Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft
File:                     4E4DE13CED941803F067EA0F530875538E7F1AA8.mft (raw, json)
Hash identifier:          ADMUWcPHtdDKQ69XdDq8q8V3hov4+v3ZGb/76PJGJTo=
Subject key identifier:   EC:15:C7:FE:03:A8:E5:EB:8C:99:93:6D:92:88:4E:CD:BB:35:AF:ED
Authority key identifier: 4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8
Certificate issuer:       /CN=4E4DE13CED941803F067EA0F530875538E7F1AA8
Certificate serial:       33CFEC63805394B603991D5D8C50F721A4F232C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 23:32:30 +0000
Manifest this update:     Tue 12 May 2026 23:27:30 +0000
Manifest next update:     Thu 14 May 2026 00:07:30 +0000
Files and hashes:         1: 3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (hash: pS17p4MkvrBveGdgex+XwX4S4Wesu7Vq17SWjXP0+w8=)
                          2: 4E4DE13CED941803F067EA0F530875538E7F1AA8.crl (hash: qqjLFwJ1iMVgwVpgwJuUlIdmH6YFtYPpTxGL2BFXUFs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.crl
                          rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:ec:63:80:53:94:b6:03:99:1d:5d:8c:50:f7:21:a4:f2:32:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4DE13CED941803F067EA0F530875538E7F1AA8
        Validity
            Not Before: May 12 23:27:30 2026 GMT
            Not After : May 14 00:07:30 2026 GMT
        Subject: CN=EC15C7FE03A8E5EB8C99936D92884ECDBB35AFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:0f:f8:61:b1:11:3c:4d:37:67:0b:7a:bf:
                    bd:db:e9:88:36:23:10:c0:21:c9:fd:e1:a2:ce:f0:
                    68:2a:93:e1:43:a6:ca:c8:80:67:ea:71:e9:31:eb:
                    f4:70:52:dd:a9:a6:9e:88:25:94:ff:26:de:fe:50:
                    b1:a6:9f:b3:a8:50:e4:e1:e3:05:a0:86:7e:18:80:
                    99:4a:1f:f9:8d:c7:08:eb:5d:3f:cf:19:d6:51:2f:
                    23:04:df:41:d2:87:14:88:50:33:90:e8:1f:8a:95:
                    c0:84:59:0c:62:4d:e6:4c:38:c2:44:89:3a:5a:47:
                    2d:99:ce:68:da:58:df:34:48:a6:9c:58:02:eb:13:
                    c8:1e:d9:cf:52:31:bd:12:51:d8:79:8b:2a:f1:42:
                    4f:0f:9b:38:2b:dc:ca:7b:f9:0a:93:03:99:a7:30:
                    fc:dd:f3:62:e5:81:04:1e:5a:e4:db:7f:dc:20:5d:
                    d5:2c:4b:dd:9c:35:8d:fe:1f:25:f3:ea:2e:b0:c1:
                    49:df:98:f0:b0:38:55:d1:46:59:41:dd:28:65:a9:
                    fe:2a:a0:09:55:a7:62:c8:58:3e:f8:f7:51:91:7c:
                    09:df:d6:ad:b7:8e:7e:37:14:3c:f2:06:57:6b:af:
                    9f:5f:f0:ba:4d:a1:92:57:16:46:ab:dd:b4:ed:f0:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:15:C7:FE:03:A8:E5:EB:8C:99:93:6D:92:88:4E:CD:BB:35:AF:ED
            X509v3 Authority Key Identifier:
                keyid:4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bf:dd:f8:6a:4f:ca:56:82:60:7e:d4:e7:90:18:18:36:b8:
         6e:e9:18:13:b3:11:da:c6:41:b2:54:92:df:3d:4b:40:58:b5:
         a6:43:d6:da:71:3e:68:34:3c:ae:d6:78:89:8c:23:62:fe:20:
         0c:15:82:47:7f:7d:a2:f3:e9:c7:8f:e9:3c:c9:61:73:7f:93:
         bf:2b:3e:66:de:80:e7:5d:46:c5:05:63:01:9e:1a:f5:a2:e3:
         c4:44:b8:a5:c1:5c:5c:23:b0:1a:62:2a:80:52:da:bf:16:60:
         29:e7:71:fe:7c:cb:9a:a5:18:94:84:cc:c4:f6:57:de:c9:6e:
         a6:1f:49:2f:0a:fb:92:52:7d:28:17:5b:ef:d2:d2:87:d6:f8:
         da:31:78:2d:a2:39:fa:39:5b:82:8b:d3:d3:24:10:f8:b0:83:
         91:24:1e:13:f8:cd:65:d6:4f:2d:86:51:48:c4:b1:5d:b5:06:
         b0:36:54:6f:d4:1f:bd:49:ef:42:8f:71:42:79:06:6d:af:04:
         4f:cf:1f:f2:4a:3b:59:0a:1b:83:57:9c:31:c4:98:0f:d2:7f:
         d6:58:51:7b:69:73:4d:1f:c1:7e:14:28:b9:0d:62:50:78:b9:
         b8:48:dc:2b:e1:62:84:5a:78:25:3e:d2:ba:ae:86:30:2c:80:
         53:1b:29:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:38 2026 by rpki-client