Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
File:                     4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json)
Hash identifier:          JstbGD6A8qnCY2+qWkHlEsc5fL9mXVI7+FJptIl+moU=
Subject key identifier:   51:15:FA:50:A4:06:31:ED:20:A2:45:26:87:89:AB:56:5F:74:76:82
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Certificate issuer:       /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial:       58E8176C5983D8FA4228A7539ED8E7B537A38CF2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
Manifest number:          6E
Signing time:             Fri 24 Jul 2026 00:29:48 +0000
Manifest this update:     Fri 24 Jul 2026 00:24:48 +0000
Manifest next update:     Sat 25 Jul 2026 03:53:48 +0000
Files and hashes:         1: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=)
                          2: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=)
                          3: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=)
                          4: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=)
                          5: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=)
                          6: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=)
                          7: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: Tyr3tYX34MN04Onm7HeqmYiyQrI1IaUy5ao61GaPTEs=)
                          8: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=)
                          9: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=)
                          10: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=)
                          11: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=)
                          12: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=)
                          13: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
                          rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e8:17:6c:59:83:d8:fa:42:28:a7:53:9e:d8:e7:b5:37:a3:8c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
        Validity
            Not Before: Jul 24 00:24:48 2026 GMT
            Not After : Jul 25 03:53:48 2026 GMT
        Subject: CN=5115FA50A40631ED20A245268789AB565F747682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:93:f6:b8:eb:3f:fd:de:b3:f7:a7:78:76:
                    ef:81:49:f3:10:07:9d:10:66:a2:5d:1e:22:15:16:
                    27:44:39:b8:41:11:cc:e7:80:de:21:b7:81:74:33:
                    44:e0:95:54:4b:75:f1:0a:e7:58:69:37:23:e4:4d:
                    01:8c:10:c1:80:5d:c5:40:12:27:b1:53:1d:c6:e8:
                    88:9c:b8:c7:30:c7:d2:3c:9d:93:e1:a1:06:01:fe:
                    0e:7f:20:e4:2d:da:c4:6d:15:cb:c5:78:25:2d:37:
                    7a:e8:97:a0:b9:bf:32:cb:00:6b:04:50:3c:02:8f:
                    a3:fd:75:f0:37:c4:d7:a4:8d:b9:f0:03:4a:c9:a8:
                    b9:e8:e8:99:a8:0c:c0:44:e2:b8:39:ac:07:6d:58:
                    4f:16:6f:46:5d:16:a7:47:5b:7f:57:78:a6:e6:57:
                    34:55:37:cb:9d:fb:6f:57:0e:3f:75:91:35:96:60:
                    0b:94:9f:81:33:72:66:08:dc:bd:9b:ee:cb:36:03:
                    ae:30:a1:70:65:a6:f6:fe:0b:5f:a4:fb:87:35:0e:
                    77:35:56:65:fd:e6:58:50:72:dd:0f:b7:cd:f4:e2:
                    b6:9c:12:4e:ff:63:c7:7d:5d:21:79:c3:61:47:9f:
                    08:86:67:9d:51:78:60:71:fb:97:d2:30:b4:0c:f2:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:15:FA:50:A4:06:31:ED:20:A2:45:26:87:89:AB:56:5F:74:76:82
            X509v3 Authority Key Identifier:
                keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:06:84:cd:d3:36:27:5f:3f:4f:70:af:e6:94:52:47:93:e3:
         de:f2:f9:50:57:48:70:d1:f8:7e:57:65:ba:83:59:b1:8e:84:
         1a:a3:60:4d:75:bf:a5:3c:12:6d:4e:6f:2c:df:a7:42:b8:a2:
         a4:36:3b:fb:8c:ea:cb:cf:0f:07:3f:e1:d5:d9:a2:18:11:48:
         f8:f6:f2:87:b3:96:1b:41:fb:10:ef:60:5a:95:6a:c4:04:4a:
         0e:44:20:87:b8:8e:1b:da:18:28:ae:2d:66:d6:ab:67:05:47:
         26:33:91:39:62:c5:56:83:18:ec:18:f9:e1:e2:b8:dc:93:73:
         5d:ec:f8:30:9a:28:7f:c6:d1:a9:15:af:07:3e:40:7d:32:fb:
         1a:cc:c8:a8:31:57:8d:ac:45:83:9c:cd:b5:3f:a9:85:1e:7b:
         ec:f1:a8:76:6c:95:31:35:5d:d1:b7:c1:9e:ba:3d:37:a2:12:
         ea:7f:32:34:13:87:31:3a:88:51:7c:36:02:1b:80:9a:e2:08:
         28:ec:b2:a4:2f:af:53:54:84:0d:22:76:4a:2c:18:40:0e:4d:
         19:95:a6:73:c3:e3:6a:3c:b8:0f:56:e8:5f:93:fa:fc:f6:79:
         58:b5:88:29:9a:3a:4e:28:6d:c3:cc:6f:68:61:78:c6:35:29:
         5a:e2:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:17 2026 by rpki-client