Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
File:                     4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft (raw, json)
Hash identifier:          5tRBG4iiG573kefNwkpS3lZMqhKUbZUPrdsNugE4rmM=
Subject key identifier:   CF:93:01:E9:F8:B6:72:6F:27:FD:1A:BD:CF:AF:67:8D:CB:8B:D1:7B
Authority key identifier: 4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3
Certificate issuer:       /CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
Certificate serial:       169B79D99FC22CC92C63E4D55F8FF69B91CC8D36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
Manifest number:          2C
Signing time:             Tue 02 Jun 2026 21:47:11 +0000
Manifest this update:     Tue 02 Jun 2026 21:42:11 +0000
Manifest next update:     Thu 04 Jun 2026 00:28:11 +0000
Files and hashes:         1: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: YUIYXOMtckDPfw6P14i0EQXXM9bXJM2DHMRCUnkqTUY=)
                          2: 4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl (hash: huD56J/wltdgVnErWs65A1wJfOMbo1vu+oB7qh+nA18=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl
                          rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 00:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9b:79:d9:9f:c2:2c:c9:2c:63:e4:d5:5f:8f:f6:9b:91:cc:8d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7450C2794E42559EFBF3A90FB043D56A2F97E3
        Validity
            Not Before: Jun  2 21:42:11 2026 GMT
            Not After : Jun  4 00:28:11 2026 GMT
        Subject: CN=CF9301E9F8B6726F27FD1ABDCFAF678DCB8BD17B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:f2:4b:ed:05:04:5c:7c:8d:ec:a2:68:35:
                    c9:9e:b4:a1:03:b0:16:b7:1c:27:80:db:f0:80:a4:
                    30:c4:d8:ca:cd:03:c5:61:b5:71:96:80:4b:c9:e7:
                    42:ba:5c:f7:64:eb:a1:17:ba:0d:a6:f6:73:88:73:
                    f1:5e:fa:19:ba:aa:c7:a5:8f:0c:af:49:60:5f:cd:
                    66:44:a6:76:02:11:3f:de:52:6c:0c:11:9e:57:06:
                    77:3a:26:f3:fa:09:30:c4:d9:cd:63:3b:55:8c:b5:
                    d3:37:b8:b0:c7:ee:eb:72:c9:52:06:52:23:9e:42:
                    39:11:40:54:b0:f8:7f:61:1a:f0:75:4f:1d:44:2f:
                    5f:10:38:a9:66:c4:be:b1:ee:6e:5c:7b:9f:b6:79:
                    f5:7d:dd:7c:36:7e:c6:56:05:1c:b2:72:54:3e:88:
                    ae:05:e1:c2:87:ed:f7:df:e9:99:72:02:2b:05:00:
                    77:dd:db:c0:be:66:89:3b:de:e9:77:af:ac:b1:7d:
                    d3:60:a3:09:af:73:29:8d:91:64:a9:6d:45:34:9d:
                    82:5b:4e:70:b2:aa:b2:d7:52:20:58:16:2f:af:72:
                    c4:62:4a:31:42:96:ff:47:d7:2e:2b:f9:09:33:d9:
                    b2:4a:d7:86:83:9d:94:ef:af:7a:a8:e1:3e:d9:92:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:93:01:E9:F8:B6:72:6F:27:FD:1A:BD:CF:AF:67:8D:CB:8B:D1:7B
