject: CN=437774B72ECB7A2ADDCF4428F1ADC8D9FD6DFA25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:75:94:53:7d:1c:05:d6:91:95:5a:65:5b:
                    4e:83:a6:59:64:8d:31:51:7f:6d:48:35:c1:ae:f2:
                    c0:6c:e5:ee:7b:6d:a3:2a:88:d1:bf:24:ad:8e:1b:
                    de:0c:71:ac:8f:16:1f:02:f3:03:eb:ec:78:31:bd:
                    63:33:d2:31:24:a1:db:47:79:04:ab:39:4c:94:54:
                    42:77:fb:aa:da:00:26:41:43:08:54:fb:15:aa:0c:
                    51:2d:7d:cb:71:9c:e9:bf:13:7e:de:ab:a8:26:7a:
                    5b:34:b7:de:aa:02:2c:16:fd:f3:34:77:34:54:bc:
                    a7:11:d2:6a:07:c5:20:7c:25:27:7d:74:cd:1c:1d:
                    c1:44:0b:ed:2c:e8:bc:84:4e:3c:23:cf:58:74:d1:
                    2a:01:27:7b:73:c8:5a:47:3e:27:0c:f4:c7:ce:1c:
                    74:47:f8:bb:e1:29:43:96:75:a2:2c:71:60:ce:0d:
                    db:ff:96:07:51:23:7e:3c:a7:ae:4a:37:ca:7a:6c:
                    ae:df:21:51:40:45:2e:ba:3a:58:e4:e9:c5:06:bc:
                    10:b8:25:22:0c:7a:e5:df:ad:2c:ae:38:df:b2:d7:
                    44:d4:a1:09:50:bc:64:79:94:e2:a0:76:03:95:6f:
                    91:d9:73:26:b9:4d:db:1a:e9:65:04:54:33:71:d6:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:77:74:B7:2E:CB:7A:2A:DD:CF:44:28:F1:AD:C8:D9:FD:6D:FA:25
            X509v3 Authority Key Identifier:
                keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:83:69:ca:37:e0:6b:8e:ea:f8:9d:1d:95:10:b5:a0:b3:
         76:a3:0e:08:63:59:b6:84:72:95:22:ab:31:09:1e:bb:2e:61:
         66:80:d3:8c:be:e4:05:fe:4d:b9:86:53:4c:17:b4:02:c0:ab:
         a4:72:21:7a:52:72:b0:91:42:64:a1:93:37:3a:3b:67:91:ab:
         75:6a:67:ce:d7:2d:15:93:23:d0:80:a4:cb:f3:8f:70:62:f8:
         1c:fd:4d:ef:e3:f6:0b:36:b3:5c:c2:60:fd:0c:7a:79:6e:cb:
         be:9e:d0:98:a4:a4:95:7b:09:ca:4e:94:48:ee:2b:2b:eb:78:
         89:55:b4:29:f3:ef:df:3d:7a:36:23:6a:69:84:64:0c:f9:7d:
         6b:33:31:63:82:ad:2e:64:56:f8:1d:60:3f:12:11:8e:5e:72:
         db:58:19:22:6d:5f:91:91:08:cc:a2:be:d5:bb:bb:75:7b:cd:
         35:6e:0d:20:fa:2e:70:a0:dd:58:63:9b:4c:9f:e4:f2:c9:8f:
         75:70:61:6e:af:4b:0a:d5:f6:b9:98:ca:f0:cd:8e:63:5c:8f:
         60:c6:86:f9:20:55:1c:be:59:83:a1:f1:3f:35:49:17:61:5f:
         ab:68:9e:b7:4e:8b:a6:b5:1f:b0:99:11:58:05:dc:6a:27:79:
         22:5e:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:50 2026 by rpki-client