Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
File:                     4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft (raw, json)
Hash identifier:          kfRwk3q9iuXzcuhztUIL+awFlrvIcR6bdQBvOcnydTA=
Subject key identifier:   1C:C9:01:EA:B8:55:B2:33:FF:9B:37:B5:13:96:B3:81:6C:59:C5:42
Authority key identifier: 4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B
Certificate issuer:       /CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B
Certificate serial:       30A6C621D1C44824442503C2C7A095D1FE136C1B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 09:26:29 +0000
Manifest this update:     Thu 23 Jul 2026 09:21:29 +0000
Manifest next update:     Fri 24 Jul 2026 11:24:29 +0000
Files and hashes:         1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: uOrrnMFrPoXL03YICCzOHjByECp/J3X4Q9+yuwlgUIA=)
                          2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: 3gsgdaMq9Jj1/PX8R0V/r0v44RenatE6Kq23gLzdu68=)
                          3: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl (hash: 360i+wMx4/HDtdZubYm7/k/qfLHa7jCYrzwYFgYnPuU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl
                          rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 11:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a6:c6:21:d1:c4:48:24:44:25:03:c2:c7:a0:95:d1:fe:13:6c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B
        Validity
            Not Before: Jul 23 09:21:29 2026 GMT
            Not After : Jul 24 11:24:29 2026 GMT
        Subject: CN=1CC901EAB855B233FF9B37B51396B3816C59C542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:e0:8d:cb:c2:58:33:26:71:ad:43:fa:f4:
                    45:60:23:72:38:78:dc:a7:8c:fc:cf:68:84:3a:d6:
                    69:98:41:4b:71:0f:e4:7a:56:5f:9f:f9:92:22:55:
                    fb:d3:66:6a:96:8b:ba:4b:da:f1:79:2d:12:fd:3f:
                    72:50:ad:07:b8:87:8f:c8:2b:05:93:f3:db:c6:b2:
                    7a:fe:0a:d6:55:bf:b4:35:0f:6f:9f:57:29:9b:19:
                    f2:8d:a2:13:f7:12:83:3a:39:3b:5a:a0:8c:f6:34:
                    eb:26:87:49:03:ff:d6:43:4c:2e:32:cb:45:fe:80:
                    a5:8b:5e:8b:e6:24:c2:1a:da:9b:37:a7:34:4c:f0:
                    1c:d8:a6:a4:84:32:81:d8:49:f5:26:13:ad:51:09:
                    89:8b:63:d0:4e:f3:6f:76:3d:ec:5e:95:9e:2c:bd:
                    b3:28:23:a4:5b:06:53:0c:8c:89:8f:07:38:f5:21:
                    d8:02:c8:bb:a3:17:1b:dc:8e:07:70:07:70:35:e0:
                    4e:1e:0e:ff:59:14:dc:10:1c:3f:98:1a:30:95:7c:
                    c7:43:df:67:b6:a7:de:13:82:b6:8e:4b:dd:ba:87:
                    cf:fd:67:be:0f:78:38:3a:1b:8c:a7:98:b0:ef:6f:
                    34:e0:be:02:33:f3:68:f8:de:52:17:c8:d2:56:f6:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C9:01:EA:B8:55:B2:33:FF:9B:37:B5:13:96:B3:81:6C:59:C5:42
            X509v3 Authority Key Identifier:
                keyid:4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:76:4d:7c:d9:f1:8c:31:6b:d9:c7:99:62:8c:d4:8b:ca:
         c4:fa:cc:35:24:ff:e2:e7:5b:4a:7d:9d:23:28:af:e4:bf:ae:
         fa:93:e7:9b:8f:de:c8:43:95:81:63:4f:76:f0:21:7f:f6:8f:
         84:73:92:ca:ab:4a:c4:91:c5:f7:94:17:bb:b6:d6:c8:8a:d5:
         75:34:e9:5e:55:1b:19:2b:a8:f4:d8:ea:1e:0a:7f:df:0e:1b:
         e8:a4:13:08:9c:fc:6c:5c:e7:6a:f5:da:82:ef:57:d8:ba:18:
         99:4d:41:84:89:c3:fe:4d:bd:45:e4:a4:d6:c1:3a:88:33:de:
         75:cc:e1:12:d6:ea:4c:18:03:a2:cb:e2:34:ed:8a:1c:38:a3:
         33:3b:f2:f3:c0:7b:e7:47:cc:7b:09:ae:13:f6:d2:df:04:ab:
         aa:88:c6:83:5d:e5:9c:ec:ae:9c:06:db:5c:ed:5e:a7:71:1c:
         ff:4b:c3:f6:ce:f6:eb:6f:d0:c1:fd:5a:74:38:1a:61:8c:16:
         c1:b1:68:1a:fd:7e:d3:7d:0b:0b:b0:4b:d2:78:82:32:0b:a9:
         75:30:ed:3c:c5:9b:d0:d5:7d:50:36:7b:c1:fb:f7:dc:ba:85:
         18:a9:83:61:ee:20:02:d3:51:2b:24:88:d5:a3:93:8e:bd:23:
         02:b0:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:02 2026 by rpki-client