Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
File:                     476A27F6557241F0C8B13CD6474412B065E838A1.mft (raw, json)
Hash identifier:          vLF/9ajwzYuTn0riYjxJqE0WYxI13RP/zr1pz+gMDOE=
Subject key identifier:   40:A3:11:1E:BE:0F:35:7A:61:46:AC:59:E4:2C:49:C5:19:38:63:59
Authority key identifier: 47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1
Certificate issuer:       /CN=476A27F6557241F0C8B13CD6474412B065E838A1
Certificate serial:       91ED9F475FDB209ECBA40BFB797B2C5F5A763D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 13:38:40 +0000
Manifest this update:     Tue 12 May 2026 13:33:40 +0000
Manifest next update:     Wed 13 May 2026 16:54:40 +0000
Files and hashes:         1: 476A27F6557241F0C8B13CD6474412B065E838A1.crl (hash: eKUv+hK4uSeUaQHWWli2u+2ubRNm5TZ7I1xfHVrrVS8=)
                          2: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: OYr7fPU7LqGA/4X0nRg4WLnhKqVCaQ39UeYK0Ag4/eg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl
                          rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            91:ed:9f:47:5f:db:20:9e:cb:a4:0b:fb:79:7b:2c:5f:5a:76:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476A27F6557241F0C8B13CD6474412B065E838A1
        Validity
            Not Before: May 12 13:33:40 2026 GMT
            Not After : May 13 16:54:40 2026 GMT
        Subject: CN=40A3111EBE0F357A6146AC59E42C49C519386359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:d2:5c:41:27:7d:fd:4b:a5:1e:65:f2:a7:
                    49:bb:e2:3c:2c:b1:e0:8e:78:14:d9:df:83:bd:57:
                    c3:e4:23:7a:7a:21:be:76:02:fb:d5:d9:ac:37:db:
                    4e:b7:c6:43:5a:cd:a8:06:70:d6:ce:e9:1d:ad:7c:
                    5c:b1:51:81:37:a0:b0:eb:f7:8a:06:00:40:21:cd:
                    6b:d7:c2:4e:f8:33:21:0f:c8:a1:ba:37:5b:db:9e:
                    ab:ae:c2:14:5d:9f:7d:29:55:18:33:27:46:4f:80:
                    e4:16:25:3e:06:dd:f2:72:47:c9:5d:5a:c4:07:9f:
                    ae:71:8b:8d:a0:23:9a:b2:55:8d:e0:04:4e:0a:c4:
                    ff:2f:68:90:77:2d:56:32:c5:01:3e:3f:be:b1:27:
                    99:e6:d5:74:a9:30:2f:60:64:25:13:e8:10:cc:08:
                    04:e5:02:f4:88:c5:db:75:50:ce:be:f0:ba:ec:f1:
                    66:3b:d8:2e:16:8f:54:fc:0f:17:00:db:66:a9:6d:
                    ea:03:b5:04:10:74:ce:47:67:48:a8:a0:f0:c6:96:
                    a2:b7:91:24:ea:13:5d:1b:20:d3:73:76:02:79:d1:
                    85:04:06:cb:19:6f:51:e3:89:45:11:76:5b:e0:dd:
                    b5:6a:38:87:89:00:a3:ba:af:e2:3c:17:e0:aa:34:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A3:11:1E:BE:0F:35:7A:61:46:AC:59:E4:2C:49:C5:19:38:63:59
            X509v3 Authority Key Identifier:
                keyid:47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:60:97:33:06:f1:c2:3e:7e:5d:ce:17:4c:5b:ac:e1:9f:32:
         3f:00:cb:19:e8:a1:3e:5c:86:bf:f0:e6:54:f5:54:48:48:de:
         68:6e:af:e1:be:4c:0e:d3:ff:40:ff:d6:48:dd:66:a6:11:cd:
         59:16:98:8e:4b:24:c1:d5:e5:90:7e:63:08:aa:c2:3d:d3:9f:
         ab:3d:61:fa:de:0e:9d:93:af:4f:a9:64:c0:88:50:2b:47:51:
         1c:42:bf:aa:43:59:98:f6:f2:a7:51:8f:9f:e2:b8:11:94:b5:
         81:f7:21:68:2e:22:89:f0:32:4e:17:84:5c:75:22:fe:9c:ac:
         21:61:da:b5:32:95:38:42:90:db:7b:77:cc:70:0a:e4:0f:6d:
         09:40:be:ed:02:fa:b9:75:31:84:13:12:bf:09:86:aa:09:3b:
         8e:31:2f:76:f4:e7:dd:48:2f:b8:f1:e1:4c:df:bd:65:5b:81:
         0a:93:74:cd:87:2c:e6:df:26:f4:40:90:bb:05:6f:1e:c8:06:
         7e:ba:60:91:28:4d:e0:b9:6e:5f:dc:9d:21:7e:34:49:ba:f7:
         f1:18:f9:f4:f6:95:3b:c3:b3:60:24:4a:21:c8:a1:37:d8:bf:
         c0:d6:35:15:87:09:44:cc:31:d2:f3:7e:27:68:7b:87:bb:51:
         31:eb:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:06 2026 by rpki-client