Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft
File:                     04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft (raw, json)
Hash identifier:          gsBTXaZkje8qUGuSnVADb1ntzqfW+7v4dKCYE163VpQ=
Subject key identifier:   18:93:0B:96:A4:51:07:D3:72:FE:FA:8F:0C:12:DB:DC:F5:98:B3:97
Authority key identifier: 04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E
Certificate issuer:       /CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E
Certificate serial:       3810F403A18498B92F995D01345F4D70DDBFA031
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 12:58:09 +0000
Manifest this update:     Tue 12 May 2026 12:53:09 +0000
Manifest next update:     Wed 13 May 2026 15:14:09 +0000
Files and hashes:         1: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CZVghfd+RMSIYEhXYYQSwl8vEVYu7UKTsPMOPTno7kM=)
                          2: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl (hash: 4McwHktL53VZzL5vHyIB5ZzoVdAEBFZqCVFqhWjOd4s=)
                          3: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: JGTo44TwhcX4ivQ52rHxAzJZareWjfxAS0kPXAmQ5EE=)
                          4: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: 40yX7GBS0nX6cgx29ls12Yp5h3Ba+XKjPu45g8FVQzo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl
                          rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:10:f4:03:a1:84:98:b9:2f:99:5d:01:34:5f:4d:70:dd:bf:a0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E
        Validity
            Not Before: May 12 12:53:09 2026 GMT
            Not After : May 13 15:14:09 2026 GMT
        Subject: CN=18930B96A45107D372FEFA8F0C12DBDCF598B397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:20:f8:a0:f9:2c:0e:7e:59:a8:e2:69:d4:
                    ea:40:7f:df:be:ec:52:c0:51:58:bd:1d:98:ab:3f:
                    62:a4:fc:fd:b1:9a:33:3b:7a:ed:0c:c2:53:b1:ce:
                    0b:22:b8:98:e7:1f:23:4c:73:24:b9:69:40:4b:7f:
                    91:4c:2b:e3:7b:62:48:58:f2:c6:f8:0b:c2:86:df:
                    6f:2b:5b:a4:bb:06:6e:e3:54:6e:e9:00:68:c0:8e:
                    a3:a6:f2:1e:15:ae:82:b3:3f:97:e1:f7:f8:aa:e1:
                    6e:24:0f:7e:32:cd:09:25:bc:0b:9c:6a:72:80:e9:
                    b9:f6:2e:ee:98:2b:85:91:82:d7:a7:07:04:81:30:
                    ff:ee:1a:37:f1:88:7d:18:c5:49:88:ab:a4:4e:16:
                    b9:b0:bf:7a:62:79:0c:27:8b:ad:66:4f:cc:1e:4c:
                    cd:a2:13:d4:42:69:72:1a:98:15:4c:16:88:95:ca:
                    96:84:57:3c:65:13:ed:28:0c:e3:7a:cd:99:61:4f:
                    a6:14:fb:c6:41:37:fc:b2:ab:ca:57:d7:70:83:a2:
                    7d:98:c0:5d:f3:55:5e:aa:b5:8d:76:0b:86:1f:f9:
                    0a:93:00:ad:ca:b0:0c:82:1d:87:be:a8:28:14:66:
                    ed:6f:f9:cb:38:d9:32:d5:47:2a:03:9a:f6:28:a2:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:0B:96:A4:51:07:D3:72:FE:FA:8F:0C:12:DB:DC:F5:98:B3:97
            X509v3 Authority Key Identifier:
                keyid:04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:ad:32:44:25:be:80:53:22:bb:ab:59:9b:4f:b6:bf:86:
         ee:00:06:05:de:41:ee:3c:45:90:41:ff:35:82:e5:2f:ae:df:
         c0:8d:53:02:32:d4:73:75:41:be:e3:f7:56:d7:be:fa:63:6a:
         e0:98:f9:51:78:67:d8:d3:9a:f3:39:84:5c:b2:36:e2:93:64:
         96:23:8c:25:34:7d:8c:d0:ab:d1:2e:19:cd:47:f9:c3:0e:03:
         f8:91:ce:af:08:9c:f3:3d:2d:4c:b5:45:9c:23:52:86:c5:55:
         50:a4:0a:a9:49:48:62:98:d5:48:18:dc:f1:70:53:84:b8:66:
         dd:60:a1:ee:da:2f:fd:1d:08:0c:91:55:47:f4:8e:ed:cb:ae:
         94:bb:54:48:1f:c1:27:98:c6:0b:d4:ed:36:8a:98:42:1b:88:
         c1:17:90:88:50:1f:8f:92:6a:56:f1:fb:bf:9e:9b:fd:82:a8:
         44:e1:db:d7:35:47:b4:28:8a:01:64:11:6c:4f:30:87:21:ad:
         32:4d:c5:0e:2e:28:44:d9:36:29:88:60:24:c5:a7:e0:c4:bc:
         58:41:53:f6:83:94:fa:db:ab:43:69:c8:2f:3c:7d:6a:a8:fd:
         56:45:51:f7:20:7b:95:bb:d3:83:4b:3c:37:87:62:70:f3:e4:
         ff:70:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:37 2026 by rpki-client