Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
File:                     4BD77983D98742985400276FF0F5959696EA7807.mft (raw, json)
Hash identifier:          xWfJA7meij9DcZqTLU05l09oK8+1BMi3ibH5F1Iu8tQ=
Subject key identifier:   AD:E1:FF:3A:57:DE:B7:93:CB:00:CE:8D:E2:67:AB:A6:EE:DC:9D:A9
Authority key identifier: 4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07
Certificate issuer:       /CN=4BD77983D98742985400276FF0F5959696EA7807
Certificate serial:       6D215E6D213D75DC9EF5517A02F477204AF7C4CE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 01:05:23 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 04:17:23 +0000
Files and hashes:         1: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: 2ktJ+LGrBdyxqO+5Ni21bj0NM08xpyYMFhaaSWYusJY=)
                          2: 4BD77983D98742985400276FF0F5959696EA7807.crl (hash: H/oM0+UXaWE4IkcKGfHYjTghzJlsKiKY80oME6HcHeE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl
                          rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:21:5e:6d:21:3d:75:dc:9e:f5:51:7a:02:f4:77:20:4a:f7:c4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD77983D98742985400276FF0F5959696EA7807
        Validity
            Not Before: Jul 24 01:00:23 2026 GMT
            Not After : Jul 25 04:17:23 2026 GMT
        Subject: CN=ADE1FF3A57DEB793CB00CE8DE267ABA6EEDC9DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:18:22:36:f0:1c:d4:06:f5:dc:65:a8:33:e4:
                    4d:5b:65:80:34:71:95:be:cd:40:10:d5:3a:be:98:
                    08:c3:a5:c9:09:db:b3:04:0c:50:fa:4d:0f:bc:bd:
                    6c:df:03:48:08:81:49:71:61:3d:51:26:a3:c0:6c:
                    fe:24:26:bd:ef:7b:ec:98:37:84:47:28:53:2e:75:
                    da:b2:26:2c:55:40:81:55:9e:b5:ec:ba:50:85:82:
                    20:9e:79:d6:49:17:13:7b:e0:d3:2e:af:4f:71:de:
                    80:a4:55:9c:e4:fe:99:1e:20:f8:8f:90:d0:55:62:
                    13:3e:80:ed:1f:5d:55:52:94:53:77:dd:16:df:09:
                    f3:32:d4:18:2c:ee:6e:f8:60:75:64:20:9f:61:93:
                    52:f6:c6:d9:14:db:e6:1c:76:f3:5f:34:ef:02:8a:
                    6f:d5:60:f8:8d:49:c0:2e:cd:80:84:c6:42:5d:48:
                    b6:b8:df:7b:26:a2:54:65:81:10:38:c9:c7:95:7b:
                    82:3a:ca:47:36:18:20:8e:55:25:8b:f1:16:25:e1:
                    e0:59:80:ac:10:a2:5d:95:97:9f:44:cf:14:64:d7:
                    3d:22:27:9b:2d:98:b4:cb:a1:cd:64:94:b0:79:40:
                    29:06:9b:cc:56:3d:ff:88:20:e6:ef:35:b2:65:a7:
                    1a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E1:FF:3A:57:DE:B7:93:CB:00:CE:8D:E2:67:AB:A6:EE:DC:9D:A9
            X509v3 Authority Key Identifier:
                keyid:4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ea:f5:68:6b:57:b0:3c:54:2b:b5:e6:db:db:2d:2a:1c:02:
         e8:3f:b6:78:9c:11:09:7c:fd:3c:a3:82:94:6b:7b:17:cf:b6:
         92:0d:80:59:8e:02:07:ee:4d:de:d1:37:5a:e6:a3:6b:a0:65:
         9c:be:d3:3f:f9:37:de:27:89:d1:77:54:6b:41:6d:2d:27:03:
         b3:41:50:3b:db:74:10:30:3e:11:53:f1:5c:47:b7:93:34:e3:
         86:c0:da:e3:ba:ee:e1:f2:99:af:17:a8:8f:a4:bf:9d:66:7d:
         24:7d:97:74:12:43:18:06:36:52:f2:f0:a1:c3:fb:fc:66:7d:
         0e:f9:0d:50:fc:1e:5f:f5:0e:ea:c9:9b:27:9e:9a:39:41:78:
         b8:cf:7a:87:07:b2:4f:77:8d:9c:37:fa:fe:62:fa:29:51:81:
         5a:8d:e9:82:b3:5d:19:59:7b:09:bc:01:b7:f5:40:54:09:31:
         2c:8e:3d:55:6b:04:21:9f:1e:25:44:ae:fe:38:ae:12:43:07:
         9a:f9:e9:2a:d1:44:58:eb:f0:b0:c0:ca:66:16:f7:24:6a:08:
         b4:59:30:f4:e9:cf:c4:36:0b:5c:6c:3b:f6:2f:ad:31:95:29:
         c2:39:4e:e4:33:d8:54:c4:98:65:ba:b2:78:7a:0d:49:6a:0f:
         0c:9a:2c:c7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbSFebSE9ddye9VF6AvR3IEr3xM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5
NkVBNzgwNzAeFw0yNjA3MjQwMTAwMjNaFw0yNjA3MjUwNDE3MjNaMDMxMTAvBgNV
BAMTKEFERTFGRjNBNTdERUI3OTNDQjAwQ0U4REUyNjdBQkE2RUVEQzlEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGCI28BzUBvXcZagz5E1bZYA0
cZW+zUAQ1Tq+mAjDpckJ27MEDFD6TQ+8vWzfA0gIgUlxYT1RJqPAbP4kJr3ve+yY
N4RHKFMuddqyJixVQIFVnrXsulCFgiCeedZJFxN74NMur09x3oCkVZzk/pkeIPiP
kNBVYhM+gO0fXVVSlFN33RbfCfMy1Bgs7m74YHVkIJ9hk1L2xtkU2+YcdvNfNO8C
im/VYPiNScAuzYCExkJdSLa433smolRlgRA4yceVe4I6ykc2GCCOVSWL8RYl4eBZ
gKwQol2Vl59EzxRk1z0iJ5stmLTLoc1klLB5QCkGm8xWPf+IIObvNbJlpxp3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUreH/Olfet5PLAM6N4merpu7cnakwHwYDVR0j
BBgwFoAUS9d5g9mHQphUACdv8PWVlpbqeAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODcxYWRhOWUtZTJhOS00MDBlLThkZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNE
OTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5NkVBNzgwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QkQ3Nzk4M0Q5ODc0Mjk4NTQwMDI3NkZGMEY1OTU5Njk2RUE3
ODA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk
ZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1
OTY5NkVBNzgwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAArq9WhrV7A8VCu15tvbLSocAug/tnicEQl8
/TyjgpRrexfPtpINgFmOAgfuTd7RN1rmo2ugZZy+0z/5N94nidF3VGtBbS0nA7NB
UDvbdBAwPhFT8VxHt5M044bA2uO67uHyma8XqI+kv51mfSR9l3QSQxgGNlLy8KHD
+/xmfQ75DVD8Hl/1DurJmyeemjlBeLjPeocHsk93jZw3+v5i+ilRgVqN6YKzXRlZ
ewm8Abf1QFQJMSyOPVVrBCGfHiVErv44rhJDB5r56SrRRFjr8LDAymYW9yRqCLRZ
MPTpz8Q2C1xsO/YvrTGVKcI5TuQz2FTEmGW6snh6DUlqDwyaLMc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:04 2026 by rpki-client