Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
File:                     E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft (raw, json)
Hash identifier:          Gs6qULJU1uwctlkjZV35RAZOGyKI2RVrbl/Chj/EzU0=
Subject key identifier:   00:B8:AB:29:EA:DD:9A:A0:F8:49:5D:B5:AF:B5:BE:68:8E:15:C7:AE
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Certificate issuer:       /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial:       62DA426FC0748548F9388248DDD4565F3657BF31
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
Manifest number:          2C
Signing time:             Tue 02 Jun 2026 21:00:29 +0000
Manifest this update:     Tue 02 Jun 2026 20:55:29 +0000
Manifest next update:     Wed 03 Jun 2026 22:44:29 +0000
Files and hashes:         1: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: Z8294bGV1BqnPHshmggOhT7N0D0yzpQrvHBjc8hglpQ=)
                          2: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=)
                          3: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: h2tT8uN39aiQAWcw3BdGn9c/xBwZZb5nFDTta01r+Os=)
                          4: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=)
                          5: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=)
                          6: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: 0Yyl1JFAblaXf8Yb0JCPy2SmOr5D/U6YS39l5rE81q0=)
                          7: E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl (hash: Mp7WGWNBWqNIQNHiqybHDUaYPEYeJv9b6GBG6GFH1i8=)
                          8: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: ctsdmpn5r5VUvDq4FMqshtD+HVeYmHxVfhu5eYtcuDY=)
                          9: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: v5fNxHZnP1wOLH3moKO1JSlLZXs/nZienvrRCarDRlk=)
                          10: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
                          rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:da:42:6f:c0:74:85:48:f9:38:82:48:dd:d4:56:5f:36:57:bf:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
        Validity
            Not Before: Jun  2 20:55:29 2026 GMT
            Not After : Jun  3 22:44:29 2026 GMT
        Subject: CN=00B8AB29EADD9AA0F8495DB5AFB5BE688E15C7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0a:87:37:fe:b4:61:66:bc:1a:1e:22:79:b7:
                    23:d7:a1:79:77:6d:cb:5d:6c:1f:84:f4:39:bb:f8:
                    86:4f:59:44:0b:0f:a5:82:5e:cd:0c:84:52:1f:73:
                    df:f5:81:ac:af:f8:f2:65:e6:75:25:f0:a7:b9:19:
                    f6:96:11:5d:40:fa:b5:02:f1:2c:1b:e8:4c:06:cb:
                    cf:2f:9c:eb:1f:3b:80:40:6e:30:eb:bf:81:bd:9b:
                    1f:8f:39:d9:66:dc:72:d5:ee:29:99:85:0d:97:fe:
                    3a:79:cf:dd:ad:b3:76:fe:30:b7:fc:8d:7a:43:f7:
                    e6:d9:ce:06:87:b8:fd:e3:f0:57:eb:f5:b3:df:ac:
                    9c:78:0c:e5:06:9f:b7:b7:82:a1:2c:cc:52:fb:91:
                    2e:1e:68:e8:ae:c8:3d:3a:1d:f0:20:15:4b:dc:24:
