Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft
File:                     4C87F894274B3B0E1928C39974942F14C8A8B54C.mft (raw, json)
Hash identifier:          XqJf9mdG/paUstXFQC2SKzfiPl9n0Sf2PzREaTn3auU=
Subject key identifier:   30:43:E0:F8:8D:76:C2:99:57:70:E3:F4:18:1E:10:12:C8:22:8A:79
Authority key identifier: 4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C
Certificate issuer:       /CN=4C87F894274B3B0E1928C39974942F14C8A8B54C
Certificate serial:       4FC5D794A0F3964D89745C3DA966D364D825B314
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 21:36:22 +0000
Manifest this update:     Thu 23 Jul 2026 21:31:22 +0000
Manifest next update:     Fri 24 Jul 2026 23:31:22 +0000
Files and hashes:         1: 4C87F894274B3B0E1928C39974942F14C8A8B54C.crl (hash: AS/+LmVNaN2BKkIEjCC3kDYOUH0e7xkQQ3/h8z7dqCg=)
                          2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: 77vqSQ2vYJSpRPJK+Drkv/GhwqBRFPysUVhKsIiSCoU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.crl
                          rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c5:d7:94:a0:f3:96:4d:89:74:5c:3d:a9:66:d3:64:d8:25:b3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C87F894274B3B0E1928C39974942F14C8A8B54C
        Validity
            Not Before: Jul 23 21:31:22 2026 GMT
            Not After : Jul 24 23:31:22 2026 GMT
        Subject: CN=3043E0F88D76C2995770E3F4181E1012C8228A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:84:bd:54:0c:90:05:14:35:08:57:de:d7:0c:
                    d2:f6:84:80:c6:1e:08:0d:60:ea:4e:d4:78:ed:24:
                    fc:91:48:6f:8e:04:f3:d2:d3:a7:ea:09:b6:54:08:
                    d2:c2:46:7e:ea:44:9d:3d:fc:77:bd:6a:74:14:fd:
                    4e:35:a9:89:39:5c:98:9b:ef:04:c3:3f:7f:ef:e1:
                    eb:bb:12:90:9f:ee:1a:f3:8e:19:e9:fd:52:6d:30:
                    a1:06:dc:d3:72:25:02:1c:90:33:ed:6b:c8:15:51:
                    c4:27:f8:09:25:3f:40:85:96:fc:87:dd:1b:be:67:
                    8a:d7:cf:21:4e:73:fd:2f:1d:f2:64:aa:00:d3:c3:
                    4c:78:11:29:4d:c3:41:43:22:a9:a9:66:7a:d8:1c:
                    cd:2c:c2:7c:bb:f0:b4:d4:4b:49:fa:d0:4b:0a:c9:
                    42:5d:43:e7:c6:fa:45:2d:6c:98:87:84:5a:7d:de:
                    e3:c3:0d:c8:6d:a2:e2:f7:57:ab:4b:1f:cb:93:29:
                    87:f0:e8:5d:7e:19:a7:60:e4:8c:32:e6:f7:a9:b6:
                    8e:41:a3:bc:ac:9a:c9:32:a4:8f:32:8d:84:2e:7a:
                    3d:59:35:c2:cb:37:79:14:bb:10:8e:fc:da:03:c3:
                    1f:89:f1:c0:54:37:e9:51:31:09:88:09:ff:6c:52:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:43:E0:F8:8D:76:C2:99:57:70:E3:F4:18:1E:10:12:C8:22:8A:79
            X509v3 Authority Key Identifier:
                keyid:4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:fd:54:25:45:c4:d3:4e:07:09:50:64:98:f2:6d:a9:bd:9c:
         6d:19:be:96:77:5b:f9:a4:4b:f5:1d:74:88:37:67:bb:95:ae:
         1a:62:58:ee:7a:fd:52:1b:88:ac:5a:4b:ee:04:be:b3:f0:11:
         49:d6:86:cc:d3:c0:a2:2e:cd:81:48:1a:31:d3:f7:0d:b3:65:
         00:91:0a:56:fd:07:cf:ed:9a:79:ed:75:e6:2e:bf:f6:12:78:
         5f:5e:0b:59:b2:b7:86:98:95:1e:d4:61:69:07:8e:54:c8:42:
         50:8b:cb:07:85:30:e6:e2:82:1c:2a:b1:71:59:af:fd:0c:a7:
         b3:c2:4c:da:cc:91:40:6a:01:95:4a:8a:b6:fb:a7:2e:43:e3:
         9c:09:09:4d:5a:4b:36:f9:ce:77:e6:8b:29:8c:f8:c8:74:8a:
         60:47:1d:13:4a:9a:a9:ac:a7:df:37:06:b0:48:59:10:6f:12:
         75:87:c4:c7:60:18:09:19:fd:30:c0:30:6f:7f:9a:b2:60:00:
         23:ec:29:9c:41:07:9a:0e:66:61:5b:ba:9c:05:2d:60:48:be:
         8c:38:80:92:31:aa:20:52:2c:c9:a1:ab:5e:64:a0:d0:31:38:
         23:79:01:c1:03:87:33:42:25:fe:09:95:60:90:0b:33:6c:1b:
         1b:b2:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:39 2026 by rpki-client