Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
File:                     4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft (raw, json)
Hash identifier:          I50RmkcpQdV/LgNyImwK94DF1T5LSa0K1Q4NGOfyUO8=
Subject key identifier:   4A:F6:0E:49:01:48:45:7F:19:59:CE:6F:7D:35:36:4F:3F:D0:5A:25
Authority key identifier: 4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54
Certificate issuer:       /CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
Certificate serial:       635AE4D85CF8CEECF6690E0F79D652F2E7113A45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
Manifest number:          3E
Signing time:             Wed 17 Jun 2026 00:08:11 +0000
Manifest this update:     Wed 17 Jun 2026 00:03:11 +0000
Manifest next update:     Thu 18 Jun 2026 00:14:11 +0000
Files and hashes:         1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: dIbMNlmzPRtmx/pqtJnbGmYAZfEP0PtpQbV8sPyHXmY=)
                          2: 4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl (hash: Gxns/TZ1oucEk2Lgb2dGcQwuMEm2K6P1oR/ac7W6I3o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl
                          rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 00:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5a:e4:d8:5c:f8:ce:ec:f6:69:0e:0f:79:d6:52:f2:e7:11:3a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
        Validity
            Not Before: Jun 17 00:03:11 2026 GMT
            Not After : Jun 18 00:14:11 2026 GMT
        Subject: CN=4AF60E490148457F1959CE6F7D35364F3FD05A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1b:9c:ed:a7:dc:a3:a4:be:d2:09:5f:d2:d2:
                    ea:9b:11:8f:4f:32:43:69:12:33:32:7b:b1:48:59:
                    19:b0:0a:f0:68:ab:fd:66:13:8d:4a:28:a0:1c:ee:
                    fb:15:72:2d:c9:68:1a:ae:ec:28:bf:2f:98:e1:17:
                    0a:cf:d1:7e:94:53:6c:d9:4f:d7:c6:b3:c3:a0:e6:
                    7b:a3:86:a7:89:f2:56:7c:f3:72:74:8c:73:7a:83:
                    d9:bc:bb:0a:53:5f:10:81:26:5f:f5:34:69:85:36:
                    fb:de:9f:9f:86:af:36:32:73:db:26:f4:a2:10:db:
                    bb:ea:c8:10:55:a1:d1:f8:f6:4d:9c:fd:d4:b3:1c:
                    9d:d8:61:aa:22:06:32:bf:1a:36:26:86:fa:99:11:
                    de:57:2b:01:22:53:13:2d:0f:7c:e5:c0:24:6d:5f:
                    9f:85:dd:cb:53:77:30:b8:9b:6c:60:3f:77:e3:4d:
                    92:46:bb:0b:9f:06:85:79:0c:0a:f9:60:98:65:92:
                    cd:d8:53:28:5c:ac:a6:99:17:93:69:ee:0f:2e:4e:
                    23:f0:f0:e9:43:5e:b5:0b:c3:f3:87:b8:68:9f:88:
                    d9:4e:4d:83:1f:d8:3f:c5:f6:78:54:3d:e8:c5:8d:
                    16:c6:fa:65:f3:28:cd:6b:7b:0c:52:46:48:64:44:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F6:0E:49:01:48:45:7F:19:59:CE:6F:7D:35:36:4F:3F:D0:5A:25
            X509v3 Authority Key Identifier:
                keyid:4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:ce:f1:a4:5d:a6:0c:6d:29:d6:bd:1d:f7:35:b3:d2:72:
         89:78:ba:08:4b:9c:67:bc:07:4b:67:1c:ea:10:0b:1a:12:87:
         24:af:88:c3:34:7c:11:aa:a9:e6:64:69:22:3e:a9:5c:0f:97:
         63:cf:30:68:f2:a5:03:e4:14:df:67:b8:2a:92:c7:e5:6a:1d:
         21:9a:80:fc:b9:a2:ed:94:d0:a8:73:99:6c:3e:6e:a2:54:18:
         db:25:66:66:28:9b:be:b5:42:b3:25:b9:a4:5c:12:e1:7e:53:
         3a:42:47:26:f4:65:60:16:47:65:3a:5f:86:a1:c2:0a:62:46:
         0e:dd:42:8c:b8:81:7d:5c:b8:8a:dd:2c:c8:af:18:fe:3d:23:
         35:9e:d8:76:6a:ea:9f:38:fc:0f:e8:c1:d9:d7:0f:10:24:1c:
         7c:42:1f:d0:cc:c4:7c:24:4f:41:62:15:1b:77:43:ca:62:95:
         d2:5e:3b:0d:fa:bf:95:af:00:92:a2:d1:5a:8f:b4:4c:9a:9d:
         83:4c:ff:23:4d:60:37:7a:30:db:a4:d3:f5:26:12:50:12:d3:
         bd:9a:66:a2:3c:0c:64:e1:93:e0:98:88:af:fe:6a:e4:fc:28:
         bd:2b:85:9d:3a:d8:93:e9:7d:42:2f:4c:2b:03:e5:1e:12:4e:
         89:6c:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:30 2026 by rpki-client