Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft
File:                     4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft (raw, json)
Hash identifier:          gtK4gYAgrePflud54lwf9t3ZMpQVbnqTTVvyEdC+6Ho=
Subject key identifier:   B1:98:CC:DB:15:4C:D4:97:AA:8E:1F:E2:6A:71:F6:E9:9E:E6:2F:04
Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36
Certificate issuer:       /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36
Certificate serial:       310904F49ADA5B24022E280FFCB99020F8A56F14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 15:23:48 +0000
Manifest this update:     Thu 23 Jul 2026 15:18:48 +0000
Manifest next update:     Fri 24 Jul 2026 16:19:48 +0000
Files and hashes:         1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=)
                          2: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl (hash: 5UXGoBlAXH6zyHepLTTyHG+V2NRr9EDtiOEZ8skmbK4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl
                          rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:09:04:f4:9a:da:5b:24:02:2e:28:0f:fc:b9:90:20:f8:a5:6f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36
        Validity
            Not Before: Jul 23 15:18:48 2026 GMT
            Not After : Jul 24 16:19:48 2026 GMT
        Subject: CN=B198CCDB154CD497AA8E1FE26A71F6E99EE62F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:5a:df:88:da:ea:ed:6e:42:6b:59:a2:1e:
                    e1:31:ef:fd:6c:a1:e1:38:8f:0a:80:4f:f1:f0:26:
                    6f:fe:11:bd:05:56:08:57:07:07:c7:7d:67:b9:eb:
                    93:dc:17:61:98:a3:05:f9:86:72:d7:b7:0b:c1:13:
                    e8:9b:07:de:3c:28:97:10:77:e5:46:c7:1b:d4:b3:
                    d0:c7:01:6d:c8:cd:1f:a3:87:fb:ca:27:5a:f1:a6:
                    65:6f:84:a9:36:48:b6:9a:45:4e:f5:6f:f3:88:5f:
                    50:c4:b1:e2:22:dd:ab:a7:9e:0f:e6:4c:f8:50:c2:
                    ac:38:03:64:c1:5f:de:29:f1:01:7c:0f:33:cc:a0:
                    4f:fa:32:32:9e:99:de:85:09:0f:22:1a:14:6f:f5:
                    a0:26:09:e9:2d:34:70:85:8b:ec:e1:22:8b:0b:d9:
                    b3:6c:a9:b6:76:52:bc:ba:2e:be:bc:00:58:64:65:
                    d7:a3:5a:58:e1:a5:00:d7:f6:6d:58:48:66:14:be:
                    cb:4b:78:15:cb:0f:08:f2:88:02:39:5a:70:9d:fb:
                    17:25:d5:14:97:5f:8e:11:6b:cd:ab:c4:55:18:84:
                    4d:54:65:ef:a2:85:f5:84:3b:b1:12:d6:f8:79:7d:
                    f0:b1:30:b3:d6:0f:c9:a9:3b:06:05:ee:2a:72:39:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:98:CC:DB:15:4C:D4:97:AA:8E:1F:E2:6A:71:F6:E9:9E:E6:2F:04
            X509v3 Authority Key Identifier:
                keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7c:48:6f:de:d0:a0:98:16:c3:3a:96:2f:11:88:2b:08:fe:
         dc:a8:43:62:24:6e:33:9b:d9:ca:45:48:58:e0:79:8b:31:f9:
         1e:2e:2c:50:c8:29:84:a6:13:3c:06:63:71:02:e3:17:2d:ca:
         bc:d9:80:05:4c:1a:03:58:3a:62:47:c7:e4:60:05:c6:00:e8:
         aa:dc:35:cd:6f:bd:c6:cd:d1:0c:ab:1d:24:54:81:f1:fd:17:
         dd:e8:fb:05:2e:10:1f:38:fb:57:93:7f:a7:bd:22:a9:0d:72:
         30:cf:a3:a3:20:9a:98:31:cc:cd:86:51:38:f1:a2:7e:ae:80:
         bf:ad:06:75:ad:02:5b:72:c6:a6:fe:02:6f:1c:58:bd:46:b8:
         d5:d5:52:4c:f5:77:de:86:2a:9d:d6:70:49:6f:a7:be:6f:3c:
         fa:60:a2:d3:32:5e:63:ee:6e:87:57:65:f1:b1:a2:a3:0d:43:
         05:ff:69:3b:9e:45:2a:08:f0:99:3d:e8:84:af:42:65:29:40:
         b7:fe:9c:76:4b:66:15:86:16:09:d2:72:82:9f:f6:ed:7a:2c:
         b6:2c:b0:f5:39:63:4f:5b:84:c9:b4:5f:b7:0e:55:f7:38:b2:
         4c:36:c8:82:61:dd:4a:f4:73:b6:36:f9:7a:75:13:94:d9:22:
         23:c8:ea:06
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMQkE9JraWyQCLigP/LmQIPilbxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5
NUZBRUMzNjAeFw0yNjA3MjMxNTE4NDhaFw0yNjA3MjQxNjE5NDhaMDMxMTAvBgNV
BAMTKEIxOThDQ0RCMTU0Q0Q0OTdBQThFMUZFMjZBNzFGNkU5OUVFNjJGMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpVrfiNrq7W5Ca1miHuEx7/1s
oeE4jwqAT/HwJm/+Eb0FVghXBwfHfWe565PcF2GYowX5hnLXtwvBE+ibB948KJcQ
d+VGxxvUs9DHAW3IzR+jh/vKJ1rxpmVvhKk2SLaaRU71b/OIX1DEseIi3aunng/m
TPhQwqw4A2TBX94p8QF8DzPMoE/6MjKemd6FCQ8iGhRv9aAmCektNHCFi+zhIosL
2bNsqbZ2Ury6Lr68AFhkZdejWljhpQDX9m1YSGYUvstLeBXLDwjyiAI5WnCd+xcl
1RSXX44Ra82rxFUYhE1UZe+ihfWEO7ES1vh5ffCxMLPWD8mpOwYF7ipyOR5JAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsZjM2xVM1Jeqjh/ianH26Z7mLwQwHwYDVR0j
BBgwFoAURTL4AKfrW8tdsFaZxt2qf5X67DYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjg0MjNiOGEtZmUyMi00M2FkLTk1MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBB
N0VCNUJDQjVEQjA1Njk5QzZEREFBN0Y5NUZBRUMzNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NTMyRjgwMEE3RUI1QkNCNURCMDU2OTlDNkREQUE3Rjk1RkFF
QzM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1
MDctMWE5OWFiYmE3ZDk0LzAvNDUzMkY4MDBBN0VCNUJDQjVEQjA1Njk5QzZEREFB
N0Y5NUZBRUMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAV8SG/e0KCYFsM6li8RiCsI/tyoQ2IkbjOb
2cpFSFjgeYsx+R4uLFDIKYSmEzwGY3EC4xctyrzZgAVMGgNYOmJHx+RgBcYA6Krc
Nc1vvcbN0QyrHSRUgfH9F93o+wUuEB84+1eTf6e9IqkNcjDPo6MgmpgxzM2GUTjx
on6ugL+tBnWtAltyxqb+Am8cWL1GuNXVUkz1d96GKp3WcElvp75vPPpgotMyXmPu
bodXZfGxoqMNQwX/aTueRSoI8Jk96ISvQmUpQLf+nHZLZhWGFgnScoKf9u16LLYs
sPU5Y09bhMm0X7cOVfc4skw2yIJh3Ur0c7Y2+Xp1E5TZIiPI6gY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:02 2026 by rpki-client