Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
File:                     4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json)
Hash identifier:          e3FOWDL+mDRCU3fiTU1FHe2ph1vwY9RnVJOTn8lC9v4=
Subject key identifier:   53:0C:BD:A6:E7:B8:92:EB:13:D1:C1:4C:48:2F:A9:A6:6F:7C:AF:A3
Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
Certificate issuer:       /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Certificate serial:       2CF23BB27564F965F6D8D8DEC32874FE7DB96D07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 20:49:24 +0000
Manifest this update:     Sat 13 Jun 2026 20:44:24 +0000
Manifest next update:     Sun 14 Jun 2026 22:12:24 +0000
Files and hashes:         1: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: EMAtKTwwaGSpLVj6ScAXArQEWJbf3tCeeCx/kHzEYu4=)
                          2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
                          rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f2:3b:b2:75:64:f9:65:f6:d8:d8:de:c3:28:74:fe:7d:b9:6d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
        Validity
            Not Before: Jun 13 20:44:24 2026 GMT
            Not After : Jun 14 22:12:24 2026 GMT
        Subject: CN=530CBDA6E7B892EB13D1C14C482FA9A66F7CAFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:88:66:d8:fa:31:8e:35:19:6a:e4:22:0e:
                    cd:50:0f:a5:f0:a0:d4:3e:3e:37:87:7e:a1:9b:7a:
                    76:bc:60:09:5e:00:17:f7:f5:dd:e6:a7:c0:2e:92:
                    cf:c6:84:e4:3b:e1:f4:05:3b:16:4c:4e:28:a1:93:
                    80:3f:26:55:07:97:c2:f2:63:10:82:06:86:be:02:
                    b8:d7:da:c9:19:99:b4:47:9e:a8:3e:cb:15:10:91:
                    c4:72:18:9e:9e:4d:b5:fc:26:75:02:94:b6:6c:0d:
                    48:60:3b:1e:48:32:26:03:52:ea:eb:45:ea:d0:68:
                    8f:c7:fc:e0:90:ad:dd:73:3f:44:49:e5:aa:86:01:
                    5b:b3:27:2f:eb:24:df:55:9f:da:aa:d1:58:7c:c6:
                    d0:b6:00:6f:61:6f:cd:da:19:c6:eb:0a:24:1f:a3:
                    f8:77:5e:cb:35:32:69:72:53:d0:50:e4:1a:5d:d9:
                    f5:5f:54:8d:41:62:1f:ec:bf:d4:d8:f6:1b:e2:30:
                    3d:a5:00:87:88:5b:3f:a7:c6:28:2a:dc:3e:b0:6f:
                    d3:b5:81:de:00:f5:6b:06:a8:03:1f:5b:ca:58:fd:
                    ef:d6:d6:b9:67:45:e7:65:6f:66:4e:ba:50:f3:23:
                    fa:3b:dd:1a:dd:16:3c:6f:2a:e8:97:e4:cd:a0:0a:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0C:BD:A6:E7:B8:92:EB:13:D1:C1:4C:48:2F:A9:A6:6F:7C:AF:A3
            X509v3 Authority Key Identifier:
                keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f6:17:27:f7:a8:6d:b8:51:45:bc:86:15:27:56:31:92:57:
         ad:38:04:48:1f:4a:bc:97:bf:8f:ea:da:0c:1d:bb:4c:f7:15:
         99:f3:80:d5:06:26:64:7b:6e:a5:b0:a7:fd:c9:5f:4a:2f:5a:
         a8:00:fb:b9:a1:bd:0b:e5:14:ea:b5:c6:7b:16:d4:32:fb:69:
         51:c8:d9:ad:d7:37:65:df:51:9d:3c:ef:a7:e1:bb:84:1d:4b:
         13:76:a7:08:71:19:c1:25:72:45:f6:34:90:85:29:dd:2c:0a:
         ea:f8:15:05:7a:bc:7f:90:bd:6a:1f:26:d2:44:85:e2:25:23:
         0f:e8:8a:de:9c:ff:8e:59:07:fe:71:3e:03:c1:18:a1:c5:2d:
         01:57:4c:c6:07:01:c0:ef:f5:f2:d9:25:f0:2d:12:1c:e0:92:
         47:61:74:9d:ca:3f:42:9e:6d:e0:22:75:cc:01:60:92:f1:21:
         a9:50:e7:56:ef:24:e5:15:dc:cc:95:2b:4c:16:ca:49:23:c4:
         40:d1:c5:a5:fd:1c:a3:bb:30:ff:37:f0:17:16:87:6d:f1:34:
         6f:c8:91:c4:9b:16:24:4c:f2:6c:69:27:49:16:96:cc:1b:34:
         4a:d4:c3:bf:48:48:ab:55:71:49:ee:aa:17:29:50:c0:02:ba:
         3b:68:73:24
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULPI7snVk+WX22Njewyh0/n25bQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2
NjM4MDhEMjAeFw0yNjA2MTMyMDQ0MjRaFw0yNjA2MTQyMjEyMjRaMDMxMTAvBgNV
BAMTKDUzMENCREE2RTdCODkyRUIxM0QxQzE0QzQ4MkZBOUE2NkY3Q0FGQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/54hm2PoxjjUZauQiDs1QD6Xw
oNQ+PjeHfqGbena8YAleABf39d3mp8Auks/GhOQ74fQFOxZMTiihk4A/JlUHl8Ly
YxCCBoa+ArjX2skZmbRHnqg+yxUQkcRyGJ6eTbX8JnUClLZsDUhgOx5IMiYDUurr
RerQaI/H/OCQrd1zP0RJ5aqGAVuzJy/rJN9Vn9qq0Vh8xtC2AG9hb83aGcbrCiQf
o/h3Xss1MmlyU9BQ5Bpd2fVfVI1BYh/sv9TY9hviMD2lAIeIWz+nxigq3D6wb9O1
gd4A9WsGqAMfW8pY/e/W1rlnRedlb2ZOulDzI/o73RrdFjxvKuiX5M2gCsD9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUwy9pue4kusT0cFMSC+ppm98r6MwHwYDVR0j
BBgwFoAUSgFbCwoI0bP36jVJuWjd52Y4CNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWRjMWM0OWMtZDQwNC00NWExLTllN2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIw
QTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2NjM4MDhEMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QTAxNUIwQjBBMDhEMUIzRjdFQTM1NDlCOTY4RERFNzY2Mzgw
OEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll
N2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERE
RTc2NjM4MDhEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIL2Fyf3qG24UUW8hhUnVjGSV604BEgfSryX
v4/q2gwdu0z3FZnzgNUGJmR7bqWwp/3JX0ovWqgA+7mhvQvlFOq1xnsW1DL7aVHI
2a3XN2XfUZ0876fhu4QdSxN2pwhxGcElckX2NJCFKd0sCur4FQV6vH+QvWofJtJE
heIlIw/oit6c/45ZB/5xPgPBGKHFLQFXTMYHAcDv9fLZJfAtEhzgkkdhdJ3KP0Ke
beAidcwBYJLxIalQ51bvJOUV3MyVK0wWykkjxEDRxaX9HKO7MP838BcWh23xNG/I
kcSbFiRM8mxpJ0kWlswbNErUw79ISKtVcUnuqhcpUMACujtocyQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:40:33 2026 by rpki-client