Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
File:                     4D98C36AE414DE2AFABA625C601188337044CEB5.mft (raw, json)
Hash identifier:          X00tD/D5CqkMGLG9H7Ct8jV7LcY0HhYQinqDDVyPvGo=
Subject key identifier:   CA:44:FF:B6:B5:D9:16:E8:B1:FD:97:45:27:35:05:73:2D:45:D2:1A
Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
Certificate issuer:       /CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Certificate serial:       30F4714A8ADF19303C2390D4EA9B9819BED00AB2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 13:17:58 +0000
Manifest this update:     Mon 20 Jul 2026 13:12:58 +0000
Manifest next update:     Tue 21 Jul 2026 14:37:58 +0000
Files and hashes:         1: 4D98C36AE414DE2AFABA625C601188337044CEB5.crl (hash: SrR8TZfrh+ta+3RjXDLuMkTgaOpLiVcD6IIllAKec28=)
                          2: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: 6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 14:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f4:71:4a:8a:df:19:30:3c:23:90:d4:ea:9b:98:19:be:d0:0a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5
        Validity
            Not Before: Jul 20 13:12:58 2026 GMT
            Not After : Jul 21 14:37:58 2026 GMT
        Subject: CN=CA44FFB6B5D916E8B1FD9745273505732D45D21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ae:33:ce:d2:f8:13:8a:0c:bd:86:c5:bb:80:
                    78:9b:21:8b:90:e1:04:20:63:39:82:41:f2:1f:ca:
                    96:bc:6c:2c:5e:e5:b6:d6:2a:90:f7:04:e7:1f:9f:
                    d3:26:57:ce:02:41:b8:df:5c:79:1e:4c:2d:48:ef:
                    74:49:66:fc:29:f8:8f:22:0f:07:b1:81:19:45:f9:
                    94:56:21:1f:63:b0:c3:dd:64:a0:91:32:e4:23:c8:
                    c6:e4:b5:42:2d:b2:19:02:9e:41:a1:64:4c:0c:67:
                    fa:b0:6a:bb:97:b1:9b:bf:a1:34:0e:ba:44:1b:87:
                    ec:44:d1:0b:45:77:1c:b3:6a:02:8b:68:95:81:da:
                    67:3b:72:d0:4d:d5:a6:8c:ee:ec:3b:e6:86:74:a0:
                    0d:88:35:8d:ee:c6:9e:22:d1:87:f4:0b:b1:6d:c4:
                    6d:bb:62:f9:0f:49:5c:91:6e:47:87:63:74:f9:d3:
                    d7:86:1f:90:48:d9:a4:5c:d4:5b:91:77:05:39:c3:
                    e9:22:0d:f8:03:45:cd:1b:cf:e9:fd:ae:87:40:6c:
                    86:2e:fb:5f:9b:30:e6:d7:13:3a:5b:4d:92:d0:c8:
                    96:03:fe:c3:42:81:55:3d:2c:6c:21:79:c1:cc:f8:
                    74:d9:37:4c:e5:61:6c:08:7d:12:9b:bd:db:fe:36:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:44:FF:B6:B5:D9:16:E8:B1:FD:97:45:27:35:05:73:2D:45:D2:1A
            X509v3 Authority Key Identifier:
                keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b4:23:28:89:03:42:bf:8b:31:95:c1:e4:f6:28:d2:f4:c5:
         a6:76:69:42:73:19:de:d1:cb:03:15:6f:ba:50:32:a1:6e:f7:
         8f:4b:43:e2:34:c7:c6:72:86:18:d2:3d:59:44:57:e4:fe:3d:
         8a:6b:63:a7:29:d8:49:30:13:6d:a2:13:03:86:61:c1:39:48:
         e1:33:98:c2:90:65:9e:02:5d:9a:0c:f3:a6:e7:f6:91:f3:0c:
         c8:de:86:7c:4c:1f:f3:2a:1d:17:00:c7:bd:9f:7a:84:0b:18:
         04:0f:83:20:fd:2c:c9:f1:a4:e9:31:3f:5c:35:11:15:bb:b7:
         69:46:69:3d:17:e4:36:5b:88:f5:f5:23:15:63:fb:50:30:be:
         d9:3b:ab:f5:43:53:9f:90:1e:64:e6:44:84:77:a8:b6:0f:43:
         71:e2:4a:41:58:b8:d7:f9:59:4d:36:6c:d0:0d:b1:f6:20:01:
         c0:c1:f5:80:2a:5a:de:e0:f3:fd:ce:0a:40:6e:53:20:6a:93:
         33:27:e7:4e:23:98:b4:47:0c:99:cd:57:62:58:67:76:b3:58:
         35:a7:7c:8a:b8:3c:cd:c8:0f:c4:29:d0:54:7e:98:5e:e8:4e:
         d3:f3:96:d9:54:ba:af:9d:d9:da:bc:05:c5:27:ab:e9:ac:13:
         8d:49:0b:9e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMPRxSorfGTA8I5DU6puYGb7QCrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3
MDQ0Q0VCNTAeFw0yNjA3MjAxMzEyNThaFw0yNjA3MjExNDM3NThaMDMxMTAvBgNV
BAMTKENBNDRGRkI2QjVEOTE2RThCMUZEOTc0NTI3MzUwNTczMkQ0NUQyMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtrjPO0vgTigy9hsW7gHibIYuQ
4QQgYzmCQfIfypa8bCxe5bbWKpD3BOcfn9MmV84CQbjfXHkeTC1I73RJZvwp+I8i
DwexgRlF+ZRWIR9jsMPdZKCRMuQjyMbktUItshkCnkGhZEwMZ/qwaruXsZu/oTQO
ukQbh+xE0QtFdxyzagKLaJWB2mc7ctBN1aaM7uw75oZ0oA2INY3uxp4i0Yf0C7Ft
xG27YvkPSVyRbkeHY3T509eGH5BI2aRc1FuRdwU5w+kiDfgDRc0bz+n9rodAbIYu
+1+bMObXEzpbTZLQyJYD/sNCgVU9LGwhecHM+HTZN0zlYWwIfRKbvdv+NjS/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUykT/trXZFuix/ZdFJzUFcy1F0howHwYDVR0j
BBgwFoAUTZjDauQU3ir6umJcYBGIM3BEzrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDRmNmQ4NmItZTNkZi00ZTJmLTkzNmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFF
NDE0REUyQUZBQkE2MjVDNjAxMTg4MzM3MDQ0Q0VCNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RDk4QzM2QUU0MTRERTJBRkFCQTYyNUM2MDExODgzMzcwNDRD
RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz
NmYtZWQ5Yjk2MzUwM2ExLzAvNEQ5OEMzNkFFNDE0REUyQUZBQkE2MjVDNjAxMTg4
MzM3MDQ0Q0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFe0IyiJA0K/izGVweT2KNL0xaZ2aUJzGd7R
ywMVb7pQMqFu949LQ+I0x8ZyhhjSPVlEV+T+PYprY6cp2EkwE22iEwOGYcE5SOEz
mMKQZZ4CXZoM86bn9pHzDMjehnxMH/MqHRcAx72feoQLGAQPgyD9LMnxpOkxP1w1
ERW7t2lGaT0X5DZbiPX1IxVj+1Awvtk7q/VDU5+QHmTmRIR3qLYPQ3HiSkFYuNf5
WU02bNANsfYgAcDB9YAqWt7g8/3OCkBuUyBqkzMn504jmLRHDJnNV2JYZ3azWDWn
fIq4PM3ID8Qp0FR+mF7oTtPzltlUuq+d2dq8BcUnq+msE41JC54=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:11 2026 by rpki-client