Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
File:                     F4B592783A4D1278733E583FF474D505E715EAEC.mft (raw, json)
Hash identifier:          gsC5mrGUtbDSLEfQuAeD1V2lXv4fkBd6M4ANzzO93/A=
Subject key identifier:   21:ED:EF:B8:87:2A:12:FD:D2:F4:71:C6:4D:87:CD:FF:05:63:AC:48
Authority key identifier: F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC
Certificate issuer:       /CN=F4B592783A4D1278733E583FF474D505E715EAEC
Certificate serial:       7E8B77E2D64869ECA806E1E61A825D683EB49373
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 20:40:02 +0000
Manifest this update:     Tue 02 Jun 2026 20:35:02 +0000
Manifest next update:     Wed 03 Jun 2026 22:19:02 +0000
Files and hashes:         1: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: xKZvI7DoYttGR54Om2vm9eFapdM+/V55V6OhpEXUV68=)
                          2: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: RTESWs20NpXZjZyB8EzKQY+C0yZE4/dxGzmQFAgjBdw=)
                          3: F4B592783A4D1278733E583FF474D505E715EAEC.crl (hash: R5FRMWmwRYQrnaMOjnuXWdt9hkShoFm2Ph6f5SmqqvE=)
                          4: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: SvetT4fkB5VuEIEYdhmb+OWzFFcY03lt8k6wWYfq9nA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl
                          rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8b:77:e2:d6:48:69:ec:a8:06:e1:e6:1a:82:5d:68:3e:b4:93:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4B592783A4D1278733E583FF474D505E715EAEC
        Validity
            Not Before: Jun  2 20:35:02 2026 GMT
            Not After : Jun  3 22:19:02 2026 GMT
        Subject: CN=21EDEFB8872A12FDD2F471C64D87CDFF0563AC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:f0:e3:23:5b:51:74:f2:53:0e:d8:69:8b:
                    8c:c7:73:6c:b9:53:de:c2:eb:f2:3d:c4:d9:72:91:
                    c6:cf:df:d6:55:25:84:97:47:c0:ba:1c:c3:9d:d5:
                    7a:fc:5b:31:a5:50:03:85:8a:7d:e7:a8:5c:2d:97:
                    10:af:05:d3:a1:b7:13:7c:be:d7:4c:99:6d:25:cb:
                    d8:e7:74:6c:2d:df:97:eb:6e:94:17:a0:3e:8e:de:
                    e4:ec:30:7a:90:b0:b2:89:b8:a1:b2:31:8b:e1:cb:
                    dc:86:3e:72:b0:bd:7e:89:39:0e:fc:54:f5:3d:d8:
                    73:9f:f7:96:fb:a4:d6:15:f3:9f:c0:94:c8:e4:45:
                    64:d6:15:a2:31:f5:b4:8e:c1:39:05:7f:1f:4b:6c:
                    5a:2d:70:92:87:b4:46:2c:9d:6e:89:3a:2e:03:62:
                    69:50:84:45:72:a3:fa:34:fa:6c:21:ca:df:88:1c:
                    6e:11:1f:c1:ea:04:a3:12:7c:5b:c9:ce:40:cd:6f:
                    df:e7:40:28:79:7e:b8:5f:d1:7b:b9:77:4a:f2:6f:
                    c3:ad:f1:44:47:85:92:a4:ee:4f:af:a1:2b:46:a6:
                    fd:2c:1c:91:af:43:4b:75:87:46:f0:13:1e:21:8a:
                    67:1a:1a:51:76:6e:f7:ba:79:ad:0d:48:32:bf:9d:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:ED:EF:B8:87:2A:12:FD:D2:F4:71:C6:4D:87:CD:FF:05:63:AC:48
            X509v3 Authority Key Identifier:
                keyid:F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c0:de:a8:63:0c:16:c8:a3:6a:7f:15:14:66:25:d4:43:25:
         53:4b:c6:59:da:cc:56:b2:41:84:e4:4a:36:85:ab:05:a3:9d:
         97:fe:c5:2d:06:be:e7:7c:23:ec:5f:3a:0d:d0:58:b3:85:62:
         6e:18:8a:15:6c:dd:14:41:95:f1:f1:ce:02:8a:7d:e9:19:41:
         45:9a:1b:3d:50:54:61:ca:07:dc:b1:3a:13:c6:ce:e2:d8:ea:
         df:1b:38:f1:e6:b7:1f:53:6a:ee:bc:9d:e2:6b:b5:cb:07:e9:
         18:24:96:eb:f8:7c:ee:32:bd:4c:db:cb:10:cc:b1:81:47:91:
         29:ae:3e:51:bd:fa:91:e4:75:f0:40:0e:f8:39:ff:e9:f2:fc:
         1f:1a:0c:38:1f:3d:ef:f3:ba:42:83:f0:9e:18:f4:45:ed:12:
         a5:73:93:d2:99:f5:71:e8:ea:8a:37:87:2c:65:2f:27:cd:fc:
         03:d0:e3:ae:6c:ec:d4:24:5c:0f:e9:4b:d7:73:75:6d:d2:79:
         9c:e6:81:2a:01:3d:f3:64:69:81:52:c4:c2:c7:33:1c:57:57:
         16:0f:72:e2:ae:8d:4a:bb:f3:d4:ab:5a:28:70:2c:48:6e:3a:
         ba:8c:9c:c5:d8:9c:00:89:94:29:cc:7b:48:f4:ed:9c:c7:35:
         89:61:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:02:14 2026 by rpki-client