Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
File:                     484F335D7E0307C0F7FF120F455566A5DD73933A.mft (raw, json)
Hash identifier:          OsyfZQIP6KS19MspDuOyK+46UPUPgR2L4yS9DwK7yZU=
Subject key identifier:   D0:80:AA:42:9B:EA:FA:E8:FD:C9:05:B3:04:55:C0:17:E8:5B:19:2B
Authority key identifier: 48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A
Certificate issuer:       /CN=484F335D7E0307C0F7FF120F455566A5DD73933A
Certificate serial:       1618F48AEE7CF580D17AB6DFDEFEF97126104D66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 19:04:01 +0000
Manifest this update:     Fri 19 Jun 2026 18:59:01 +0000
Manifest next update:     Sat 20 Jun 2026 22:09:01 +0000
Files and hashes:         1: 484F335D7E0307C0F7FF120F455566A5DD73933A.crl (hash: w6BVvMPTAeUY73/DqxP0Gny5B9jefk1XxLTqX90Puhw=)
                          2: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: ESQviQfyCrkTtBnJrmVbWeQokiDKSwPNHmI0uyVl6TM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl
                          rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 22:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:18:f4:8a:ee:7c:f5:80:d1:7a:b6:df:de:fe:f9:71:26:10:4d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484F335D7E0307C0F7FF120F455566A5DD73933A
        Validity
            Not Before: Jun 19 18:59:01 2026 GMT
            Not After : Jun 20 22:09:01 2026 GMT
        Subject: CN=D080AA429BEAFAE8FDC905B30455C017E85B192B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:7f:c9:8f:4f:87:e8:86:e0:96:f5:c5:b5:
                    12:3a:c9:ae:32:41:fc:65:10:51:fb:da:45:e8:95:
                    ea:a6:60:99:bb:c8:77:a6:69:1d:70:ed:11:7a:04:
                    04:53:73:d0:d4:97:e7:93:26:95:5a:af:e0:ac:6a:
                    81:d5:81:62:27:60:c8:1b:9c:3f:e4:c2:bd:a6:0f:
                    fb:c1:83:8f:2f:b9:e0:98:ad:ee:0c:84:5d:1b:25:
                    a5:0f:2a:6d:cf:b8:bb:cc:be:52:3e:f1:bf:12:01:
                    fb:cd:70:d1:60:bb:26:a6:a8:b1:c9:5d:81:29:d3:
                    8b:bb:88:3b:be:2a:01:ff:e3:42:02:b7:71:e5:1d:
                    e6:14:5f:f0:83:b6:b9:3c:97:f8:4e:cc:fc:8d:80:
                    d3:52:31:f6:f0:b8:32:37:38:02:bd:b5:17:7a:9e:
                    3a:d5:55:7c:09:fb:28:1a:83:1f:58:5a:e5:b9:36:
                    d9:1b:0f:d8:02:d3:01:01:61:c3:fc:2f:f2:cf:43:
                    ef:b0:db:b7:c7:34:54:e7:da:07:3b:8a:98:3b:bd:
                    ee:f3:88:a1:07:3e:01:5b:c2:01:02:93:62:1e:49:
                    93:eb:58:cd:85:d0:a8:e8:cd:ee:97:1c:92:d9:5c:
                    2a:41:08:3c:48:0d:15:d9:c3:03:a9:f7:35:25:b1:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:80:AA:42:9B:EA:FA:E8:FD:C9:05:B3:04:55:C0:17:E8:5B:19:2B
