Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
File:                     591286FA978EE719A57E5A972B00E176D16D8BD5.mft (raw, json)
Hash identifier:          CMbhHUYh5RH0bLdYSlXq38UEkAP6pNfxol+YK6HDX1g=
Subject key identifier:   44:58:24:3A:A4:EF:88:6B:F0:1F:83:E3:C0:97:4F:10:16:E0:BD:2B
Authority key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5
Certificate issuer:       /CN=591286FA978EE719A57E5A972B00E176D16D8BD5
Certificate serial:       7FAB28C9073288EAAB503726411CE45836828277
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
Manifest number:          0F
Signing time:             Wed 13 May 2026 00:03:26 +0000
Manifest this update:     Tue 12 May 2026 23:58:26 +0000
Manifest next update:     Thu 14 May 2026 03:02:26 +0000
Files and hashes:         1: 591286FA978EE719A57E5A972B00E176D16D8BD5.crl (hash: 4Xaf0ezhM2TtYkr5D9HxLVH8KRAOKELCnPz/1EFWYp0=)
                          2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: SnKbiJCVGtegt8XCckG5YzkpcAALoWkVUsik+AGbmDg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl
                          rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ab:28:c9:07:32:88:ea:ab:50:37:26:41:1c:e4:58:36:82:82:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591286FA978EE719A57E5A972B00E176D16D8BD5
        Validity
            Not Before: May 12 23:58:26 2026 GMT
            Not After : May 14 03:02:26 2026 GMT
        Subject: CN=4458243AA4EF886BF01F83E3C0974F1016E0BD2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:c3:b6:d3:f5:d8:b5:73:61:15:35:cb:20:
                    2b:24:91:07:5e:88:48:b2:96:c0:59:da:e6:5b:34:
                    59:58:a6:c7:75:ba:13:2d:7c:37:b3:d3:ea:69:61:
                    9c:f0:5d:60:65:44:18:e2:ab:92:94:0e:17:37:80:
                    13:35:ab:fc:af:62:71:c8:ce:0e:c3:be:6c:2a:54:
                    d6:e5:10:d2:9b:63:0a:01:11:ef:b9:47:9d:d5:43:
                    1e:e8:3a:31:96:43:81:0d:bf:01:d4:95:aa:77:87:
                    1f:2a:9d:5f:51:ca:b6:ea:a3:50:14:88:d6:7a:fe:
                    da:1e:51:4e:81:c7:53:5f:b1:0f:28:cf:41:ea:22:
                    51:b1:41:71:22:14:e3:33:c8:9e:fc:13:be:95:bf:
                    93:fb:29:02:c0:6f:34:c9:28:b5:18:03:0d:8b:ff:
                    30:9e:19:56:8a:b2:9e:a4:62:1d:1d:29:de:6c:63:
                    78:3c:3e:ff:20:23:30:30:6e:0a:39:86:11:de:de:
                    bf:f0:77:fe:9c:c8:58:28:19:6f:78:47:01:86:5f:
                    b2:13:19:e3:a7:c9:b0:5e:98:e2:0b:e4:00:57:1b:
                    76:52:cc:92:99:55:4b:d8:6c:3f:59:da:75:f8:2e:
                    cb:23:b6:24:b8:0a:b3:c1:5a:8b:79:8e:df:fd:bd:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:58:24:3A:A4:EF:88:6B:F0:1F:83:E3:C0:97:4F:10:16:E0:BD:2B
            X509v3 Authority Key Identifier:
                keyid:59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:68:72:a8:54:7a:2c:67:d5:7e:38:0f:23:52:63:9d:cb:f6:
         21:d8:1c:84:cc:8f:d6:8e:a1:07:dd:87:a2:15:52:e2:7d:39:
         97:54:8b:f0:77:31:79:fe:be:d5:2f:b6:17:21:9d:f8:64:28:
         91:ae:ee:18:83:03:74:5f:31:d5:01:91:25:7f:04:1e:05:f9:
         91:00:51:74:de:9b:15:d1:33:fd:c0:e3:a8:af:ff:cc:2c:c7:
         5d:85:97:03:dd:cc:fa:e8:cd:2a:ba:7d:08:66:06:75:fa:29:
         11:4a:48:70:2d:cf:64:87:93:36:03:7a:c4:74:87:bc:db:22:
         64:9f:e9:41:69:d0:c4:e1:48:8c:28:74:a6:da:30:43:78:f2:
         dd:0c:cf:01:89:90:09:46:16:4e:9c:e3:45:78:f5:46:2f:f1:
         0d:ea:95:d8:fe:ca:94:ea:59:28:67:64:78:f3:e2:0f:9d:02:
         6e:32:2c:21:4b:7c:37:5b:09:8d:8b:01:dc:14:ab:ae:96:92:
         87:cd:74:8a:35:d4:bf:6b:2e:91:9e:8b:17:98:bc:87:55:bd:
         d9:af:56:54:15:83:2c:fc:79:83:5f:91:46:44:47:7b:63:ac:
         79:14:ea:57:bf:35:03:1e:ce:d9:cd:ff:2c:95:37:53:41:d5:
         d2:3d:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:41 2026 by rpki-client