Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
File:                     4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft (raw, json)
Hash identifier:          6CoGHupKhm8SWmsO3admEfe9nUHIikzjzonhCnQ6D8U=
Subject key identifier:   34:A2:E3:EA:99:DF:74:F2:3A:D8:57:A9:A4:2C:AC:D6:30:9E:A8:87
Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3
Certificate issuer:       /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
Certificate serial:       26414AF81F7C30A30CC41C8AA83374F65A05A0B1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 10:27:06 +0000
Manifest this update:     Sat 13 Jun 2026 10:22:06 +0000
Manifest next update:     Sun 14 Jun 2026 12:34:06 +0000
Files and hashes:         1: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=)
                          2: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl (hash: MSROGBjlsITwWmrfg8v7ZQdDR7Zn8T2FqrMWAOps6Zk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl
                          rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:41:4a:f8:1f:7c:30:a3:0c:c4:1c:8a:a8:33:74:f6:5a:05:a0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
        Validity
            Not Before: Jun 13 10:22:06 2026 GMT
            Not After : Jun 14 12:34:06 2026 GMT
        Subject: CN=34A2E3EA99DF74F23AD857A9A42CACD6309EA887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:82:ba:2a:58:f5:72:57:7e:80:75:3f:89:
                    e7:52:92:ae:51:a9:d5:ca:4e:e0:f8:69:cb:45:ec:
                    f4:02:91:6c:da:84:70:cb:88:b6:92:9d:f5:c9:6a:
                    ed:d7:f6:0e:53:cc:d7:4e:b9:9d:00:d4:83:28:e7:
                    90:84:a5:5f:89:73:5a:60:63:5f:93:02:45:b4:5e:
                    d7:de:23:e7:9c:af:b4:d8:2c:89:70:30:11:07:bd:
                    77:a0:ae:14:63:db:68:6d:25:af:61:80:c2:c5:73:
                    7f:b7:d5:f7:59:c3:f0:20:7d:46:6a:55:29:5b:2d:
                    f9:fa:06:b1:8a:84:b7:6b:8c:98:55:67:4b:c2:12:
                    96:60:f2:22:e1:ea:15:3e:38:42:06:47:b2:9b:26:
                    4d:3c:f7:64:58:d8:73:92:bc:b6:29:1a:6e:ec:84:
                    43:72:0f:fd:4a:08:ec:36:3e:c9:d3:8d:49:02:c7:
                    b0:06:24:f8:62:55:be:28:6b:37:41:97:15:17:f4:
                    49:dd:b4:90:68:b1:de:b7:93:75:44:98:7a:87:45:
                    1d:e2:37:bc:ba:77:fa:f1:7c:38:c5:8f:87:05:d1:
                    e6:54:e0:1b:57:f1:bb:75:bc:75:24:33:44:8f:f5:
                    44:d4:57:96:37:c4:76:65:d1:a6:fc:2d:1c:4e:ee:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A2:E3:EA:99:DF:74:F2:3A:D8:57:A9:A4:2C:AC:D6:30:9E:A8:87
            X509v3 Authority Key Identifier:
                keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5e:1f:03:92:53:66:26:49:80:7d:17:b7:b7:07:90:1c:ac:
         5b:c3:69:7d:52:06:d1:e2:25:1e:64:97:10:8e:3d:38:2d:d3:
         6c:f9:2d:40:1b:18:e2:c7:f0:6b:56:b1:a6:f1:0a:01:c3:31:
         02:ba:65:a6:a0:a7:96:2a:35:7d:e0:fe:16:0e:2a:a5:31:d4:
         7b:ff:23:4b:c8:65:12:7e:72:60:dd:f4:52:79:c8:24:d7:a4:
         83:83:9c:fa:4f:5a:e2:4a:27:d8:69:a4:bd:a3:04:c6:3f:62:
         43:33:82:96:65:cc:55:d3:6d:42:bc:79:15:34:ce:f5:62:b7:
         f4:a8:0b:ed:54:49:21:38:37:24:84:d2:23:1c:0b:1e:d9:d2:
         14:e2:49:97:a8:c9:b9:c0:7a:05:bb:a4:d7:be:f0:a1:4e:c1:
         7b:f6:48:85:dc:e7:49:d0:eb:7a:fa:26:06:a3:98:e9:9c:ea:
         51:c0:7b:cb:56:eb:d0:67:c6:8a:82:2b:10:7d:a2:20:6e:3e:
         2c:6a:68:dd:bd:84:3a:80:cc:6c:e9:54:54:0a:28:39:1d:83:
         80:eb:a9:69:46:75:5d:37:d0:5d:f8:d3:4b:73:84:48:02:6a:
         55:c5:84:f4:46:5b:35:ca:9c:ad:9c:a6:de:e3:12:8b:0e:cd:
         fb:4d:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:25 2026 by rpki-client