Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft
File:                     4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json)
Hash identifier:          aSHdQ8xCfI8Sy18zNhwFcWTjIBIr5yhVe8QPB4N5NUw=
Subject key identifier:   79:00:92:2D:54:3E:95:16:8C:AD:A5:92:AD:BF:30:EA:97:5B:8D:C7
Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91
Certificate issuer:       /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391
Certificate serial:       4AE95276BF9BD64E6B971164DB55ECF3B4D0C382
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 11:23:21 +0000
Manifest this update:     Fri 24 Jul 2026 11:18:21 +0000
Manifest next update:     Sat 25 Jul 2026 14:21:21 +0000
Files and hashes:         1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=)
                          2: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: URhD0LPA+d2BKPjTfuSeFP+UEQsUMdjKumJZYxdzY1U=)
                          3: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl
                          rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:52:76:bf:9b:d6:4e:6b:97:11:64:db:55:ec:f3:b4:d0:c3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391
        Validity
            Not Before: Jul 24 11:18:21 2026 GMT
            Not After : Jul 25 14:21:21 2026 GMT
        Subject: CN=7900922D543E95168CADA592ADBF30EA975B8DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:b5:5b:86:95:be:ca:7c:c2:64:be:e9:ed:
                    75:24:5f:bf:22:c4:8e:df:68:5c:43:dd:fb:55:69:
                    fa:34:d5:06:e1:73:92:23:2c:f5:19:4f:09:6e:fb:
                    05:5c:a4:ad:f5:32:ae:f5:c2:aa:70:48:84:b6:b9:
                    5d:5c:4a:82:94:51:e9:c6:07:2f:4a:34:93:d2:f6:
                    39:13:b0:22:66:f4:68:12:76:e5:95:07:b6:94:84:
                    83:a8:bd:a7:83:1c:bc:cd:c1:3e:d1:4c:dd:43:b8:
                    5a:59:57:b1:0d:64:45:97:a5:25:36:5f:aa:a3:a1:
                    ca:27:4f:06:09:8f:02:31:5c:1c:5e:4a:0d:41:1f:
                    0d:85:66:20:95:ed:b4:89:89:87:15:fa:8e:b2:33:
                    94:3a:c7:b1:54:59:c8:a0:80:4c:ba:09:6d:6b:b6:
                    da:f4:06:79:ff:54:be:d2:f9:c3:a5:89:21:b6:a0:
                    17:a9:04:62:7a:f6:9c:33:d2:5d:e7:8d:ca:8d:68:
                    ad:b8:ee:46:3a:b4:3e:66:58:60:9d:fd:aa:b8:ce:
                    8a:3c:94:af:ef:3d:4b:06:09:8d:59:3f:b4:3a:f7:
                    f8:90:6d:0e:46:e4:73:70:fc:62:d1:eb:71:59:01:
                    e2:92:b3:21:8b:be:34:d9:cf:2f:04:76:17:68:fe:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:00:92:2D:54:3E:95:16:8C:AD:A5:92:AD:BF:30:EA:97:5B:8D:C7
            X509v3 Authority Key Identifier:
                keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:41:b0:60:70:eb:57:63:b1:dc:a5:c6:87:ae:55:79:66:
         be:b6:2f:f1:56:2d:72:c9:86:01:44:c2:21:f0:1d:49:86:dd:
         24:c3:e5:7d:4d:e0:6d:b5:54:e6:b5:9c:c8:14:a4:2d:98:12:
         d9:51:51:2b:96:c6:b9:0a:62:42:e9:b0:4f:4e:73:33:50:f4:
         df:31:f6:53:7e:08:ba:12:c0:02:74:c3:87:78:a1:9e:84:d6:
         0b:5f:0a:4c:44:b0:04:46:57:b8:60:ba:42:1b:33:da:56:d3:
         57:b2:b6:8c:27:ac:cf:aa:15:bf:a3:41:11:16:ce:2a:e4:4d:
         fe:8e:24:6f:e5:1d:53:66:13:63:c8:35:4c:07:b1:66:0a:b1:
         68:d6:cc:8e:d0:0f:f0:c8:8a:10:f9:9d:33:71:b1:7b:5f:15:
         13:d0:c5:28:ab:f8:75:41:14:16:8f:5e:ec:c8:37:93:e8:66:
         05:6f:e5:3f:b1:98:42:b9:94:48:f5:f6:86:3c:f6:5e:14:32:
         1f:14:59:ee:88:8c:b9:97:85:ad:53:51:41:80:26:32:eb:b2:
         a8:e1:0a:69:67:77:44:b7:22:b1:88:06:60:aa:92:2f:26:21:
         57:77:4a:7c:bf:a3:2b:fb:d9:2f:d9:aa:28:cb:90:4d:61:b7:
         7e:8c:10:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:14 2026 by rpki-client