Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
File:                     4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json)
Hash identifier:          K/TOhr7WV2Ka/hw6PkU7Ngr6Rf8XFSvzR4RCpHUtUAE=
Subject key identifier:   9B:FF:4A:A3:A7:C6:35:F4:A1:89:17:A0:5C:6D:62:D7:B0:45:34:27
Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
Certificate issuer:       /CN=4BCE188DE42B539EBB860A376D13FE292B001147
Certificate serial:       3B4168D3A9D360E4B15604A0EEDB7E2425970EF9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 06:57:24 +0000
Manifest this update:     Sat 13 Jun 2026 06:52:24 +0000
Manifest next update:     Sun 14 Jun 2026 09:48:24 +0000
Files and hashes:         1: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=)
                          2: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=)
                          3: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: i5LUlxbwTwwhZGUS0YLEMjauQWLgtBjpial/iZiscQM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
                          rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 09:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:41:68:d3:a9:d3:60:e4:b1:56:04:a0:ee:db:7e:24:25:97:0e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147
        Validity
            Not Before: Jun 13 06:52:24 2026 GMT
            Not After : Jun 14 09:48:24 2026 GMT
        Subject: CN=9BFF4AA3A7C635F4A18917A05C6D62D7B0453427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d6:64:c9:ba:56:9b:2d:be:7d:06:70:b0:87:
                    c9:66:41:2c:92:c4:9b:3e:04:ea:4d:2b:ba:70:fb:
                    cc:f1:74:6f:b2:24:10:09:e0:62:f4:ac:4d:61:bd:
                    e9:2a:1d:44:51:b4:31:d2:0d:f8:c4:a3:ca:37:ae:
                    8f:cd:f1:af:0a:7a:fc:89:ee:c7:dd:be:f5:2c:15:
                    b7:c7:14:b3:79:a2:91:33:53:ae:61:32:7a:a8:b8:
                    26:b5:0e:3c:18:01:a3:81:b9:18:7b:f7:2a:6c:6e:
                    c4:25:37:0b:a3:4e:dc:17:6a:14:68:d9:12:2d:ed:
                    17:6b:05:e8:da:23:14:42:30:92:b2:82:a6:47:65:
                    e6:cf:c4:11:80:95:c3:24:69:78:6e:57:b0:cd:81:
                    6b:3d:cc:a2:aa:3e:bd:3f:86:77:be:58:82:d5:62:
                    45:69:56:70:95:c3:96:db:72:3a:6f:19:77:5d:55:
                    9e:42:22:b8:b2:34:ad:43:f9:6f:ed:bc:4a:c5:c9:
                    26:97:e7:3d:2e:98:8c:ec:9d:1c:fe:8f:37:02:e7:
                    e1:4f:9b:0e:aa:1c:44:93:b5:f7:83:3e:ce:2a:1c:
                    cd:36:25:69:3e:1e:c4:8e:8c:a7:ec:5d:26:69:79:
                    89:31:97:01:0d:c7:22:4c:22:ee:03:78:de:e6:0c:
                    76:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FF:4A:A3:A7:C6:35:F4:A1:89:17:A0:5C:6D:62:D7:B0:45:34:27
            X509v3 Authority Key Identifier:
                keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:73:63:b8:76:1a:86:67:3a:cf:2e:54:ed:69:7d:b4:17:
         28:3a:7c:76:ec:c6:a7:e1:78:a3:75:65:ca:04:01:de:fa:57:
         f7:7e:4a:cf:02:aa:8f:99:44:c7:7c:c4:be:8c:0b:79:d0:fb:
         b1:bd:f3:91:13:f8:2a:4c:56:6b:b1:22:b4:01:94:c5:0a:e0:
         78:fb:de:d4:2f:e9:d1:92:f5:55:9a:bb:8d:89:8e:dd:80:a4:
         2b:6c:52:8a:4f:93:fe:d7:88:ba:2a:7b:93:19:1e:e3:34:fc:
         cd:bb:f9:fb:82:d9:e8:94:42:8f:b4:94:e2:61:10:0c:8a:a6:
         be:94:63:bf:b3:6e:63:d5:e7:a6:be:46:dc:15:e1:4b:1f:f8:
         bf:da:e1:63:7a:ce:df:ef:c3:55:64:cc:d1:6d:85:f3:b4:28:
         29:89:d9:86:12:98:b8:a7:b8:68:96:18:ca:73:10:99:04:b4:
         55:63:62:69:e7:0c:e8:89:8e:65:1d:46:15:2c:b4:69:4e:92:
         23:3b:c6:cc:ba:17:1a:4f:05:7e:c5:9c:85:6e:0f:f7:8f:c2:
         1c:fb:99:12:b6:97:16:84:fe:8a:60:e4:17:41:b5:81:39:f6:
         c2:6a:27:24:6d:89:0a:d3:11:68:b5:77:d5:eb:94:dd:b2:1f:
         24:c7:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:17:36 2026 by rpki-client