Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
File:                     4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json)
Hash identifier:          wzwFUTZSV8X38kKZaVE9A9peSre0HtxFbBh9AtqdUas=
Subject key identifier:   FA:79:5A:32:24:F3:34:A6:3E:B0:DF:41:F6:D1:51:FB:EE:A4:CF:18
Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
Certificate issuer:       /CN=4BCE188DE42B539EBB860A376D13FE292B001147
Certificate serial:       1BA2D647B0EEEE44CB03D056A35D49CC16152D11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
Manifest number:          0F
Signing time:             Wed 13 May 2026 02:36:34 +0000
Manifest this update:     Wed 13 May 2026 02:31:34 +0000
Manifest next update:     Thu 14 May 2026 05:37:34 +0000
Files and hashes:         1: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=)
                          2: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=)
                          3: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: p4v61DJpokveuhWVj4K1n12+vd0QsOn4Np8vsShYi6Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
                          rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a2:d6:47:b0:ee:ee:44:cb:03:d0:56:a3:5d:49:cc:16:15:2d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147
        Validity
            Not Before: May 13 02:31:34 2026 GMT
            Not After : May 14 05:37:34 2026 GMT
        Subject: CN=FA795A3224F334A63EB0DF41F6D151FBEEA4CF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:fa:88:63:db:1b:e9:d0:d9:0c:78:a4:ee:
                    ec:64:36:cb:8f:c5:50:75:5e:2f:11:a5:61:6e:a7:
                    9d:8b:0c:f2:0d:c0:97:b8:1f:41:37:e0:e9:ef:36:
                    22:98:63:e7:fc:f9:35:7f:5d:d7:4f:60:5a:14:44:
                    37:97:8a:89:b6:d6:c5:fa:01:ce:2e:2f:24:70:be:
                    14:3c:89:7e:27:56:78:ca:13:1d:85:05:6e:86:0c:
                    43:d0:b7:9e:ae:e0:60:ba:d9:c0:1d:71:34:b0:1a:
                    c4:d7:5d:b4:88:48:79:44:2d:4c:76:45:b0:0f:7f:
                    92:7f:d8:b4:1a:e7:fa:84:86:c1:42:8f:3c:9b:a1:
                    7e:fc:9a:ab:16:3c:7f:87:60:37:fc:f8:45:35:c0:
                    d4:42:85:87:4e:e8:27:0b:b0:0b:60:d6:7c:06:73:
                    d4:67:15:61:05:8f:5b:94:7a:db:78:c3:ed:a6:fb:
                    51:b5:b8:06:bb:e4:3a:10:d4:1c:d7:a9:42:60:a1:
                    79:cc:85:e7:99:52:b6:9b:72:55:73:ce:60:98:81:
                    03:31:b9:f4:bc:6c:a9:9b:c2:00:71:dd:f0:06:9f:
                    c0:fe:43:06:ab:c9:24:2c:39:38:70:16:9d:01:23:
                    97:e6:08:79:11:d8:64:3d:13:fd:34:06:f2:5c:b7:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:79:5A:32:24:F3:34:A6:3E:B0:DF:41:F6:D1:51:FB:EE:A4:CF:18
            X509v3 Authority Key Identifier:
                keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:dd:fa:39:39:08:e2:10:c4:73:75:31:c2:3d:bd:2f:d8:6c:
         ba:f1:38:cd:e0:91:1a:81:52:94:00:95:15:46:b6:d3:2e:17:
         4e:a2:6b:93:f0:7c:ac:e6:40:b8:51:77:97:5a:75:94:b1:23:
         0c:50:95:ae:26:c1:73:db:e2:58:5c:8b:a5:d2:15:19:7a:fb:
         08:46:01:a0:85:08:4b:8d:5b:e5:53:3f:88:56:2c:0a:6c:91:
         81:8b:45:38:57:25:25:73:a2:97:7b:2c:4c:0c:41:32:5a:aa:
         51:ea:38:24:be:07:8e:36:5c:93:77:94:e1:c8:8a:38:93:c9:
         89:6d:cf:34:fa:3a:e6:a1:6b:5a:98:02:e3:81:ed:71:46:ee:
         da:8f:a1:fd:c0:84:99:c6:ec:c7:d3:ea:3e:c4:fb:3c:87:e8:
         e7:11:c6:5a:e5:2f:ac:42:d1:67:f6:50:08:80:0c:63:c3:95:
         53:bc:90:c1:1f:e9:3e:ee:84:46:7c:c7:28:04:e7:3d:e3:e1:
         c3:e6:75:05:f0:7f:e4:45:bb:32:d6:6e:4b:65:c5:9f:1e:09:
         7b:ac:92:ed:62:a8:b4:ce:d6:52:ae:47:d1:dd:d3:83:f4:33:
         2c:33:e4:5f:fc:fb:8b:9f:3e:70:9e:34:11:83:e9:ea:b0:80:
         af:d2:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:54 2026 by rpki-client