Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
File:                     4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft (raw, json)
Hash identifier:          USC02hQS9ynE/yLkLguDZ9DFMb/C7Xj6GQZmH5zJ1Yk=
Subject key identifier:   C1:82:9F:2C:60:B7:1D:49:69:35:DA:BB:0D:97:D2:E0:C1:C8:62:63
Authority key identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F
Certificate issuer:       /CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F
Certificate serial:       16A656E72EFED8B83D4C49A539588158B1D2A6F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 07:13:23 +0000
Manifest this update:     Tue 12 May 2026 07:08:23 +0000
Manifest next update:     Wed 13 May 2026 10:31:23 +0000
Files and hashes:         1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: ySMFpx3jAtHRk6Y0gp/23WMKdK2+n4m1Qj3cdUQcw48=)
                          2: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl (hash: Xin4SvOYD/YPrCv5R/7nqMWm7G4xvWiK114SUIvaMx8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl
                          rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a6:56:e7:2e:fe:d8:b8:3d:4c:49:a5:39:58:81:58:b1:d2:a6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F
        Validity
            Not Before: May 12 07:08:23 2026 GMT
            Not After : May 13 10:31:23 2026 GMT
        Subject: CN=C1829F2C60B71D496935DABB0D97D2E0C1C86263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:86:b7:e5:ab:96:55:7b:af:65:e7:d8:ae:
                    d6:d0:8e:82:ab:cf:c7:bd:87:b8:09:48:dc:77:c1:
                    ba:9d:78:6f:15:72:64:7d:88:09:d9:a3:0f:35:ec:
                    91:7b:69:1a:c5:6a:bf:d5:4a:83:13:0e:c6:13:97:
                    44:ea:84:42:42:0a:c7:82:e9:de:99:1b:2c:1a:43:
                    a4:ca:7d:dc:c5:3b:57:15:02:0f:f5:5f:ec:ac:9f:
                    c1:05:3e:0f:60:a4:f6:b8:80:df:6c:52:67:56:1e:
                    04:35:c9:39:87:fe:1f:ee:87:39:b3:ec:aa:3f:63:
                    63:9c:67:1e:7c:75:54:f2:a8:a1:dd:1d:58:91:00:
                    4e:de:56:64:b6:1b:f3:f8:4b:e4:48:b0:41:8b:c0:
                    ed:cb:19:ea:81:6d:73:a9:fe:1a:72:5c:17:fc:cc:
                    2b:a9:94:03:86:04:a9:ca:94:2d:4c:ec:8c:a0:38:
                    7f:eb:a9:6a:8e:4a:e5:88:2f:02:69:1e:14:2f:da:
                    b9:90:03:20:0e:b9:66:44:7e:2d:42:5c:1c:8c:b3:
                    e0:22:bb:bc:f2:65:81:b6:59:02:6d:9b:40:8e:02:
                    0e:fe:c2:76:86:a5:3d:e2:bb:9d:ce:3a:85:ad:45:
                    05:b0:19:9a:15:fc:23:b7:7a:b2:e8:8b:de:c1:24:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:82:9F:2C:60:B7:1D:49:69:35:DA:BB:0D:97:D2:E0:C1:C8:62:63
            X509v3 Authority Key Identifier:
                keyid:4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3f:47:ef:cf:1a:3f:f2:c2:72:10:26:82:75:0a:72:c1:cd:
         46:03:88:e8:f2:cb:a0:7b:8a:db:51:db:bc:a0:13:74:23:9e:
         f9:c5:aa:bc:6a:8f:58:f9:c8:0b:93:b5:19:13:53:03:d4:1b:
         18:47:0b:fc:74:e7:51:94:72:9a:6d:bc:2f:d1:10:88:97:95:
         37:3a:ad:a9:e4:c8:e4:19:a6:72:03:ff:fc:24:38:7a:5f:05:
         58:80:51:4f:2e:e8:7f:33:8b:f9:a8:03:10:d9:5f:b4:8b:07:
         06:0e:7f:dc:2d:97:c5:d9:3f:df:ed:75:3e:65:7e:a0:a7:70:
         9e:e8:7e:0e:7e:fb:71:fc:55:29:f6:ce:36:3b:46:a0:c6:ca:
         86:75:20:21:40:22:35:e4:6c:b7:d4:72:d0:e2:88:e4:80:5d:
         41:8a:58:7a:28:c4:32:26:6e:51:2a:36:5f:bc:a2:09:25:cb:
         51:ab:8b:fd:83:60:17:91:48:5d:cc:2a:a8:30:e2:45:3b:a3:
         19:a3:40:d0:ba:2e:ef:58:e2:7f:82:96:e0:43:02:01:04:43:
         bd:31:cc:ce:e6:44:bb:86:c3:e5:b6:e7:38:b7:ca:fb:0f:5e:
         3e:1f:94:4a:e2:9f:ce:e5:81:8f:a9:a5:ed:6a:91:7f:84:6e:
         d7:1c:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:46:40 2026 by rpki-client