Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
File:                     4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json)
Hash identifier:          sNCvYqB+rUFKWuI2PA2hl/62m0yfLq9rK/RsJiuJA94=
Subject key identifier:   03:5E:81:BE:A9:5B:26:F2:E8:7B:56:8D:58:4E:FF:49:AE:79:28:8A
Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
Certificate issuer:       /CN=4BCE188DE42B539EBB860A376D13FE292B001147
Certificate serial:       7BC34B823B50934B1F58EE9362B21E477638A2F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
Manifest number:          C4
Signing time:             Sat 26 Sep 2026 03:44:53 +0000
Manifest this update:     Sat 26 Sep 2026 03:39:53 +0000
Manifest next update:     Sun 27 Sep 2026 06:38:53 +0000
Files and hashes:         1: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=)
                          2: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=)
                          3: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: wtB/3cYtbXTa0Qw356AFqSBvQnLMbQbRQUiJrnNy6vI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
                          rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 06:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c3:4b:82:3b:50:93:4b:1f:58:ee:93:62:b2:1e:47:76:38:a2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147
        Validity
            Not Before: Sep 26 03:39:53 2026 GMT
            Not After : Sep 27 06:38:53 2026 GMT
        Subject: CN=035E81BEA95B26F2E87B568D584EFF49AE79288A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:8b:b0:a1:4b:71:5b:99:c8:d4:bb:4f:ec:
                    d7:a9:89:7f:8d:51:8c:48:8b:36:35:0f:bf:28:d1:
                    3a:c5:c0:f8:83:73:72:52:2f:ee:a2:b2:90:14:50:
                    5e:07:71:05:62:f7:07:af:f8:a5:2f:d2:32:51:cb:
                    2a:ea:8f:49:1f:20:0f:a9:df:da:0c:bc:32:6e:dd:
                    2b:5a:4f:84:d2:63:07:df:45:26:9a:95:66:1c:ef:
                    80:57:34:32:14:fb:84:ea:27:87:65:fe:f1:f9:29:
                    53:e7:f9:eb:cd:bb:db:1f:c0:df:86:aa:04:96:e6:
                    9d:2f:c6:be:6d:cd:21:f3:87:a6:4b:5e:f3:fd:c2:
                    39:35:c8:b1:c8:96:dd:df:93:67:cd:8f:8d:49:f9:
                    dd:2d:dd:bd:ad:29:a8:8b:44:94:63:c1:7b:fd:69:
                    80:cf:10:09:70:cf:02:19:88:d7:32:93:43:03:a6:
                    99:8f:a7:83:b3:2b:72:88:58:7b:24:f7:de:e5:4f:
                    7f:08:8d:83:bc:e4:b6:e8:49:66:eb:85:db:05:e0:
                    e7:2a:eb:64:b1:e7:b3:3d:7c:d1:e3:1a:56:0f:ec:
                    01:4c:84:6f:ab:57:49:77:69:e2:d8:2d:0b:95:57:
                    cd:95:47:89:28:d9:88:cd:76:61:9c:b0:e4:d6:36:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:81:BE:A9:5B:26:F2:E8:7B:56:8D:58:4E:FF:49:AE:79:28:8A
            X509v3 Authority Key Identifier:
                keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:86:75:52:5a:ab:cb:c6:08:1e:2e:9c:81:e2:0c:e1:27:86:
         61:34:85:32:f1:30:72:3f:15:e0:ca:f5:b7:81:87:bd:7e:3d:
         dc:5a:c5:8f:92:54:c4:89:65:76:94:5e:05:02:df:0c:5c:ab:
         a9:be:d1:2b:23:83:7a:de:b2:1b:fc:2e:3d:23:8d:3d:3e:45:
         a0:e5:14:1d:8f:0f:8a:3d:cd:c1:a9:34:d4:11:79:3a:96:91:
         2b:0e:64:4e:59:9c:23:d1:d1:ae:f9:54:b3:75:b9:d4:25:e4:
         70:a7:4b:c1:9d:e7:a5:26:ee:db:3f:94:d9:f1:94:86:d2:02:
         30:6a:8c:d4:22:ba:d1:9e:45:b2:5a:72:2a:b0:4b:a3:a1:a0:
         06:a5:d4:07:2e:b8:19:c3:65:f3:ee:1e:85:dd:82:39:8e:2c:
         0d:c1:dd:19:6b:f5:f0:59:7d:71:60:e2:dd:28:ff:85:be:96:
         5d:96:66:66:75:72:85:97:f2:50:75:09:66:3d:c5:91:ee:05:
         06:eb:b3:ea:31:08:10:2e:a4:c5:cc:e0:9e:35:53:ab:7b:7a:
         0c:ba:f3:13:be:04:4d:bc:e3:95:5b:b5:c7:70:a2:03:f6:ad:
         47:af:3f:19:f8:ac:cd:7c:d2:0f:0d:63:3c:9f:7e:55:32:0c:
         c7:b2:61:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:22:16 2026 by rpki-client