Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
File:                     A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft (raw, json)
Hash identifier:          s76k3zXHxDK55QCJX2eAqZTx9JNSOOujSCsFtBi3AhY=
Subject key identifier:   60:A3:4C:62:D4:36:BF:CF:2F:1E:63:5A:BD:5A:B2:F3:D8:64:3B:F2
Authority key identifier: A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C
Certificate issuer:       /CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
Certificate serial:       5728592360A249466B556FE321ADA9903FDA3E02
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 21:11:28 +0000
Manifest this update:     Fri 19 Jun 2026 21:06:28 +0000
Manifest next update:     Sun 21 Jun 2026 00:04:28 +0000
Files and hashes:         1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: oVthfsHvJfZFfAfPgVnP6RK4i2YXuHXT4TJi3carfJc=)
                          2: A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl (hash: 5gYALJC94ifqCqtVkaco73/WC96befIR/QDJ7BDW97I=)
                          3: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: Xz4v16/PuWF3xc6NRQS+cFH5cfyFs8wYPFxR2GtXMDw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl
                          rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:28:59:23:60:a2:49:46:6b:55:6f:e3:21:ad:a9:90:3f:da:3e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A5A5C26039ACF216DF3E5B284345693EE8F34C
        Validity
            Not Before: Jun 19 21:06:28 2026 GMT
            Not After : Jun 21 00:04:28 2026 GMT
        Subject: CN=60A34C62D436BFCF2F1E635ABD5AB2F3D8643BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:23:45:2f:d8:fd:cf:3e:44:76:9e:14:34:60:
                    2b:f2:89:ee:d2:ab:d3:6e:b2:43:4f:6e:4e:77:e9:
                    9c:19:43:29:ed:ec:da:12:ca:ca:92:c8:3a:a3:3a:
                    23:83:4f:6a:f6:c8:fb:4d:32:92:85:07:d8:d2:54:
                    e0:21:f6:37:9e:fd:1a:c0:24:40:fe:57:fa:75:0c:
                    d0:cf:98:95:d9:b0:e0:1d:f0:e7:d9:f9:00:55:bf:
                    08:f2:cd:6d:f6:ef:27:25:a3:5b:81:bc:e3:16:36:
                    17:b8:6e:65:9d:9e:d3:d8:78:3c:cd:50:19:3d:80:
                    56:9b:f8:6c:14:47:1a:89:23:d1:be:43:5e:f3:73:
                    fc:ed:05:d7:54:2e:92:ee:12:1a:e1:75:20:43:cf:
                    ba:9a:7e:3c:bb:6d:81:89:a8:01:a4:80:cc:65:1e:
                    c7:e6:f9:03:30:3e:b4:59:0f:5e:00:42:e7:0c:9e:
                    8f:88:58:72:13:b2:6e:f0:4b:04:2d:65:36:c2:f7:
                    11:f8:06:c9:5e:95:ab:a7:6f:f7:03:f9:07:a5:c0:
                    0f:52:b4:04:08:86:cc:70:34:b8:02:1d:a0:3d:81:
                    a4:41:46:fe:1f:13:e5:6d:78:33:d9:08:07:ef:c9:
                    c4:a9:51:52:19:48:a1:8f:cc:34:0d:95:d3:5d:8b:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A3:4C:62:D4:36:BF:CF:2F:1E:63:5A:BD:5A:B2:F3:D8:64:3B:F2
            X509v3 Authority Key Identifier:
                keyid:A4:A5:A5:C2:60:39:AC:F2:16:DF:3E:5B:28:43:45:69:3E:E8:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/A4A5A5C26039ACF216DF3E5B284345693EE8F34C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:f7:83:55:25:a8:64:40:78:ac:7e:f6:ab:12:09:45:df:
         99:68:c4:b0:78:f6:40:2e:cf:20:00:09:da:77:59:19:4d:f7:
         cf:39:53:39:04:6b:f1:8c:df:ce:bd:ca:6d:14:d4:77:88:fd:
         b1:a1:4b:3c:5b:76:3b:85:93:bc:84:f0:c7:fa:fe:44:c9:c3:
         c4:fa:54:1c:0f:ad:3a:f2:61:55:c8:a4:b3:59:0c:02:de:ec:
         69:7c:1c:c1:da:30:17:db:5d:a4:ac:72:3c:a9:0a:3d:e7:9d:
         b1:10:1c:27:d3:5d:3a:b0:51:f2:ab:8d:ea:1e:c4:14:1d:6b:
         11:22:35:f3:75:2e:98:cf:00:48:1f:46:3d:74:09:b9:df:b9:
         37:dc:1b:2a:08:b0:aa:e3:b9:8a:c3:7e:96:17:1b:b2:55:ba:
         27:61:d0:df:96:c6:bf:fe:01:83:86:48:6d:ac:cb:5a:9d:09:
         2c:44:c1:f6:0c:fb:fe:be:00:40:73:e9:3c:eb:c0:36:94:2a:
         3c:b5:81:e4:c4:82:57:02:44:aa:d4:ca:db:27:97:75:6a:c1:
         6f:41:5c:6c:5a:1a:01:3f:6b:33:48:7e:5b:46:c2:51:24:f3:
         81:14:14:ea:05:48:bd:61:dc:66:21:88:14:a8:d7:7b:fc:20:
         a3:75:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:17:17 2026 by rpki-client