Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft
File:                     4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft (raw, json)
Hash identifier:          Pbp1Wb/ES/gHMQCoXZMWB6UzUdPvLzVbDqm3wzqcfBQ=
Subject key identifier:   11:0F:F7:2C:9F:54:03:6D:5E:B8:05:6B:CC:56:8E:F5:15:4E:CC:6D
Authority key identifier: 4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A
Certificate issuer:       /CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A
Certificate serial:       37B90724A9D7E7F9C42D05C5E1947CCDFD14C470
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 15:38:12 +0000
Manifest this update:     Tue 16 Jun 2026 15:33:12 +0000
Manifest next update:     Wed 17 Jun 2026 18:35:12 +0000
Files and hashes:         1: 4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl (hash: QH4vO1fnVMHXXNhQ12FkwEpW2JMtUlJnJJv2nkapvi0=)
                          2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: NbzRk+anslHWDpTfVCq58hG430siKypJAEmOtHHoBDU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl
                          rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b9:07:24:a9:d7:e7:f9:c4:2d:05:c5:e1:94:7c:cd:fd:14:c4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A
        Validity
            Not Before: Jun 16 15:33:12 2026 GMT
            Not After : Jun 17 18:35:12 2026 GMT
        Subject: CN=110FF72C9F54036D5EB8056BCC568EF5154ECC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:cc:c4:e2:05:24:5c:61:e2:77:c4:46:f5:
                    d6:27:bb:46:c7:cb:12:37:fd:db:2d:48:74:06:15:
                    7c:7d:f1:d3:a6:69:5c:5c:75:bb:9b:1f:47:c6:2c:
                    b6:34:4b:d6:fa:df:0d:e5:07:d4:ca:fe:7c:3a:e3:
                    91:dd:4e:54:93:39:7a:9c:61:24:24:f6:40:bb:b9:
                    2c:98:2a:8c:81:55:68:62:bc:81:fb:ba:07:9d:3b:
                    db:d1:30:97:57:44:c8:d1:f4:60:70:a1:1f:ed:a8:
                    c8:50:e5:3b:e7:da:71:ec:79:f3:91:0a:c3:04:ea:
                    fa:18:56:06:f2:80:89:f0:70:79:52:ae:d2:37:0f:
                    ab:7a:55:20:13:15:51:6d:da:08:86:46:4a:36:db:
                    e1:2e:54:8b:7f:e3:10:dd:83:77:57:b0:54:5c:51:
                    33:dc:a4:eb:b5:64:bb:f4:09:47:b6:8f:31:7f:13:
                    0a:30:e8:61:eb:5d:ac:81:e3:19:68:b6:84:d0:24:
                    82:a5:3a:6d:0c:6f:15:b0:3c:34:6f:92:11:19:65:
                    0b:9c:8c:d3:eb:a4:98:70:9b:42:58:f8:03:34:50:
                    1b:be:a3:df:e2:be:53:c0:c8:6e:fa:7c:53:96:17:
                    f5:79:55:ef:c9:86:72:9c:b3:b4:7e:da:29:bf:2e:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:F7:2C:9F:54:03:6D:5E:B8:05:6B:CC:56:8E:F5:15:4E:CC:6D
            X509v3 Authority Key Identifier:
                keyid:4D:CE:B5:60:BC:42:8D:BE:C4:EC:2E:F2:EF:74:2C:9B:DA:DC:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/4DCEB560BC428DBEC4EC2EF2EF742C9BDADCE30A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:06:1d:b7:ee:e6:6b:b7:c3:5e:a0:db:42:67:d6:a4:54:45:
         50:29:4d:ea:f7:e9:89:d0:90:f9:f3:3c:e9:a8:39:4b:90:54:
         4e:4b:12:3d:7e:11:55:e7:e0:4a:f8:d3:ef:89:1e:f1:5f:f2:
         9d:15:02:b5:8e:ab:8b:a5:ec:a0:dd:ea:77:41:2c:a9:72:0c:
         de:45:cd:7e:d0:18:3b:a1:06:de:5e:4d:d2:eb:1a:74:7e:04:
         f8:f7:49:3b:83:ea:7e:1f:6f:29:f2:7b:13:58:5e:76:75:4f:
         b7:32:28:d3:53:32:e2:35:2f:4e:75:1a:ca:1e:89:10:b8:0f:
         2a:d4:98:aa:65:2a:fa:82:cc:7b:36:0c:c5:ff:46:d3:fd:b5:
         59:0a:6c:76:a9:fa:19:7e:dd:da:ce:40:d8:d0:e7:03:3d:9d:
         f2:95:b8:df:34:4f:2b:02:30:45:5d:1d:ca:23:63:d0:6b:9d:
         fc:fa:f1:89:fe:75:69:23:56:1c:67:d7:84:b5:f5:c1:5a:32:
         d9:99:ec:41:dd:b3:bc:66:0b:ba:83:ff:47:37:ae:31:b8:d0:
         7c:b9:37:95:df:46:e7:c1:7a:37:5b:10:cd:9e:77:69:ee:3e:
         7a:02:1c:a4:94:a2:49:a5:52:f5:16:e7:43:7d:5e:65:ea:b9:
         59:dc:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:49:10 2026 by rpki-client