Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
File:                     4AD757CB155CFF255FDEC1E6D09300FD55954787.mft (raw, json)
Hash identifier:          t2ubA0BqB0XBOd3Wy20tmyvn+em3WAx7EP7IdYSISAo=
Subject key identifier:   4C:9B:73:2C:2A:AA:6F:28:82:3F:3F:32:50:BF:4C:70:0E:EA:AF:C4
Authority key identifier: 4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87
Certificate issuer:       /CN=4AD757CB155CFF255FDEC1E6D09300FD55954787
Certificate serial:       0C46FFC83384D6619703070FC69FB91D29BC45EA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
Manifest number:          0101
Signing time:             Mon 09 Nov 2026 22:08:25 +0000
Manifest this update:     Mon 09 Nov 2026 22:03:25 +0000
Manifest next update:     Wed 11 Nov 2026 00:00:25 +0000
Files and hashes:         1: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: YQmR5xszR6XJTWjFcmbhXoD76oy0pbbqOdOUyAmXzbo=)
                          2: 4AD757CB155CFF255FDEC1E6D09300FD55954787.crl (hash: +xIZxG0oNV5Iq4izJzLbgtLuV7LaIzatt891YaGjrXc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl
                          rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 00:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:46:ff:c8:33:84:d6:61:97:03:07:0f:c6:9f:b9:1d:29:bc:45:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AD757CB155CFF255FDEC1E6D09300FD55954787
        Validity
            Not Before: Nov  9 22:03:25 2026 GMT
            Not After : Nov 11 00:00:25 2026 GMT
        Subject: CN=4C9B732C2AAA6F28823F3F3250BF4C700EEAAFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:f9:8d:f1:5e:bc:95:64:b4:f5:d8:19:0c:
                    cb:c6:53:91:e8:07:44:9e:5d:b5:df:3e:56:ea:07:
                    8a:c7:a6:91:89:23:ff:22:0f:16:1d:e9:c7:16:58:
                    8c:1a:64:aa:88:c3:07:cf:22:ec:c9:08:cd:26:dc:
                    cc:56:ce:b5:60:31:57:cf:ec:e3:a9:4a:5f:56:00:
                    96:60:ab:6e:87:7d:fb:e8:bf:9d:3a:7b:82:0a:0f:
                    cc:a0:08:cc:9a:87:fa:8b:9e:c3:7b:19:f0:b4:78:
                    36:fb:94:0c:0c:52:a2:15:25:23:bf:68:1b:d6:c9:
                    33:34:84:73:46:c6:7e:6d:cf:a7:5e:2e:a1:7f:36:
                    c9:66:bc:d0:5b:73:41:d1:e2:d7:b1:48:68:b5:38:
                    17:53:2c:a9:31:8b:df:cc:97:4c:4e:0c:f0:aa:b5:
                    eb:f5:c1:c6:12:f7:ba:7b:d2:d8:9a:c6:78:9e:69:
                    9a:cb:92:b9:a6:d5:b6:91:32:36:a4:b8:c7:4c:37:
                    45:ad:bd:d1:f3:39:3e:3a:fb:d5:29:ff:4a:2d:0a:
                    aa:f2:f5:60:87:69:e8:6d:85:74:24:3b:06:28:33:
                    6b:78:ad:97:7e:e0:b1:fa:ba:e3:61:0f:c7:14:d4:
                    44:d4:8f:9a:ea:31:d8:d5:a8:52:49:de:90:fe:f5:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9B:73:2C:2A:AA:6F:28:82:3F:3F:32:50:BF:4C:70:0E:EA:AF:C4
            X509v3 Authority Key Identifier:
                keyid:4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:19:d2:47:55:d4:0b:ff:7e:c8:71:ae:54:2a:f4:b6:07:
         6c:a0:3c:62:32:45:0b:86:c8:94:62:db:4a:c3:b7:7c:9d:1f:
         66:7e:e2:1d:96:8f:50:b4:42:9f:30:e6:81:d1:17:f8:58:43:
         41:42:88:df:08:cc:63:0e:08:50:64:48:76:64:f0:f0:bf:e4:
         0e:20:88:d1:a8:c6:b2:f3:1a:2d:d6:4a:59:5a:c9:26:8f:29:
         f8:74:e4:93:27:15:8a:f5:02:2a:d1:b4:c0:6c:8d:c4:ff:1a:
         4c:d8:85:01:cf:1f:2f:ca:a4:57:77:1e:e4:c3:89:2d:fa:de:
         a4:87:4d:51:5a:27:6d:46:1e:70:8b:1a:0c:68:dc:97:9a:42:
         c3:54:1c:a1:72:a5:9f:f6:c6:73:4a:44:91:2c:21:2a:85:08:
         6f:6b:2d:a6:dd:d0:bf:1b:83:78:70:7c:2e:74:4f:bd:91:45:
         7a:7f:f9:4a:c7:24:c7:91:cb:bb:95:5e:8e:a1:5c:34:ad:70:
         50:c1:ae:6c:c0:c9:33:60:bb:57:f5:50:e7:47:a2:4b:d2:3a:
         76:d2:79:b6:0d:48:22:1a:c1:4c:f6:59:ff:c3:d3:1b:e5:b3:
         67:99:fd:38:e5:5f:0e:01:6e:6c:fe:4b:6b:76:cc:73:77:ae:
         e8:41:25:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:26:06 2026 by rpki-client