Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
File:                     4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft (raw, json)
Hash identifier:          bK9EGCywH76k0/FdaZ8ORjGru13MIhoZSIR1UMlulbM=
Subject key identifier:   D3:1D:C0:71:4A:02:5D:31:44:C1:5F:F7:51:53:25:7C:B1:3A:20:94
Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3
Certificate issuer:       /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
Certificate serial:       7888B751E147EF53B3C0FE3C49055BCA37D02D95
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
Manifest number:          E0
Signing time:             Thu 15 Oct 2026 08:40:34 +0000
Manifest this update:     Thu 15 Oct 2026 08:35:34 +0000
Manifest next update:     Fri 16 Oct 2026 10:49:34 +0000
Files and hashes:         1: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=)
                          2: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl (hash: d08Bzo6sFOPvYx1ezyQVr8Ksf5S8c0dLAMlzQzR1GtQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl
                          rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 10:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:88:b7:51:e1:47:ef:53:b3:c0:fe:3c:49:05:5b:ca:37:d0:2d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
        Validity
            Not Before: Oct 15 08:35:34 2026 GMT
            Not After : Oct 16 10:49:34 2026 GMT
        Subject: CN=D31DC0714A025D3144C15FF75153257CB13A2094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:a8:95:a0:ba:aa:0c:77:0c:cc:69:9d:b5:
                    13:95:f0:d5:58:54:31:8d:9c:e0:58:a0:c0:0f:f1:
                    38:bc:c1:98:42:26:e8:dd:59:91:5a:a2:29:64:4f:
                    38:15:3b:6b:f2:a2:6f:f5:22:a8:15:0b:6b:25:43:
                    fc:27:f1:d8:13:e2:f1:e1:44:b3:9f:1e:39:dd:5c:
                    4d:43:af:b3:f4:f0:18:71:dd:84:0a:3d:53:00:11:
                    88:f6:00:3c:cb:45:98:e3:fd:dc:73:47:24:9d:3c:
                    8e:4e:77:23:14:b7:44:89:e3:29:2f:2c:d3:74:64:
                    3d:93:5e:0e:b9:5b:c4:b7:b6:38:20:90:8d:fd:0c:
                    89:65:93:7d:ad:1e:d0:f2:55:8f:d3:d0:42:ab:07:
                    07:86:8d:b8:ff:96:f3:75:e3:8f:cd:e5:15:a0:a5:
                    31:a5:e4:25:fe:ca:90:5a:38:37:fc:e9:c2:8c:7d:
                    0e:5d:df:83:8e:c0:af:5f:53:f5:30:5a:e1:3f:a4:
                    b9:66:42:09:17:eb:eb:af:69:1c:3b:7d:1f:d5:14:
                    23:55:71:6f:62:6d:4d:9f:e8:14:46:84:f4:b8:c3:
                    7a:0e:7e:32:30:96:be:89:b6:a0:9a:68:ff:90:57:
                    a2:63:e4:64:5e:94:ae:64:06:f2:e0:2f:41:f3:3c:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1D:C0:71:4A:02:5D:31:44:C1:5F:F7:51:53:25:7C:B1:3A:20:94
            X509v3 Authority Key Identifier:
                keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f4:78:f6:32:a6:3d:08:b9:75:2c:db:be:9f:f8:18:84:e4:
         61:94:3f:32:30:ca:0a:fc:90:e8:a1:ab:4a:14:c9:b5:c2:cc:
         e8:9f:e4:dd:e0:5d:63:95:58:ea:93:8d:42:cd:a1:fd:49:f5:
         9c:22:49:ba:d6:55:76:2e:1b:05:aa:82:75:fe:2a:a7:35:0e:
         ca:1b:a1:4d:72:19:ea:83:b0:60:58:4b:33:a7:7d:35:86:1d:
         6f:44:a9:94:87:aa:dc:a9:75:1d:80:73:53:fe:cd:8b:a0:f5:
         47:4f:6a:7f:c0:ef:e0:b8:b3:d2:4d:d5:a9:ee:1c:46:36:b4:
         ca:70:a9:35:75:44:7a:c2:e2:39:5b:15:6f:d5:a2:5a:ad:f8:
         3d:c0:8a:80:27:de:72:ef:74:0a:f9:f6:b1:ab:55:2f:ea:5b:
         84:65:79:84:e2:94:aa:fb:b4:12:9b:1f:11:a5:94:8d:9c:dc:
         1a:f1:7a:f4:f9:6f:8c:91:eb:ec:d4:ee:63:b0:7e:f3:67:43:
         22:8f:bf:53:bb:46:03:3b:b6:58:53:94:2f:d5:b7:99:6a:4c:
         b3:39:3e:01:72:ca:2a:d0:97:4b:e9:5f:d9:28:40:af:85:1b:
         e7:cd:f8:65:2c:48:5e:6d:e4:28:0c:db:83:62:f7:c4:ee:4b:
         0f:53:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:00 2026 by rpki-client