Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
File:                     4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft (raw, json)
Hash identifier:          h62GaJYahy8zSwPvAX6v3R/KpNgyPvL+P+gkfvX87qA=
Subject key identifier:   E9:7C:7F:17:1C:2C:37:5A:39:16:6D:C4:EF:8E:7C:46:96:3D:BC:E1
Authority key identifier: 4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4
Certificate issuer:       /CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4
Certificate serial:       73477EDFB1ED0BD91245CCCE09CD85E2930C1A76
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 15:59:19 +0000
Manifest this update:     Tue 02 Jun 2026 15:54:19 +0000
Manifest next update:     Wed 03 Jun 2026 19:33:19 +0000
Files and hashes:         1: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: epbts0iMFTrBEO83zvZ3MaXP2Z9y72tIdDCt87torNA=)
                          2: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl (hash: yUdYojo+lDry3a5YeKTeUSdNAb1nqlxygQDPh7FGkJo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl
                          rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 19:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:47:7e:df:b1:ed:0b:d9:12:45:cc:ce:09:cd:85:e2:93:0c:1a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4
        Validity
            Not Before: Jun  2 15:54:19 2026 GMT
            Not After : Jun  3 19:33:19 2026 GMT
        Subject: CN=E97C7F171C2C375A39166DC4EF8E7C46963DBCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:15:f0:a6:bb:70:36:e3:b0:53:55:3b:d4:7d:
                    04:38:fa:fd:e5:67:96:ba:e6:7f:6a:6a:b0:68:ae:
                    4a:63:89:f1:77:55:b0:38:22:87:53:5a:32:c4:ea:
                    87:b1:bc:cd:0a:f4:4e:10:45:d4:5e:11:e9:c7:2e:
                    1c:a5:89:d1:f1:bb:25:80:64:9b:c1:ff:fa:76:f1:
                    1c:df:ed:4c:fb:01:55:13:91:c1:bb:ab:4a:39:08:
                    d1:7c:a7:e9:26:bd:fb:d9:c3:2b:0a:34:ea:c5:28:
                    32:2e:c0:36:13:77:d8:d9:50:f6:40:42:2d:47:46:
                    5d:a6:53:60:b1:3d:14:d3:43:8d:85:6f:a3:11:08:
                    20:96:a8:bd:35:0c:63:fc:6b:97:e1:f4:11:36:43:
                    c5:f3:3f:38:68:9e:f1:9c:89:81:82:01:e5:2f:d5:
                    2f:67:f3:bd:41:46:82:bc:8b:8d:87:1a:04:ed:72:
                    12:d1:c3:55:ea:96:17:9e:96:98:d6:1a:55:19:48:
                    68:5c:58:63:cd:3a:2c:eb:20:90:20:e9:fa:c1:c7:
                    cd:c9:a1:d3:3f:71:05:02:33:76:01:82:19:28:0d:
                    ba:88:5e:4f:ad:1a:04:f2:5d:59:93:65:97:73:a3:
                    64:94:b5:16:4f:1f:40:c5:c9:83:e5:51:0c:09:38:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:7F:17:1C:2C:37:5A:39:16:6D:C4:EF:8E:7C:46:96:3D:BC:E1
            X509v3 Authority Key Identifier:
                keyid:4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b4:b1:67:19:a3:26:88:80:fa:54:a8:94:48:18:d2:aa:d3:
         5d:c4:18:a5:53:3c:33:9c:77:08:4d:73:a8:de:36:a7:07:69:
         74:56:56:5e:c8:11:d2:59:c6:58:da:15:88:82:95:2b:06:7c:
         df:56:dd:bf:8c:9d:fe:26:3a:ad:d4:59:b1:f8:8f:81:4a:18:
         7b:fa:f8:d5:28:9d:16:1c:f4:0a:bc:22:bc:47:49:df:cf:f8:
         ee:5c:1c:3c:fd:bc:ea:06:c4:16:8b:3e:b9:2d:05:31:bb:09:
         e0:a5:ae:54:5f:fd:86:8f:5b:1c:b9:a5:5f:d3:fb:f7:3d:05:
         f4:81:88:48:4f:de:59:7d:9f:e1:a2:2f:52:14:11:e4:9e:78:
         fb:5d:5d:f4:4e:17:13:aa:17:7a:38:68:4e:1c:96:78:0f:f3:
         e0:62:7a:d0:0e:36:e0:60:a1:33:c5:58:5d:69:b7:71:1b:74:
         62:ec:68:fe:3a:02:c0:c9:d5:2d:67:24:f7:d2:8b:8a:64:93:
         25:bd:64:a8:fd:6f:d1:98:ee:49:d0:1c:5b:ee:22:4c:5b:25:
         b0:87:0a:35:ab:be:e6:02:16:3d:b8:93:a5:eb:c2:86:15:e2:
         12:a5:cd:ff:00:83:62:01:40:b1:ec:68:4c:e4:40:a0:f2:4a:
         ac:2d:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:26:51 2026 by rpki-client