Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft
File:                     41D594A81CE7902C5B861CDDF442D40BD7622D23.mft (raw, json)
Hash identifier:          LZ9b/BHpa6NrAKemNhBNAat0iDwqsy90noBVmdOgF8A=
Subject key identifier:   64:99:F8:58:CA:DE:A8:BF:03:BC:F6:30:A3:04:62:A1:4A:F0:C1:3B
Authority key identifier: 41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23
Certificate issuer:       /CN=41D594A81CE7902C5B861CDDF442D40BD7622D23
Certificate serial:       31BC8C9B63C05BABB13D413C9CC651A1325E7F43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft
Manifest number:          55
Signing time:             Sat 04 Jul 2026 04:48:34 +0000
Manifest this update:     Sat 04 Jul 2026 04:43:34 +0000
Manifest next update:     Sun 05 Jul 2026 07:53:34 +0000
Files and hashes:         1: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: NpQnwPQm4+MZdCx5RwEF6BiVLRmHGtHyCiNoecoz5oY=)
                          2: 41D594A81CE7902C5B861CDDF442D40BD7622D23.crl (hash: kWEzgtHsvFwzx5pUvE5kOai+inSDkSNdiCDLxfswxeI=)
                          3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: eN2tQYcsydQHErMHlakrUWRcJs/Gf66vPyTEiK87fko=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl
                          rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Jul 2026 05:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bc:8c:9b:63:c0:5b:ab:b1:3d:41:3c:9c:c6:51:a1:32:5e:7f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D594A81CE7902C5B861CDDF442D40BD7622D23
        Validity
            Not Before: Jul  4 04:43:34 2026 GMT
            Not After : Jul  5 07:53:34 2026 GMT
        Subject: CN=6499F858CADEA8BF03BCF630A30462A14AF0C13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b0:03:c5:35:c7:ca:49:0d:5f:cb:27:ca:65:
                    46:b1:c8:6f:3b:14:21:18:6f:af:a0:dd:87:9d:27:
                    aa:42:2f:d7:1c:26:f4:43:37:48:1c:ba:90:c0:a8:
                    7a:9a:7d:47:d7:fd:5f:9c:43:6d:07:e1:1c:02:b9:
                    23:50:be:55:f1:f8:f9:46:db:d8:70:5a:3f:68:51:
                    8b:ed:16:31:c5:3f:31:81:45:7c:90:5a:bc:b7:2c:
                    d4:2c:dc:83:47:12:63:a8:c0:37:80:6d:85:89:e4:
                    d1:d1:0d:de:89:26:05:1b:51:b1:0d:e1:b0:48:89:
                    5a:b7:c9:b0:43:45:0d:31:8f:70:a5:74:06:0e:df:
                    02:89:61:71:27:7d:51:45:40:ef:a9:6b:94:ef:44:
                    ed:53:dc:62:f0:a3:31:9a:b2:c4:5b:f8:7d:58:1f:
                    4f:8e:1d:fd:fd:74:2e:a0:10:3e:fa:d4:2a:f1:2d:
                    97:f8:9b:45:f2:13:3f:35:37:b9:5f:c5:ba:9c:26:
                    dd:c4:c7:38:c7:36:0f:b7:e5:15:02:ae:c7:de:6a:
                    21:ba:bb:50:31:4b:f6:db:c5:d5:b2:b3:32:08:01:
                    4c:f8:88:4f:88:32:ac:40:49:0d:74:b7:36:2a:9d:
                    f6:f4:a7:58:7e:11:f6:a6:2c:30:64:db:77:2d:d1:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:F8:58:CA:DE:A8:BF:03:BC:F6:30:A3:04:62:A1:4A:F0:C1:3B
            X509v3 Authority Key Identifier:
                keyid:41:D5:94:A8:1C:E7:90:2C:5B:86:1C:DD:F4:42:D4:0B:D7:62:2D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41D594A81CE7902C5B861CDDF442D40BD7622D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/41D594A81CE7902C5B861CDDF442D40BD7622D23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:91:9f:b6:49:09:d6:92:74:91:31:2d:15:c7:db:cf:da:6d:
         0a:f0:fa:cd:a7:e7:37:bf:b0:df:00:66:f4:13:57:61:da:ec:
         08:23:e9:b1:0c:02:3e:11:ac:0f:37:5f:27:fe:84:e6:c6:d3:
         64:a5:28:ea:62:d9:47:87:e5:07:69:b4:1d:d9:80:40:0f:78:
         c8:44:75:e4:92:94:ce:9c:75:33:3d:f9:72:1f:c8:98:4d:62:
         d2:ab:80:4e:30:3a:6c:41:5f:ea:61:04:50:0a:13:88:02:d8:
         b2:e8:57:39:f4:53:e8:e0:75:25:3a:5e:e5:f8:7e:e2:4f:b4:
         7d:44:b0:df:a8:47:ae:4b:07:50:de:25:60:56:4d:c0:0c:cb:
         08:8d:03:83:b8:c2:45:4f:61:cb:c4:90:24:6b:86:5e:d2:07:
         3e:1c:d5:25:33:35:e5:1a:81:7c:2f:e6:2d:bc:95:57:5a:e4:
         38:07:4f:64:bb:61:c1:51:5f:6d:fe:1c:ed:9a:fc:76:1a:8e:
         39:2d:ce:ef:bd:fd:ad:19:bf:aa:06:24:b3:79:cd:d0:a9:65:
         3a:89:67:34:8c:0d:ef:6c:b1:f0:d0:ce:e1:92:a0:52:6a:ed:
         62:12:b6:72:88:ed:75:6f:91:22:8e:9a:67:5b:e0:ba:39:36:
         10:14:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 20:55:11 2026 by rpki-client