                    fd:1f:a4:af:d3:85:56:42:e1:d7:fd:50:e4:27:a4:
                    87:2f:6c:c7:98:d3:2f:72:30:e3:26:1e:e5:19:13:
                    16:d3:67:ad:ee:94:e3:42:f8:74:90:94:05:a8:06:
                    76:61:10:e8:43:8f:c4:97:37:3b:1a:e3:38:23:a6:
                    60:58:1b:d0:f5:b3:6e:a2:1b:14:ca:52:08:79:d0:
                    1c:3e:4d:6b:f7:cd:52:46:49:8e:b0:eb:a8:26:0c:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B8:AB:29:EA:DD:9A:A0:F8:49:5D:B5:AF:B5:BE:68:8E:15:C7:AE
            X509v3 Authority Key Identifier:
                keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:be:34:d6:0b:94:fe:9a:f9:05:e1:65:27:e8:5a:e1:a5:19:
         6b:6c:32:a4:72:0f:5b:0f:9d:32:79:9f:52:d4:b7:11:d0:93:
         79:6a:fa:4e:f9:d8:81:d6:41:b4:ee:35:fa:4b:52:09:e4:ec:
         d9:6b:2e:6a:ec:0c:ca:6f:79:b8:a5:c3:3a:77:0d:db:31:db:
         0a:78:6d:2f:3e:bd:bd:49:13:c3:5c:43:6e:0e:5d:cc:0b:bb:
         b7:27:7d:79:f6:85:b1:89:d0:23:99:b9:ce:cf:42:60:f2:17:
         ed:56:8d:cb:84:2a:05:04:05:60:de:ab:c7:1d:8f:e1:c0:6c:
         ad:8b:87:c5:d1:16:d9:c5:e8:c0:02:d6:5c:f2:01:cb:9e:bd:
         2c:bd:73:80:97:87:cb:cc:06:d1:93:7e:9b:35:9a:af:be:aa:
         d5:e6:8f:85:5d:29:66:61:19:f2:a4:90:66:81:78:4b:ce:01:
         47:05:28:1b:f2:80:3a:c0:ce:b9:f6:31:7e:94:79:df:c3:3b:
         9c:76:73:5a:9f:a1:58:6a:dc:01:18:75:83:60:2d:0e:74:ff:
         2a:98:b4:1a:42:f3:dc:71:25:d6:f7:ad:68:6d:24:29:49:6c:
         f9:76:7a:2c:a9:90:e5:ce:c0:da:a8:f1:51:d5:26:dc:c1:68:
         d3:74:53:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYtpCb8B0hUj5OIJI3dRWXzZXvzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC
MTMyNEFCOTAeFw0yNjA2MDIyMDU1MjlaFw0yNjA2MDMyMjQ0MjlaMDMxMTAvBgNV
BAMTKDAwQjhBQjI5RUFERDlBQTBGODQ5NURCNUFGQjVCRTY4OEUxNUM3QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCoc3/rRhZrwaHiJ5tyPXoXl3
bctdbB+E9Dm7+IZPWUQLD6WCXs0MhFIfc9/1gayv+PJl5nUl8Ke5GfaWEV1A+rUC
8Swb6EwGy88vnOsfO4BAbjDrv4G9mx+POdlm3HLV7imZhQ2X/jp5z92ts3b+MLf8
jXpD9+bZzgaHuP3j8Ffr9bPfrJx4DOUGn7e3gqEszFL7kS4eaOiuyD06HfAgFUvc
JP0fpK/ThVZC4df9UOQnpIcvbMeY0y9yMOMmHuUZExbTZ63ulONC+HSQlAWoBnZh
EOhDj8SXNzsa4zgjpmBYG9D1s26iGxTKUgh50Bw+TWv3zVJGSY6w66gmDPcxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUALirKerdmqD4SV21r7W+aI4Vx64wHwYDVR0j
BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE
QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0
QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI0YTkxMDUtOGQyYS00YjM4LWE2
YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZC
RDNCMTMyNEFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFG+NNYLlP6a+QXhZSfoWuGlGWtsMqRyD1sP
nTJ5n1LUtxHQk3lq+k752IHWQbTuNfpLUgnk7NlrLmrsDMpvebilwzp3Ddsx2wp4
bS8+vb1JE8NcQ24OXcwLu7cnfXn2hbGJ0COZuc7PQmDyF+1WjcuEKgUEBWDeq8cd
j+HAbK2Lh8XRFtnF6MAC1lzyAcuevSy9c4CXh8vMBtGTfps1mq++qtXmj4VdKWZh
GfKkkGaBeEvOAUcFKBvygDrAzrn2MX6Ued/DO5x2c1qfoVhq3AEYdYNgLQ50/yqY
tBpC89xxJdb3rWhtJClJbPl2eiypkOXOwNqo8VHVJtzBaNN0U3U=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:38 2026 by rpki-client