Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
File:                     B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft (raw, json)
Hash identifier:          Ay1ab2HJnBdY9SmT7y2so7oJ8RAoHNl1CuRTvzQ6rAc=
Subject key identifier:   F2:B5:94:04:9E:00:A8:E8:D5:3C:72:18:78:42:4D:DC:DB:26:E9:D7
Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
Certificate issuer:       /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Certificate serial:       7CC4F3E667985DFAC8B905CC93511B8E55D00F17
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 20:58:16 +0000
Manifest this update:     Tue 12 May 2026 20:53:16 +0000
Manifest next update:     Wed 13 May 2026 22:43:16 +0000
Files and hashes:         1: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Gy6gsEzVMHwZHSwsQeHdnkzzEfB+MjqsZcuu2XFRbNQ=)
                          2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=)
                          3: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl (hash: jFtfgzz2LuiASBMZ59gEKi0/f7BuMQawnO5HCVPEpiA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
                          rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c4:f3:e6:67:98:5d:fa:c8:b9:05:cc:93:51:1b:8e:55:d0:0f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
        Validity
            Not Before: May 12 20:53:16 2026 GMT
            Not After : May 13 22:43:16 2026 GMT
        Subject: CN=F2B594049E00A8E8D53C721878424DDCDB26E9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:26:5d:28:7b:65:6d:a9:9d:33:a9:a2:10:
                    1b:e8:63:1f:be:93:4f:97:7d:7e:c0:33:5a:37:aa:
                    15:b7:e1:79:80:59:d2:28:a3:f3:03:93:6e:31:19:
                    82:80:c3:a7:67:3c:ea:1f:fe:b1:47:89:f2:ba:dc:
                    cf:87:fd:64:c2:2f:5e:2b:68:83:09:05:a4:fd:25:
                    80:b3:6a:57:9f:02:43:b4:28:e7:33:ab:92:40:70:
                    9b:24:bf:a6:99:80:64:02:f9:7b:b5:7e:ca:01:cb:
                    bd:75:63:36:e1:b3:88:77:e6:a7:59:42:8a:d5:51:
                    76:8e:19:05:ac:b3:f2:d6:f8:0d:3e:1a:c0:84:4d:
                    c9:a5:43:fa:7a:98:4e:30:cf:63:1c:8f:da:12:cf:
                    c1:34:89:19:5b:2a:2d:2f:1d:48:c9:24:d0:45:47:
                    9c:e2:dd:1f:66:6b:ce:6f:9d:f5:2f:d2:d7:74:0e:
                    2f:a6:ab:9f:96:f0:2d:de:53:ed:73:54:9c:24:60:
                    97:99:51:79:8f:7c:ff:0e:61:bc:78:5a:c3:46:f9:
                    b2:e1:87:5c:e4:d0:d8:fd:a4:ef:d2:56:75:25:d0:
                    e4:f4:d4:ac:74:0a:1e:35:34:6b:cc:63:f4:ed:4f:
                    dd:7c:ce:5b:6f:8f:ed:e6:83:22:d5:2f:12:1b:95:
                    07:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B5:94:04:9E:00:A8:E8:D5:3C:72:18:78:42:4D:DC:DB:26:E9:D7
            X509v3 Authority Key Identifier:
                keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:00:59:15:c0:39:83:1b:cc:e7:0c:71:1d:ed:e3:f4:c5:7a:
         d1:99:a2:69:03:3d:21:1e:d6:d3:21:c2:8c:1e:25:0b:ff:99:
         ba:b2:67:60:7b:09:70:06:79:a4:35:c2:88:fb:67:bb:c5:6b:
         06:0c:9b:a1:20:fc:22:68:20:43:6a:4a:03:37:95:3a:14:1c:
         67:39:20:59:62:06:a9:6d:c9:05:1e:db:24:23:29:99:2b:60:
         b7:5f:dc:1e:1e:af:21:45:84:dc:5d:ef:f3:74:24:a5:80:f4:
         96:86:c8:10:38:4d:21:00:45:93:a8:3a:b2:c8:01:97:d0:4d:
         b3:b1:eb:66:2b:c6:46:b2:57:f3:e8:fe:7a:9c:31:ce:e5:02:
         95:b4:5c:36:30:6d:12:0d:e9:81:a3:c5:ad:93:04:79:cb:f7:
         a4:47:91:48:fb:5d:d1:03:d5:dc:92:9b:8a:17:22:d7:9a:42:
         ff:b6:2e:3b:1a:6a:f6:8e:a7:d4:6b:7f:1f:40:6f:61:9a:72:
         37:df:46:f9:07:e7:ae:85:54:3a:44:58:9f:88:71:bd:9c:50:
         7d:e4:c8:6e:25:d8:3b:9f:b4:ce:b8:b2:99:f1:a9:6b:33:84:
         48:dd:b6:ae:f1:18:a1:de:ec:af:0e:25:4f:5a:45:1d:5d:23:
         f7:32:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:01 2026 by rpki-client