            X509v3 Authority Key Identifier:
                keyid:4D:74:50:C2:79:4E:42:55:9E:FB:F3:A9:0F:B0:43:D5:6A:2F:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/4D7450C2794E42559EFBF3A90FB043D56A2F97E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:e6:b9:61:d9:97:08:97:a0:d5:13:58:b6:f1:9c:6e:05:
         43:6c:29:ff:c0:3f:15:ea:ec:22:13:c8:97:4a:22:3a:62:47:
         70:b0:e7:8c:2f:7b:97:43:3e:9d:7b:bd:4c:98:a0:7b:7c:c0:
         77:08:41:33:40:27:50:ac:b5:09:6d:d6:b9:78:6c:0c:5b:23:
         ea:4e:a0:93:f7:f4:36:28:b9:d0:0c:dc:25:c8:db:ab:da:c3:
         6c:d2:55:17:a2:58:5d:9a:58:14:66:92:23:4d:3a:33:f7:e3:
         9e:a6:67:29:d4:ea:fe:4a:3a:22:5a:5e:47:33:af:78:dc:3c:
         76:64:e5:fc:14:b5:d8:ee:58:1e:64:bf:9b:b1:ae:d7:39:a2:
         5c:2f:8a:ea:71:d6:91:21:99:b2:52:2b:fd:8f:8a:87:59:3c:
         3b:d3:25:3b:56:d2:f6:9d:f0:7b:3f:99:e8:46:d4:a5:ad:cd:
         c2:87:90:a7:4b:1b:88:6d:ef:d9:c2:a4:d4:85:42:99:08:44:
         7d:5c:93:80:32:fb:60:8a:a0:71:c7:6d:3d:0c:21:09:dc:ba:
         bd:10:6a:a5:cd:e4:c6:7f:04:c9:b4:74:93:dd:94:a7:c9:2a:
         d2:24:49:1c:0a:48:f4:88:80:72:26:cf:6f:4e:90:ab:a3:7d:
         3a:8f:af:32
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFpt52Z/CLMksY+TVX4/2m5HMjTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2
QTJGOTdFMzAeFw0yNjA2MDIyMTQyMTFaFw0yNjA2MDQwMDI4MTFaMDMxMTAvBgNV
BAMTKENGOTMwMUU5RjhCNjcyNkYyN0ZEMUFCRENGQUY2NzhEQ0I4QkQxN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2/JL7QUEXHyN7KJoNcmetKED
sBa3HCeA2/CApDDE2MrNA8VhtXGWgEvJ50K6XPdk66EXug2m9nOIc/Fe+hm6qsel
jwyvSWBfzWZEpnYCET/eUmwMEZ5XBnc6JvP6CTDE2c1jO1WMtdM3uLDH7utyyVIG
UiOeQjkRQFSw+H9hGvB1Tx1EL18QOKlmxL6x7m5ce5+2efV93Xw2fsZWBRyyclQ+
iK4F4cKH7fff6ZlyAisFAHfd28C+Zok73ul3r6yxfdNgowmvcymNkWSpbUU0nYJb
TnCyqrLXUiBYFi+vcsRiSjFClv9H1y4r+Qkz2bJK14aDnZTvr3qo4T7ZkofPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUz5MB6fi2cm8n/Rq9z69njcuL0XswHwYDVR0j
BBgwFoAUTXRQwnlOQlWe+/OpD7BD1Wovl+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTM1ZjE1YzktNTg0My00NzA1LWI2OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3
OTRFNDI1NTlFRkJGM0E5MEZCMDQzRDU2QTJGOTdFMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RDc0NTBDMjc5NEU0MjU1OUVGQkYzQTkwRkIwNDNENTZBMkY5
N0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM1ZjE1YzktNTg0My00NzA1LWI2
OTQtZmU1ZTdjZTE5ODA4LzAvNEQ3NDUwQzI3OTRFNDI1NTlFRkJGM0E5MEZCMDQz
RDU2QTJGOTdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABle5rlh2ZcIl6DVE1i28ZxuBUNsKf/APxXq
7CITyJdKIjpiR3Cw54wve5dDPp17vUyYoHt8wHcIQTNAJ1CstQlt1rl4bAxbI+pO
oJP39DYoudAM3CXI26vaw2zSVReiWF2aWBRmkiNNOjP3456mZynU6v5KOiJaXkcz
r3jcPHZk5fwUtdjuWB5kv5uxrtc5olwviupx1pEhmbJSK/2PiodZPDvTJTtW0vad
8Hs/mehG1KWtzcKHkKdLG4ht79nCpNSFQpkIRH1ck4Ay+2CKoHHHbT0MIQncur0Q
aqXN5MZ/BMm0dJPdlKfJKtIkSRwKSPSIgHImz29OkKujfTqPrzI=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:38:27 2026 by rpki-client