Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
File:                     4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft (raw, json)
Hash identifier:          LbG6EbmRokKHcfqgOYKLLDqRMHWhQlkxKRaKSxjkvAs=
Subject key identifier:   D6:4D:9D:69:9B:0D:AC:C6:8A:CA:D0:FE:19:AE:1F:69:EB:AB:94:FF
Authority key identifier: 4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54
Certificate issuer:       /CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
Certificate serial:       08F76E009F93EF0909BAA8BAE2B11ABCE56674A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 21:15:48 +0000
Manifest this update:     Tue 02 Jun 2026 21:10:48 +0000
Manifest next update:     Wed 03 Jun 2026 23:43:48 +0000
Files and hashes:         1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: dIbMNlmzPRtmx/pqtJnbGmYAZfEP0PtpQbV8sPyHXmY=)
                          2: 4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl (hash: EfU9IQ+R/pMXQ/Y5XIiMr4xuzLFrUJb0deD8CjIT8Po=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl
                          rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f7:6e:00:9f:93:ef:09:09:ba:a8:ba:e2:b1:1a:bc:e5:66:74:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
        Validity
            Not Before: Jun  2 21:10:48 2026 GMT
            Not After : Jun  3 23:43:48 2026 GMT
        Subject: CN=D64D9D699B0DACC68ACAD0FE19AE1F69EBAB94FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:d3:32:af:16:8d:ff:8d:81:91:21:01:64:
                    b2:42:7f:6c:81:cf:77:bf:9c:ab:ed:9e:cb:1d:62:
                    e5:af:3f:55:2d:41:6b:e1:7a:b6:4a:fb:77:84:d9:
                    3e:35:93:88:3b:da:de:aa:e3:45:98:87:a7:95:9a:
                    9e:55:65:e0:ae:5c:c4:6b:c8:31:df:64:2e:91:dd:
                    f4:6c:32:37:d0:08:a8:b4:92:61:ec:46:e6:bc:9e:
                    4e:29:c9:79:8c:39:dd:93:97:8a:c5:ea:fa:50:b9:
                    f8:5a:b7:ca:91:9c:01:77:e3:4a:c5:6f:87:30:f8:
                    73:33:42:0b:5c:ef:2f:45:d3:0d:84:02:74:bc:1f:
                    9f:79:de:97:f8:0e:47:8a:65:71:df:ca:30:85:71:
                    63:71:e4:cb:e5:08:01:27:46:0d:1e:26:69:32:f3:
                    df:11:06:05:7c:b5:75:92:dc:50:ec:68:b0:41:f9:
                    f1:6a:3e:34:59:d9:32:da:a8:7d:e8:02:82:09:17:
                    2c:94:17:33:43:ba:74:b3:6a:e3:56:02:c2:38:31:
                    f0:d1:8c:b7:e7:ab:bc:9c:ee:34:45:05:66:b7:4c:
                    3b:c4:37:94:7e:59:29:98:d6:4d:c9:69:4d:e9:13:
                    70:ed:be:f6:01:9b:37:17:fa:7c:e7:02:80:2b:c4:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4D:9D:69:9B:0D:AC:C6:8A:CA:D0:FE:19:AE:1F:69:EB:AB:94:FF
            X509v3 Authority Key Identifier:
                keyid:4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:e8:28:db:ce:4e:ac:36:a1:f7:2d:3e:90:7d:57:ca:fc:8a:
         ba:cf:e8:7c:ea:43:f9:13:64:7e:6c:52:56:e5:63:0d:dd:fe:
         ae:c4:76:c0:3c:36:fd:c3:b8:b5:cd:26:e0:2a:b5:a2:76:af:
         d6:c9:a2:f0:df:70:d3:4b:6a:24:e5:5d:a3:89:37:6c:70:6e:
         14:d7:e3:75:a0:30:21:a5:13:58:f6:23:67:e5:9a:8f:79:03:
         40:23:ac:35:92:78:08:59:ab:36:19:ac:4d:1b:65:28:35:cf:
         fa:f5:14:c3:9d:51:d0:c8:3c:7d:62:e6:6c:74:f2:74:b1:e1:
         50:88:6a:6d:2a:88:03:0c:5f:49:c5:0c:15:5d:14:bd:b4:3b:
         ea:fc:79:09:b8:c0:98:bb:ff:49:d4:fa:43:21:fc:47:58:6a:
         35:e3:34:d7:5d:ee:3b:62:0c:25:a2:66:19:76:41:e4:b2:08:
         80:74:f6:88:01:7d:fd:ce:74:33:ba:c1:d5:47:e3:72:1c:fc:
         e7:dc:c8:3a:ed:f0:5b:de:4c:74:9d:85:d3:85:d3:d5:71:c2:
         f3:b1:5c:e8:93:00:90:87:0c:09:e0:be:f7:a2:17:de:bf:7e:
         76:32:4e:c6:37:8e:5a:b4:f0:1c:07:d4:b6:77:8a:b7:52:a6:
         81:47:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:00:54 2026 by rpki-client