Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft
File:                     4758527FF3B22322A18B7C6E96C4B735849522DD.mft (raw, json)
Hash identifier:          P9lxUMrG1kcasQ0Ll8qb3H8IcUveG6S+oSixA1ml1C4=
Subject key identifier:   DA:78:3E:2C:E6:9F:71:FC:77:DC:02:FF:AB:B1:24:55:CC:D3:96:F2
Authority key identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD
Certificate issuer:       /CN=4758527FF3B22322A18B7C6E96C4B735849522DD
Certificate serial:       1A74FE59FC1439C46A022F79A730431F1433CF27
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 09:25:51 +0000
Manifest this update:     Tue 12 May 2026 09:20:51 +0000
Manifest next update:     Wed 13 May 2026 13:00:51 +0000
Files and hashes:         1: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: ylJge9zfunu5v1K50c60A5sirSQ6LDBHCjbwOHfjZrQ=)
                          2: 4758527FF3B22322A18B7C6E96C4B735849522DD.crl (hash: A2BQnx94byNdeGOulxtRSkotpH69MyI5gJHXnfLFJ0k=)
                          3: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: vc1a0hkgw07q2g/3N/OSu/ce4WygjulqelJe6kgXLWg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl
                          rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:74:fe:59:fc:14:39:c4:6a:02:2f:79:a7:30:43:1f:14:33:cf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4758527FF3B22322A18B7C6E96C4B735849522DD
        Validity
            Not Before: May 12 09:20:51 2026 GMT
            Not After : May 13 13:00:51 2026 GMT
        Subject: CN=DA783E2CE69F71FC77DC02FFABB12455CCD396F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:58:c4:7c:ac:46:57:53:f2:8c:07:36:93:
                    a6:20:22:cd:ff:3d:47:0c:f6:b6:30:05:a8:6f:cc:
                    4c:f4:56:2a:cd:50:94:54:41:e6:9d:f1:22:54:72:
                    e1:20:8a:06:86:3d:68:d7:99:e5:f4:2c:17:8d:f8:
                    98:1d:16:bf:35:50:5c:b8:96:58:24:f4:52:63:91:
                    70:3f:69:58:9e:c6:19:fb:e9:9e:37:be:2a:fd:1c:
                    95:9c:d1:9f:f4:7b:02:d4:10:56:c4:15:01:4b:31:
                    50:c8:c8:b7:32:97:c2:81:66:eb:91:7e:fa:90:31:
                    b2:be:28:b2:91:3f:cb:cd:fa:d0:76:2e:db:d0:c5:
                    33:be:c5:11:a0:db:31:9c:e4:7e:60:bc:58:82:69:
                    34:04:fc:97:2f:b6:61:96:6a:32:a9:e0:a8:92:88:
                    21:9f:0f:24:8c:85:78:38:95:03:f5:09:20:42:f6:
                    6a:80:73:39:47:45:e2:4e:41:25:de:c9:51:5d:ff:
                    34:27:08:76:71:a3:28:17:70:fc:d8:d5:7a:d1:c8:
                    c4:67:73:b2:33:61:7b:dd:b5:46:0c:49:82:2c:98:
                    38:f8:67:5a:38:30:11:4f:3b:98:21:8f:0b:a3:f3:
                    4e:c3:8d:f2:a2:b1:b0:f0:d3:29:17:57:eb:50:d2:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:3E:2C:E6:9F:71:FC:77:DC:02:FF:AB:B1:24:55:CC:D3:96:F2
            X509v3 Authority Key Identifier:
                keyid:47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:91:7b:a2:de:2d:77:16:d3:f6:f9:6b:80:d8:00:38:19:27:
         97:62:1f:5f:36:55:f6:eb:19:9f:be:6c:fe:6a:18:ea:c6:a4:
         d7:b2:f3:4f:01:07:b6:ac:8a:ad:af:bd:6e:36:a3:5b:e0:9e:
         2f:f3:ad:f5:ca:c3:ab:cd:7e:4e:7f:9b:30:92:8c:a1:bc:41:
         e2:82:61:f1:d6:99:47:51:fc:4c:67:53:a9:8b:61:ac:6b:d9:
         ff:bc:21:55:af:0e:3c:4a:f3:6a:d1:ce:9e:59:65:9f:a3:ee:
         cb:8f:ca:7d:9d:82:c8:13:73:fc:c9:fb:05:2c:8f:57:c1:f7:
         06:ce:bd:64:4a:9a:47:ee:40:b0:0e:fc:80:a7:26:19:c0:21:
         ce:e5:5b:d2:8d:c8:32:75:4b:61:cf:f0:21:80:e0:4a:0a:f9:
         8d:be:02:a9:35:22:f9:5a:71:a1:62:af:28:0e:20:08:c5:24:
         8b:af:9c:dd:2f:9c:4d:ec:dd:a0:19:3b:98:14:38:ba:76:77:
         f1:6b:01:0f:29:db:a5:9d:e2:36:f7:28:55:6f:7e:f9:12:5d:
         e8:d3:4c:a6:28:ef:0f:94:05:bc:9d:d3:2c:34:8d:de:09:4f:
         26:d0:5b:df:b6:8d:60:19:c1:c0:77:ac:19:0f:eb:fe:24:75:
         5f:b4:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:33 2026 by rpki-client