Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
File:                     4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft (raw, json)
Hash identifier:          OTxVBYNcqXrK+gMTEQUVkL0XfC51AyS7/UH/nb0Zxv4=
Subject key identifier:   6C:DC:48:93:40:9F:D1:2E:17:39:32:AE:86:73:3C:3F:A2:3B:B3:AD
Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3
Certificate issuer:       /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
Certificate serial:       4520B6DFAA41790E571291746DD4CE94BC06ED47
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 19:49:18 +0000
Manifest this update:     Thu 23 Jul 2026 19:44:18 +0000
Manifest next update:     Fri 24 Jul 2026 22:44:18 +0000
Files and hashes:         1: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl (hash: vtz06i/Aw6Iq65oWaV7Hzmse8PmS98rpiLROBVoO+mk=)
                          2: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl
                          rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 22:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:20:b6:df:aa:41:79:0e:57:12:91:74:6d:d4:ce:94:bc:06:ed:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
        Validity
            Not Before: Jul 23 19:44:18 2026 GMT
            Not After : Jul 24 22:44:18 2026 GMT
        Subject: CN=6CDC4893409FD12E173932AE86733C3FA23BB3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:74:19:46:eb:05:d5:7c:4e:29:b2:f4:69:
                    00:e7:18:4b:44:7f:6c:8c:92:e2:98:3f:95:88:ad:
                    25:6f:fa:d5:7e:2d:6a:40:db:19:1b:a4:4d:7f:61:
                    ea:47:f8:48:df:0c:ad:10:3f:ea:36:07:7d:ee:ad:
                    9b:82:c2:90:2c:1b:ae:c1:a4:2f:ac:51:9a:80:8e:
                    32:99:2b:43:0c:20:39:10:9c:2a:7e:bf:d4:8b:af:
                    5c:7d:0d:b0:22:87:e0:3c:a0:dc:d2:61:16:ce:24:
                    ea:c2:4e:6a:09:f9:35:21:e0:33:50:49:6b:2e:87:
                    03:24:3f:33:7a:ef:c6:d4:9f:26:08:96:51:b7:0c:
                    68:c8:24:25:99:86:d8:6a:b8:b4:ad:91:22:b3:78:
                    25:40:d0:0d:de:1a:7d:b6:bc:d6:5a:e9:08:dd:a8:
                    61:20:c2:1d:fd:b5:0e:2f:69:8c:d0:8d:85:4a:8f:
                    ed:c0:5d:cf:5d:59:fd:69:77:72:6f:f3:ee:46:b3:
                    45:d6:f2:93:c9:7f:c0:d1:23:7b:ec:fc:46:9a:c1:
                    e7:39:0f:7c:d8:f3:d7:a6:13:64:67:0e:9f:33:5a:
                    60:6a:c5:17:80:e5:72:f1:bb:24:ad:6a:00:21:01:
                    fd:52:9e:90:13:fc:d6:9d:24:c1:5d:ca:6c:73:5b:
                    b3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DC:48:93:40:9F:D1:2E:17:39:32:AE:86:73:3C:3F:A2:3B:B3:AD
            X509v3 Authority Key Identifier:
                keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:16:c4:6c:83:32:02:20:13:9d:d7:3b:6c:d6:00:d9:01:
         28:f1:c2:1e:be:ca:86:6d:76:15:94:70:6f:b0:9e:aa:da:ea:
         32:eb:41:7d:58:6a:c6:01:f2:a1:64:50:48:c0:7d:e0:2f:d7:
         5b:a3:ce:df:19:54:ad:49:89:5e:51:7d:f1:38:73:af:1b:7e:
         cb:a9:c2:b0:41:38:20:06:b2:96:d2:2e:c9:82:07:ba:a2:b2:
         13:1b:01:04:2f:96:7a:23:28:3a:37:82:1b:3f:e9:0f:13:3e:
         4c:92:1b:06:1f:31:7b:5c:0b:de:a4:5b:8b:a5:5c:fb:77:af:
         a6:aa:f7:38:4d:b7:59:32:b1:58:5b:02:8c:1c:ab:77:b2:c1:
         72:fe:63:75:3a:2c:af:ca:41:a7:fe:aa:b5:d4:37:07:83:63:
         bc:f6:f1:ca:62:e4:f2:c8:af:2f:01:1f:f7:25:83:36:bd:59:
         32:70:90:a5:e4:b0:48:12:ea:a3:ec:9f:ee:2c:54:05:41:ff:
         50:3e:30:4e:65:70:36:53:55:52:66:37:74:0f:db:b5:5e:c1:
         a6:c0:4c:72:fe:56:ad:1a:ec:90:a6:fa:60:de:d8:b6:c3:15:
         5e:2e:a7:9e:6b:d0:fb:3d:6a:7d:49:bb:a9:ec:4c:b2:7a:17:
         23:c1:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:25:26 2026 by rpki-client