Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft
File:                     4887E721DA907B8223025FFDE0F11420EEFD8351.mft (raw, json)
Hash identifier:          Iiswdn3bgCnZvdthl4RSSTgNzkR6b7J8pz+B0CE5yHc=
Subject key identifier:   3D:96:44:BE:DD:67:DB:17:D8:5C:1B:FE:38:A7:3D:5A:BC:8B:01:01
Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51
Certificate issuer:       /CN=4887E721DA907B8223025FFDE0F11420EEFD8351
Certificate serial:       423C7BEA4F806FF1CD175F47AC826B638E5C22A8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 19:44:14 +0000
Manifest this update:     Thu 23 Jul 2026 19:39:14 +0000
Manifest next update:     Fri 24 Jul 2026 23:20:14 +0000
Files and hashes:         1: 4887E721DA907B8223025FFDE0F11420EEFD8351.crl (hash: dzL2+ZJAXspYxOjMxQgjsDSe+O1+GSyWIKN/VQnBHLM=)
                          2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=)
                          3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl
                          rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3c:7b:ea:4f:80:6f:f1:cd:17:5f:47:ac:82:6b:63:8e:5c:22:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351
        Validity
            Not Before: Jul 23 19:39:14 2026 GMT
            Not After : Jul 24 23:20:14 2026 GMT
        Subject: CN=3D9644BEDD67DB17D85C1BFE38A73D5ABC8B0101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:bb:66:7e:91:18:34:21:33:d2:3f:18:17:
                    f0:60:b6:85:b8:b9:f1:9a:17:24:63:cc:9b:d9:24:
                    78:7c:e3:8f:4a:f2:a5:80:a8:af:9a:3c:7c:e1:66:
                    bc:48:35:59:c3:48:b5:0a:aa:30:8c:ac:91:58:93:
                    bf:b9:3c:49:a1:5e:f1:68:05:00:f4:fb:fa:eb:e5:
                    e3:e2:56:f9:a2:cd:8f:04:c5:7b:d3:79:87:30:2f:
                    dc:74:4e:5b:22:7e:fe:27:75:0b:a9:73:eb:02:f8:
                    82:a4:8b:e6:7f:02:33:6b:5b:ef:1d:74:d9:61:69:
                    86:89:b3:dc:a5:0a:01:19:bb:d3:6e:f7:f5:99:3f:
                    91:9a:54:1b:1d:95:26:b5:7b:93:7d:f7:d1:a3:82:
                    15:be:cd:01:7f:87:31:cd:f2:4d:f3:50:02:07:95:
                    7c:15:2d:d4:62:54:63:43:d7:d7:5b:40:1c:47:46:
                    6e:b8:4c:9e:d5:0d:5b:b9:1a:fd:82:b8:63:8f:d6:
                    cf:62:e9:c2:6c:56:47:07:84:32:b1:26:79:57:75:
                    92:09:69:c4:39:03:8c:81:6d:06:13:05:ea:49:95:
                    fc:8d:d5:f7:39:86:4b:50:8d:eb:29:23:9e:5b:0c:
                    36:c1:73:0d:3e:42:c2:1e:f5:7c:5a:81:c7:ef:ae:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:96:44:BE:DD:67:DB:17:D8:5C:1B:FE:38:A7:3D:5A:BC:8B:01:01
            X509v3 Authority Key Identifier:
                keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:a9:73:21:1d:b4:58:f4:26:d2:02:46:50:b3:8e:f5:0b:
         70:3b:c1:84:f3:85:b8:3e:50:ea:44:87:55:43:ea:c5:1b:5f:
         45:a6:57:61:ca:71:ec:65:d1:da:e9:b7:93:97:36:39:78:84:
         82:73:e3:5f:ac:e4:70:80:8b:8f:5f:ea:12:b2:c2:9b:98:32:
         ff:a2:44:3b:bf:8c:3f:28:2a:14:7c:ab:68:1c:52:06:c8:46:
         0c:52:53:80:1f:a6:ef:aa:33:19:33:e0:09:ff:04:22:43:96:
         c8:c6:2c:27:b6:8a:96:04:15:1d:9c:ac:9a:bf:9b:08:c1:c0:
         e5:56:89:b6:d9:b6:f0:57:d4:d3:0d:6c:d3:fd:e5:d4:ef:09:
         9a:09:b4:85:7a:72:d4:02:57:78:94:9c:09:c4:b6:c0:a2:62:
         70:f0:50:e2:33:6f:e2:27:5e:6e:70:25:c9:23:af:88:e6:c8:
         2a:66:92:35:38:e2:e4:3d:d0:32:aa:7e:10:74:b9:6b:e9:df:
         df:32:c0:16:5c:4e:79:01:74:9b:09:5a:bf:f1:36:c8:56:6e:
         0b:22:26:2d:84:24:05:98:c1:67:24:49:15:c5:78:f1:1d:f3:
         34:42:7a:bc:f2:5f:43:7e:e0:32:80:6d:6b:0d:74:d8:bf:96:
         89:15:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:53 2026 by rpki-client