Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
File:                     4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json)
Hash identifier:          4l+qvoMfNu3WQ3UQkv5lWWd8uF4g42REbXfL3EmRkSs=
Subject key identifier:   9E:69:5C:4C:C0:DA:7E:D7:71:A6:2F:23:B8:C6:4B:6D:41:F5:7F:A9
Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
Certificate issuer:       /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Certificate serial:       4610E28E92FCED6FB29FE623D643B912FA3903B2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 22:22:54 +0000
Manifest this update:     Tue 02 Jun 2026 22:17:54 +0000
Manifest next update:     Thu 04 Jun 2026 00:09:54 +0000
Files and hashes:         1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=)
                          2: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: dGAR17+Q5PkKlTDv5qJZva6n+3wQm4VgCTh1AvrUbtY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
                          rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 00:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:10:e2:8e:92:fc:ed:6f:b2:9f:e6:23:d6:43:b9:12:fa:39:03:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
        Validity
            Not Before: Jun  2 22:17:54 2026 GMT
            Not After : Jun  4 00:09:54 2026 GMT
        Subject: CN=9E695C4CC0DA7ED771A62F23B8C64B6D41F57FA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:51:79:11:79:f3:77:f5:0a:3f:a3:82:ad:
                    fd:7f:84:fa:ae:33:b1:ac:b7:40:14:56:3f:50:2f:
                    76:22:a4:9e:0e:3f:6e:da:3d:c3:ec:08:df:df:e9:
                    0d:10:12:25:e4:9e:06:ab:e2:fd:a3:30:8a:c8:7b:
                    d5:e5:10:23:c5:93:d1:c6:95:74:78:02:5f:46:44:
                    11:44:67:18:d0:ad:9b:6b:ea:8a:36:f2:b2:ea:50:
                    6c:96:6b:37:01:c4:65:9b:ad:37:86:09:1f:27:65:
                    ab:df:16:a7:ad:ab:ae:b9:c4:e7:fe:42:5a:49:64:
                    21:86:a0:5d:42:b0:b5:46:48:ec:f6:71:23:be:54:
                    f0:4f:7d:b6:04:a4:61:e0:0b:af:1e:2a:27:de:db:
                    6f:5e:8d:a4:0f:4e:56:1c:d2:46:90:d2:d4:90:f4:
                    a4:b0:27:71:3d:19:51:98:eb:65:f7:7c:c7:0a:32:
                    8e:0e:6b:b0:4f:06:ce:f8:35:72:d6:07:ea:4f:3a:
                    c4:e5:91:3f:9e:19:88:6f:51:e3:cb:5d:de:6a:db:
                    09:da:8e:0b:17:65:ea:a9:ee:02:86:31:9a:72:2c:
                    89:1d:d6:a1:67:34:17:13:57:66:1c:42:65:ec:87:
                    b0:e8:0a:f5:69:ef:9a:de:ed:59:8e:94:c0:68:48:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:69:5C:4C:C0:DA:7E:D7:71:A6:2F:23:B8:C6:4B:6D:41:F5:7F:A9
            X509v3 Authority Key Identifier:
                keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:3f:46:e3:2d:3b:76:50:90:14:f5:b7:bc:e5:d2:77:8f:
         50:32:b6:25:ec:06:04:57:94:0b:71:ee:b2:ad:75:cf:73:c6:
         b0:41:0c:44:bf:95:cc:1f:12:13:7a:ac:0b:a1:5c:78:e8:fc:
         bc:0c:55:0b:80:08:fb:9a:39:43:da:db:ff:e1:1a:3c:be:c6:
         72:d9:1b:36:06:68:32:2e:02:33:80:0d:d5:3c:40:3e:8f:3b:
         5c:a5:b6:5e:be:92:46:02:cd:06:04:ca:f7:7a:4f:e2:70:bd:
         85:fb:1b:e6:2e:6f:b4:c1:80:94:01:79:02:d3:d0:54:25:3d:
         6d:5f:8d:91:bf:b0:07:cf:6e:11:e8:3a:e7:fa:24:9b:0a:34:
         59:76:11:34:ff:e1:28:1d:c4:d6:18:0b:9b:3e:49:75:72:04:
         42:a6:dc:42:8e:0a:b3:30:90:42:c1:72:aa:37:a0:31:fe:03:
         b2:b5:f0:9f:49:b1:a2:59:35:ad:13:36:a9:51:b6:c6:2c:93:
         86:a3:28:17:93:f9:96:18:81:70:07:f0:7d:7b:7c:f0:b3:ac:
         98:f9:e9:1e:46:64:18:1e:d4:e5:57:d3:97:5f:4d:a5:96:a2:
         20:5b:0b:2d:89:95:05:2c:93:13:70:d4:9a:1c:71:2f:93:0c:
         43:04:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:44:15 2026 by rpki-client