Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft
File:                     498FC3DB03528A64214589740CA13E84E4775306.mft (raw, json)
Hash identifier:          OIgXJxVQXtMM1twpQ7/rALknfModsareTrX09mxe2as=
Subject key identifier:   69:EF:EF:14:EB:FB:F2:FC:73:BB:B7:8F:2C:DE:10:1F:13:8C:07:FF
Authority key identifier: 49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06
Certificate issuer:       /CN=498FC3DB03528A64214589740CA13E84E4775306
Certificate serial:       25D8C04BBAA3584701A24AC4892E7455826E4C29
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:46:19 +0000
Manifest this update:     Tue 12 May 2026 22:41:19 +0000
Manifest next update:     Thu 14 May 2026 00:07:19 +0000
Files and hashes:         1: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: Q/fuqQjoEFdToVhIku7pv1Bt2HRCRBa60zPNNAr2glo=)
                          2: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: sbRZOMY4qXofH+gweW2UQPxdhQAQJDKmoZuKYzDjDd8=)
                          3: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: Qd4itvWRyprHNdVdvUE1w9SaI++oaYLomsgyZaFA/9U=)
                          4: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: y22RwJlcQ0nD5K4HN58evr6z1YokNMr+L0lhKw+Cv9w=)
                          5: 498FC3DB03528A64214589740CA13E84E4775306.crl (hash: NMjK9j7a5kxi8QCJY/kKZt4NLxoNBg2tZRjRaufLmFk=)
                          6: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: W6PaD9jD2W7QLE6L053n0v5wsFLq3jDzK+h9oZCa+Ww=)
                          7: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: OOkicQA5K86MoBkSuxZ02oUQ15K4MqZ+HWDN0IRHS5w=)
                          8: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: 8onh+SuVvqjsbjspZvr4ZBsa7gRz1dix1W7zncUVxG4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl
                          rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d8:c0:4b:ba:a3:58:47:01:a2:4a:c4:89:2e:74:55:82:6e:4c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498FC3DB03528A64214589740CA13E84E4775306
        Validity
            Not Before: May 12 22:41:19 2026 GMT
            Not After : May 14 00:07:19 2026 GMT
        Subject: CN=69EFEF14EBFBF2FC73BBB78F2CDE101F138C07FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c6:d5:68:c7:18:c5:82:5d:43:f9:e9:fe:49:
                    50:a1:9a:e0:63:ad:73:9c:23:8a:4b:c5:d4:e3:16:
                    03:88:2a:0c:03:ef:41:e0:9b:2b:d3:a9:3a:ed:44:
                    57:7d:62:d0:7d:62:b9:cf:f0:83:64:9d:94:b8:21:
                    25:29:23:72:69:9b:eb:67:57:b8:69:c9:1a:ee:3c:
                    d2:7c:58:36:41:4c:41:01:5c:98:a9:7b:06:7f:af:
                    b9:19:83:48:a9:5e:90:80:ee:92:d7:79:10:ca:7e:
                    09:e3:f4:5c:ae:71:93:a3:44:79:9b:08:58:8b:f4:
                    02:cb:de:25:90:ee:0d:4e:72:9b:7c:1a:e8:1f:65:
                    f7:b8:f0:db:2d:ce:a7:10:3b:fd:6c:5e:a9:28:b6:
                    5c:69:d5:fc:d5:3d:f3:f8:5a:10:a4:ad:48:c9:b5:
                    aa:d2:14:7e:ae:a6:10:6d:88:5e:1c:9b:f7:1b:9b:
                    87:ca:17:1a:34:bd:69:fb:a5:a8:f9:1d:ea:88:21:
                    86:3e:ae:e0:7d:84:e7:53:4e:20:02:64:30:26:ce:
                    76:f5:f8:ed:fb:2d:e3:20:43:77:d4:5b:15:9a:8a:
                    dc:3b:36:8e:2f:37:e0:dc:87:ab:fd:d4:82:a1:28:
                    73:23:77:d9:d8:32:5c:58:d7:e6:11:34:0b:a7:87:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EF:EF:14:EB:FB:F2:FC:73:BB:B7:8F:2C:DE:10:1F:13:8C:07:FF
            X509v3 Authority Key Identifier:
                keyid:49:8F:C3:DB:03:52:8A:64:21:45:89:74:0C:A1:3E:84:E4:77:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/498FC3DB03528A64214589740CA13E84E4775306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/498FC3DB03528A64214589740CA13E84E4775306.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:71:50:6e:f3:b0:bf:05:b8:2c:a9:a4:77:3e:88:cd:0d:1b:
         b5:91:34:f4:04:40:f4:8c:21:64:04:a0:1b:ef:74:8c:e1:cb:
         6f:9d:76:1a:99:77:01:4c:91:86:48:ac:a6:6c:aa:3e:cf:99:
         e3:85:54:46:2a:dd:cb:86:e6:6a:28:49:65:02:11:90:b5:25:
         8d:b9:b3:d3:08:07:64:3e:f8:05:ca:b7:fb:c1:5c:1a:6a:81:
         4b:4c:e5:1a:38:33:b9:a2:8c:97:ca:a7:97:58:fc:95:e5:e3:
         ee:02:aa:09:5e:ca:19:fc:99:4e:73:93:fc:05:df:bb:c9:23:
         3d:b6:af:2d:97:97:9b:15:3a:46:9f:c0:9a:d1:68:4d:e8:dc:
         53:80:9b:99:08:2c:2f:32:b5:71:a4:ec:53:f7:0e:a2:66:66:
         da:0f:79:c6:c2:48:0b:62:60:f6:de:89:37:54:e8:05:9e:db:
         60:ee:cd:5e:f8:44:80:31:5f:6b:14:47:ca:13:7a:f2:b4:e1:
         44:fd:3e:69:e0:8e:61:f4:58:5d:85:52:5b:1a:db:60:8a:34:
         65:c2:f5:1d:72:05:d5:13:57:d9:50:c3:a5:f8:c9:63:cf:79:
         3b:06:0a:8b:0d:b0:5b:98:3e:4e:11:82:2c:66:91:fc:5c:21:
         6d:87:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:45 2026 by rpki-client