Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
File:                     4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json)
Hash identifier:          dH2aT1O8dk3bnkISXY4AQF4e7X372gRiSXWFNCjZPvE=
Subject key identifier:   DE:62:CE:40:6C:51:D5:C7:3D:DE:2D:59:28:A0:35:B2:95:01:20:9D
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Certificate issuer:       /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial:       3E23E8669AC1C43743AF5457F453270EF719758D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
Manifest number:          38
Signing time:             Fri 12 Jun 2026 22:07:05 +0000
Manifest this update:     Fri 12 Jun 2026 22:02:05 +0000
Manifest next update:     Sun 14 Jun 2026 01:27:05 +0000
Files and hashes:         1: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=)
                          2: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=)
                          3: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: 5TyGpE/gbL9TJ70AzdTzljaodqCOnrgo/8Y6koLGTQ8=)
                          4: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=)
                          5: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=)
                          6: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=)
                          7: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=)
                          8: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=)
                          9: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=)
                          10: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=)
                          11: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=)
                          12: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=)
                          13: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
                          rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 20:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:23:e8:66:9a:c1:c4:37:43:af:54:57:f4:53:27:0e:f7:19:75:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
        Validity
            Not Before: Jun 12 22:02:05 2026 GMT
            Not After : Jun 14 01:27:05 2026 GMT
        Subject: CN=DE62CE406C51D5C73DDE2D5928A035B29501209D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:f3:cb:56:00:4a:b9:5c:3b:80:e7:10:dc:
                    a9:4e:0c:cc:21:04:7e:40:af:3b:a4:a0:05:06:97:
                    9d:35:9b:7a:9c:ec:86:eb:ef:c2:0e:fd:fb:ec:87:
                    62:fa:1a:2f:10:6b:ec:f8:af:49:fb:43:a7:92:27:
                    fb:98:06:01:10:ac:b0:c4:43:b5:05:c1:ba:9d:9e:
                    9b:15:3c:39:c7:0f:5b:f8:6c:70:cb:f8:64:75:94:
                    1e:3a:02:6a:33:22:16:5a:9d:b6:11:f7:89:1d:f9:
                    b6:f3:f2:a4:2b:89:b0:27:be:63:67:89:20:b4:e1:
                    ba:45:d6:bb:5b:fa:57:ed:4a:ae:b8:80:fa:9e:d9:
                    8e:c1:6f:3d:40:33:6a:89:b0:66:eb:04:3c:ba:ad:
                    5e:2b:63:18:d1:cb:d2:92:f3:71:c6:c2:55:9d:bb:
                    75:d9:7e:9d:39:70:d7:83:ef:f9:11:20:00:79:91:
                    20:e2:60:05:92:30:55:22:9d:6a:c2:25:b5:76:4a:
                    77:74:86:6b:5b:e2:fb:10:6b:87:bd:d5:14:a0:54:
                    37:cd:a5:4e:a2:09:d3:28:45:50:f8:a5:85:03:ee:
                    d2:ae:4e:ff:ab:d8:e4:e1:94:c5:bc:d8:48:07:fa:
                    3d:67:ce:41:34:41:6f:e5:a8:9e:5b:4e:46:46:1e:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:62:CE:40:6C:51:D5:C7:3D:DE:2D:59:28:A0:35:B2:95:01:20:9D
            X509v3 Authority Key Identifier:
                keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:f5:44:99:44:de:7c:e9:12:d0:db:5a:8b:ec:e7:af:80:
         6e:13:47:e7:29:68:30:d1:83:29:8e:be:71:96:30:b7:dd:c1:
         86:8c:3d:d6:be:ba:95:9c:c5:0d:7f:8b:19:91:55:a1:63:29:
         29:4e:c6:46:64:34:a3:b7:b5:6f:c3:7f:70:ab:37:7d:60:5f:
         fd:af:79:a6:0a:b4:8e:31:b7:91:7a:33:37:f5:59:68:a9:d7:
         b7:5d:a6:1b:01:73:b4:a9:f1:01:e3:83:12:8b:ba:20:e0:d1:
         a2:c6:8f:61:10:9d:ce:14:aa:45:7f:e6:28:e8:9c:8c:f0:f3:
         a7:b2:03:8d:db:df:11:66:20:39:b5:15:b0:5f:a1:25:54:00:
         bd:e1:b5:3a:cd:da:23:b5:34:e3:3f:60:b7:e9:9b:74:1b:c1:
         ea:ac:ac:27:eb:91:27:51:2f:e9:2d:5f:da:2a:99:4c:50:a5:
         30:38:f7:d3:2f:26:9a:4e:c1:3a:4e:c5:77:b2:84:b7:29:65:
         6b:8a:ed:87:5c:e4:df:ed:43:44:ae:0e:cd:50:ad:6c:19:d5:
         72:3a:58:3b:57:38:a5:22:ae:2c:27:46:a1:75:6e:21:6e:5f:
         82:6f:e9:77:02:3a:b5:4e:3f:b4:1e:72:fc:1c:2a:9e:f0:84:
         8b:de:b7:f5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPiPoZprBxDdDr1RX9FMnDvcZdY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3
NDI4MjA5MzAeFw0yNjA2MTIyMjAyMDVaFw0yNjA2MTQwMTI3MDVaMDMxMTAvBgNV
BAMTKERFNjJDRTQwNkM1MUQ1QzczRERFMkQ1OTI4QTAzNUIyOTUwMTIwOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCskfPLVgBKuVw7gOcQ3KlODMwh
BH5ArzukoAUGl501m3qc7Ibr78IO/fvsh2L6Gi8Qa+z4r0n7Q6eSJ/uYBgEQrLDE
Q7UFwbqdnpsVPDnHD1v4bHDL+GR1lB46AmozIhZanbYR94kd+bbz8qQribAnvmNn
iSC04bpF1rtb+lftSq64gPqe2Y7Bbz1AM2qJsGbrBDy6rV4rYxjRy9KS83HGwlWd
u3XZfp05cNeD7/kRIAB5kSDiYAWSMFUinWrCJbV2Snd0hmtb4vsQa4e91RSgVDfN
pU6iCdMoRVD4pYUD7tKuTv+r2OThlMW82EgH+j1nzkE0QW/lqJ5bTkZGHhNJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3mLOQGxR1cc93i1ZKKA1spUBIJ0wHwYDVR0j
BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC
RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy
MDkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1NDAxNjQtM2Q0Ni00Nzk0LWJm
NTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1
RkU3NDI4MjA5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAb39USZRN586RLQ21qL7OevgG4TR+cpaDDR
gymOvnGWMLfdwYaMPda+upWcxQ1/ixmRVaFjKSlOxkZkNKO3tW/Df3CrN31gX/2v
eaYKtI4xt5F6Mzf1WWip17ddphsBc7Sp8QHjgxKLuiDg0aLGj2EQnc4UqkV/5ijo
nIzw86eyA43b3xFmIDm1FbBfoSVUAL3htTrN2iO1NOM/YLfpm3QbweqsrCfrkSdR
L+ktX9oqmUxQpTA499MvJppOwTpOxXeyhLcpZWuK7Ydc5N/tQ0SuDs1QrWwZ1XI6
WDtXOKUiriwnRqF1biFuX4Jv6XcCOrVOP7QecvwcKp7whIvet/U=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:35 2026 by rpki-client