Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
File:                     4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft (raw, json)
Hash identifier:          UaVPU/59VTIo8LhehKvIgZ/QxHvhsOwN02NoX6B8Uis=
Subject key identifier:   6F:26:F6:CF:7B:32:7A:05:30:5B:A8:CA:2A:1B:75:B4:D1:90:3A:74
Authority key identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F
Certificate issuer:       /CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F
Certificate serial:       5B61916731FF08A8F1DD4E579C179B845E54D282
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 19:40:12 +0000
Manifest this update:     Wed 23 Sep 2026 19:35:12 +0000
Manifest next update:     Thu 24 Sep 2026 20:53:12 +0000
Files and hashes:         1: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl (hash: YufdyhgQAzMA6ROCsu9r9MxzhFpFWk3p0M11zbsbStY=)
                          2: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: ySMFpx3jAtHRk6Y0gp/23WMKdK2+n4m1Qj3cdUQcw48=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl
                          rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 20:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:61:91:67:31:ff:08:a8:f1:dd:4e:57:9c:17:9b:84:5e:54:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F
        Validity
            Not Before: Sep 23 19:35:12 2026 GMT
            Not After : Sep 24 20:53:12 2026 GMT
        Subject: CN=6F26F6CF7B327A05305BA8CA2A1B75B4D1903A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:f7:5d:4b:a1:22:c1:a5:49:62:78:c0:26:
                    cf:98:06:be:2a:06:1d:58:2d:01:70:f0:fa:d9:d5:
                    1f:04:2b:89:82:81:c9:b9:7b:c4:ce:a4:b6:cd:21:
                    5a:fe:0a:d1:e1:72:60:b8:94:04:92:fb:31:3f:26:
                    07:f7:22:12:82:1e:a5:7d:12:1f:72:99:e3:00:6b:
                    a9:b4:0d:aa:3c:d6:2c:b7:59:43:0d:8c:26:25:9a:
                    8c:91:66:b7:a1:8c:4a:04:77:30:cb:43:5c:d4:86:
                    72:c8:bf:93:90:3c:fe:57:bc:5b:03:7b:ae:61:01:
                    79:9b:f2:e6:dc:23:fb:66:c5:7c:87:0f:ee:d9:c0:
                    cc:a3:e8:bb:05:77:39:57:d5:55:7b:83:d0:00:63:
                    26:99:0c:59:27:47:80:74:cf:11:f8:e9:d9:4e:03:
                    b4:ea:10:61:35:9e:20:98:9c:55:d3:4c:64:3d:44:
                    8a:dc:9e:7d:2f:cd:34:92:1a:4a:9f:38:e3:f7:c2:
                    d1:e3:49:a5:a9:84:eb:3b:7c:6c:b1:62:0c:5c:cd:
                    d6:43:f3:0d:65:cb:a4:55:ee:0a:da:4b:2c:29:47:
                    c8:4e:8b:bc:f9:f4:bb:80:e5:6c:3b:fa:a7:7d:28:
                    de:c1:9a:6b:9e:a7:c3:cb:81:a6:06:e0:16:53:19:
                    1f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:26:F6:CF:7B:32:7A:05:30:5B:A8:CA:2A:1B:75:B4:D1:90:3A:74
            X509v3 Authority Key Identifier:
                keyid:4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6a:88:79:87:15:8e:b0:49:e4:bd:88:15:4a:49:79:7d:b8:
         a3:7f:4d:61:63:84:8c:8b:d4:8b:95:b5:14:56:f6:9f:77:9d:
         5d:c3:ea:96:65:e6:45:4e:92:0e:42:8b:b4:49:0e:7d:4f:6f:
         ab:61:62:99:ee:ff:17:0d:ac:e5:f2:64:d6:09:84:f5:af:c7:
         da:c3:9b:06:6b:8b:04:8d:45:b5:49:04:22:50:73:38:41:ec:
         2a:c7:73:fd:53:b7:c5:b2:75:4f:71:3c:a5:f4:a7:f3:5e:5e:
         d0:49:d0:99:03:66:73:11:fc:77:7b:d3:4c:e9:e6:a4:c0:e5:
         9a:c8:dc:b9:f1:7a:8a:08:cb:88:2f:d1:9a:7b:f2:f0:98:e3:
         df:af:d4:0f:f1:78:13:f0:36:16:0e:b0:e0:70:a7:ef:7e:f8:
         37:48:fb:4e:98:96:6c:4d:c3:67:bf:2e:8d:80:61:d2:8e:7f:
         d8:7c:20:0f:66:0d:e1:8f:36:49:c4:7b:f1:c2:c6:a6:7d:51:
         da:7f:c6:11:e3:d5:da:d5:9c:8e:65:e8:b8:d2:78:3c:ca:34:
         b5:e5:ab:c2:33:03:d5:13:c9:03:03:dd:32:39:86:76:67:de:
         d1:37:01:83:f4:f7:de:8d:0e:af:71:24:e1:45:7a:98:07:af:
         44:df:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:20:20 2026 by rpki-client