Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft
File:                     B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft (raw, json)
Hash identifier:          Yjw4pEiIc0eVQjXQBTAw+K+TwfNZvSYA1beUgGk6oy0=
Subject key identifier:   34:5D:3B:38:42:85:2C:F0:16:E5:EC:C1:77:96:01:D5:73:04:50:03
Authority key identifier: B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF
Certificate issuer:       /CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF
Certificate serial:       550BD2E678C35F1CB354A17B03DD1A51AF9FE806
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 11:18:56 +0000
Manifest this update:     Tue 02 Jun 2026 11:13:56 +0000
Manifest next update:     Wed 03 Jun 2026 12:09:56 +0000
Files and hashes:         1: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl (hash: eJIU3WI3Ybr9Wuy8ShZ9mcq0FgwpRyU/zUl7/W4Eq6w=)
                          2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: 7ewRXVv5rl+QG1YNIYilvzKzYUQ3mx2Wk/pMwVKtEKI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl
                          rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 12:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0b:d2:e6:78:c3:5f:1c:b3:54:a1:7b:03:dd:1a:51:af:9f:e8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF
        Validity
            Not Before: Jun  2 11:13:56 2026 GMT
            Not After : Jun  3 12:09:56 2026 GMT
        Subject: CN=345D3B3842852CF016E5ECC1779601D573045003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:9e:ad:38:26:58:e5:18:60:df:7f:ac:51:
                    ed:df:81:26:0f:c4:4f:d3:e6:32:28:23:6b:77:ea:
                    fe:0c:d5:a8:54:fe:21:11:b9:5c:73:7e:81:c9:d7:
                    47:d7:fd:1f:80:7b:ce:97:ce:c3:36:22:3c:60:20:
                    17:24:b0:f9:e3:fc:be:a5:18:b9:ce:e0:de:7c:7d:
                    2a:42:24:78:a2:b0:52:1d:1f:4d:c2:a4:37:ab:f5:
                    9d:49:2d:48:ff:09:fa:ae:9c:2b:56:53:95:31:bf:
                    b4:ea:6c:41:be:16:87:13:b9:6c:3d:39:a1:9c:3d:
                    c4:55:1e:a6:d5:74:48:ba:e1:46:4d:4e:74:31:be:
                    fb:a3:5e:63:2b:e9:d7:fb:c0:bb:a9:05:9e:07:87:
                    28:a1:3c:a6:48:c7:ba:39:07:3b:d9:d3:f6:88:6e:
                    cc:f0:71:91:7a:23:92:dc:6a:00:06:d5:bd:12:e3:
                    b1:39:e8:86:f0:57:13:da:35:5b:2f:a7:ef:86:ac:
                    03:28:b8:f7:40:70:c1:01:e0:50:e4:98:95:f4:62:
                    e9:8f:72:7f:6e:88:ec:bf:ec:91:17:be:10:7c:d0:
                    62:b6:44:dd:bd:f8:ff:6c:33:d7:f6:11:c1:4b:9e:
                    d9:f2:7f:d6:d4:de:be:fb:5e:e3:c6:bf:5a:d6:79:
                    3d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5D:3B:38:42:85:2C:F0:16:E5:EC:C1:77:96:01:D5:73:04:50:03
            X509v3 Authority Key Identifier:
                keyid:B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e2:ae:bf:96:a8:c9:22:23:5b:2f:84:45:1e:ad:90:b2:f6:
         a2:81:d0:fc:ee:68:9e:27:77:f5:ab:ab:dd:8b:14:35:d8:fd:
         e9:06:41:f7:4a:91:0a:12:ba:ce:ec:06:f4:d9:b2:11:c4:9f:
         a9:88:a8:8a:fc:b2:0f:ba:bb:87:c0:52:c6:2e:4b:99:69:e6:
         ed:df:27:2a:71:d0:41:33:88:e1:eb:e1:82:60:e2:16:ac:c8:
         74:89:60:13:7b:34:4c:6c:ee:a4:60:f7:d4:2a:7a:3b:14:ee:
         e7:e4:95:ba:fa:47:da:46:1a:df:9c:55:a5:2d:98:d8:88:7f:
         68:18:f2:2d:c5:18:22:9b:c0:b9:59:59:36:fd:b3:4e:48:66:
         56:5e:92:3b:c6:5d:88:90:c3:87:e6:3a:02:49:6e:48:5a:78:
         92:65:bc:b5:6d:4f:4a:63:3d:eb:66:ac:46:95:d4:82:1f:d1:
         be:82:33:09:0e:d4:25:4e:c8:5e:9d:c5:b3:80:3d:73:82:33:
         9e:43:b2:05:ba:76:b7:23:eb:cc:8c:aa:88:26:3b:0a:7e:14:
         2d:7c:3c:e4:62:36:9d:8a:78:15:4f:11:36:06:23:f0:71:96:
         2a:16:b2:9e:1b:c6:c1:84:43:ff:45:a8:4f:e2:3e:f1:3b:cb:
         80:ba:e7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:37:22 2026 by rpki-client