            X509v3 Authority Key Identifier:
                keyid:48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:8b:5b:36:6a:4d:04:ae:80:2e:35:b0:60:55:16:c3:05:
         cd:bc:e3:2d:9b:aa:c5:8b:9c:8b:03:e0:5d:2c:19:da:3d:82:
         03:78:ae:96:68:5c:49:81:34:a3:22:4e:0a:58:56:33:69:8e:
         86:82:5a:da:aa:c0:b0:f7:b9:a2:b7:2d:d4:64:b1:b8:2e:1e:
         fd:6e:f8:63:7b:9e:70:19:32:7e:ae:55:3c:9c:d7:ab:78:da:
         87:52:fd:83:ce:eb:84:57:68:e4:48:ec:b3:5e:ce:4d:e7:0e:
         cd:14:31:46:93:0e:e9:74:f4:c0:f3:93:84:89:67:5b:15:79:
         de:9a:3b:97:6c:e6:7e:f0:9c:7e:cc:d3:77:00:8c:1c:37:71:
         81:66:6d:49:56:ec:ac:8b:52:18:14:f2:41:c2:e6:fe:80:64:
         91:0c:6f:37:a4:47:2f:40:68:0d:2b:2e:d6:ea:42:8b:a9:e5:
         52:3c:ff:c2:80:40:8f:03:c2:04:d5:a9:fa:9c:b4:f8:fe:3d:
         29:59:9f:b9:19:14:e5:09:04:c1:f1:6d:4b:25:21:02:fa:44:
         fb:22:b5:bd:21:c6:b5:40:f4:c9:77:0c:6b:96:f1:f0:ba:44:
         3f:cb:75:25:64:46:da:a1:bf:ef:29:ef:01:04:d4:dc:03:f6:
         93:d6:9a:ed
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFhj0iu589YDRerbf3v75cSYQTWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg0RjMzNUQ3RTAzMDdDMEY3RkYxMjBGNDU1NTY2QTVE
RDczOTMzQTAeFw0yNjA2MTkxODU5MDFaFw0yNjA2MjAyMjA5MDFaMDMxMTAvBgNV
BAMTKEQwODBBQTQyOUJFQUZBRThGREM5MDVCMzA0NTVDMDE3RTg1QjE5MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaCH/Jj0+H6IbglvXFtRI6ya4y
QfxlEFH72kXoleqmYJm7yHemaR1w7RF6BARTc9DUl+eTJpVar+CsaoHVgWInYMgb
nD/kwr2mD/vBg48vueCYre4MhF0bJaUPKm3PuLvMvlI+8b8SAfvNcNFguyamqLHJ
XYEp04u7iDu+KgH/40ICt3HlHeYUX/CDtrk8l/hOzPyNgNNSMfbwuDI3OAK9tRd6
njrVVXwJ+ygagx9YWuW5NtkbD9gC0wEBYcP8L/LPQ++w27fHNFTn2gc7ipg7ve7z
iKEHPgFbwgECk2IeSZPrWM2F0Kjoze6XHJLZXCpBCDxIDRXZwwOp9zUlsW6dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0ICqQpvq+uj9yQWzBFXAF+hbGSswHwYDVR0j
BBgwFoAUSE8zXX4DB8D3/xIPRVVmpd1zkzowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTE3YzhjMDEtNGFmNy00MWIwLTg1YTMtOWQxZmE0ZWI5ZmJhLzAvNDg0RjMzNUQ3
RTAzMDdDMEY3RkYxMjBGNDU1NTY2QTVERDczOTMzQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80ODRGMzM1RDdFMDMwN0MwRjdGRjEyMEY0NTU1NjZBNURENzM5
MzNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1
YTMtOWQxZmE0ZWI5ZmJhLzAvNDg0RjMzNUQ3RTAzMDdDMEY3RkYxMjBGNDU1NTY2
QTVERDczOTMzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB8Li1s2ak0EroAuNbBgVRbDBc284y2bqsWL
nIsD4F0sGdo9ggN4rpZoXEmBNKMiTgpYVjNpjoaCWtqqwLD3uaK3LdRksbguHv1u
+GN7nnAZMn6uVTyc16t42odS/YPO64RXaORI7LNezk3nDs0UMUaTDul09MDzk4SJ
Z1sVed6aO5ds5n7wnH7M03cAjBw3cYFmbUlW7KyLUhgU8kHC5v6AZJEMbzekRy9A
aA0rLtbqQoup5VI8/8KAQI8DwgTVqfqctPj+PSlZn7kZFOUJBMHxbUslIQL6RPsi
tb0hxrVA9Ml3DGuW8fC6RD/LdSVkRtqhv+8p7wEE1NwD9pPWmu0=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:52:00 2026 by rpki-client