Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
File:                     4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json)
Hash identifier:          STzMBkFzj4RG+lJ1q3TMVRAjmHTRWNzhRbDCW+qKzNw=
Subject key identifier:   9C:7D:20:8C:70:E9:AC:90:48:72:70:79:93:12:28:E9:9C:9D:AA:A7
Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
Certificate issuer:       /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Certificate serial:       39508F7A22FEFBC41750C4C2828D8677364A8349
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
Manifest number:          61
Signing time:             Sun 12 Jul 2026 23:33:17 +0000
Manifest this update:     Sun 12 Jul 2026 23:28:17 +0000
Manifest next update:     Tue 14 Jul 2026 01:22:17 +0000
Files and hashes:         1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=)
                          2: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: eOmnYSINHg0UeddIxuLp5ilN6JrS7BJta5O/LOgd4Oc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
                          rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 01:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:50:8f:7a:22:fe:fb:c4:17:50:c4:c2:82:8d:86:77:36:4a:83:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
        Validity
            Not Before: Jul 12 23:28:17 2026 GMT
            Not After : Jul 14 01:22:17 2026 GMT
        Subject: CN=9C7D208C70E9AC9048727079931228E99C9DAAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:d9:64:23:32:30:44:f0:b6:84:b0:5f:be:
                    b7:9c:fe:ac:ef:47:cb:8f:32:d5:4e:e5:31:23:b2:
                    87:30:4f:8c:d3:ed:0e:45:c5:dc:12:50:32:d2:f0:
                    cb:5f:da:81:c2:45:77:37:33:d2:6e:a9:73:fd:db:
                    94:a0:46:22:59:5e:d5:dd:e8:ae:0a:89:00:ab:f5:
                    8f:a2:4a:6b:87:2c:16:d7:57:ab:2b:b5:63:aa:78:
                    e2:76:08:71:90:a9:18:85:96:f3:6e:ec:6a:38:4b:
                    21:79:f2:83:e9:77:56:bc:c2:c2:3f:4b:52:48:58:
                    82:45:1d:80:ab:b0:5a:57:dd:80:b1:25:bb:00:1f:
                    3f:12:fc:2d:38:e5:27:82:f6:2d:af:8b:74:d2:ff:
                    35:c9:ee:34:1c:ff:c3:2b:67:e7:41:23:57:a9:3d:
                    c8:6f:c6:57:4b:68:fb:ae:3f:ce:37:ba:2f:0f:fa:
                    32:6a:32:09:3a:5c:58:24:fa:82:fc:16:f7:5c:21:
                    ad:63:8c:c8:4a:07:9b:42:1e:63:ae:ed:e4:8c:c5:
                    11:37:e1:81:17:c8:38:5c:bd:23:29:fa:e5:47:2e:
                    e1:48:f6:2f:df:2f:3d:8d:49:51:e8:eb:e8:cc:a0:
                    cb:12:3a:b7:0d:ce:6c:39:87:72:4a:e2:47:c6:f3:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7D:20:8C:70:E9:AC:90:48:72:70:79:93:12:28:E9:9C:9D:AA:A7
            X509v3 Authority Key Identifier:
                keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:a2:5a:53:dc:d5:4e:7f:31:a2:30:5e:8a:a3:7c:0c:d4:
         db:87:8e:b5:52:d3:df:22:ba:a1:c6:d8:62:45:69:37:7e:90:
         61:cc:d5:85:c5:21:b0:d0:52:d1:98:99:b1:d8:a4:98:43:1a:
         c6:63:ee:a3:31:ca:0e:52:10:92:03:0c:30:03:a9:0f:6a:e0:
         fb:04:e6:7f:2d:63:f2:58:3b:18:39:e8:97:ac:6e:c9:24:62:
         da:3f:8f:42:e7:32:e8:99:e1:80:85:62:bb:60:c0:46:de:30:
         fd:b3:28:ec:cf:6f:3e:1f:fe:f6:cc:66:c7:7e:85:57:a4:4b:
         71:28:7e:78:cc:f8:f3:65:16:0d:64:05:23:c9:8d:89:0a:48:
         d9:76:1b:a6:dc:2f:bc:16:fa:5f:36:21:8f:aa:3d:99:7f:67:
         32:c8:e3:03:48:b1:96:b4:cc:f5:f0:6b:e8:f6:f5:81:0d:e6:
         7b:82:a8:96:97:81:b2:47:fa:5e:00:0e:df:b1:84:f9:62:64:
         7b:13:83:68:12:3d:f9:c5:96:e9:84:3d:a3:34:ad:89:e6:3d:
         a7:14:4b:f6:e5:a6:61:b0:a3:c3:57:58:fe:1d:a7:8b:24:2a:
         7a:d9:0e:8e:46:45:67:46:92:59:79:d0:c9:e6:87:72:14:da:
         e2:8a:44:c9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOVCPeiL++8QXUMTCgo2GdzZKg0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2
NjM4MDhEMjAeFw0yNjA3MTIyMzI4MTdaFw0yNjA3MTQwMTIyMTdaMDMxMTAvBgNV
BAMTKDlDN0QyMDhDNzBFOUFDOTA0ODcyNzA3OTkzMTIyOEU5OUM5REFBQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiK9lkIzIwRPC2hLBfvrec/qzv
R8uPMtVO5TEjsocwT4zT7Q5FxdwSUDLS8Mtf2oHCRXc3M9JuqXP925SgRiJZXtXd
6K4KiQCr9Y+iSmuHLBbXV6srtWOqeOJ2CHGQqRiFlvNu7Go4SyF58oPpd1a8wsI/
S1JIWIJFHYCrsFpX3YCxJbsAHz8S/C045SeC9i2vi3TS/zXJ7jQc/8MrZ+dBI1ep
PchvxldLaPuuP843ui8P+jJqMgk6XFgk+oL8FvdcIa1jjMhKB5tCHmOu7eSMxRE3
4YEXyDhcvSMp+uVHLuFI9i/fLz2NSVHo6+jMoMsSOrcNzmw5h3JK4kfG82DXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnH0gjHDprJBIcnB5kxIo6ZydqqcwHwYDVR0j
BBgwFoAUSgFbCwoI0bP36jVJuWjd52Y4CNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWRjMWM0OWMtZDQwNC00NWExLTllN2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIw
QTA4RDFCM0Y3RUEzNTQ5Qjk2OERERTc2NjM4MDhEMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QTAxNUIwQjBBMDhEMUIzRjdFQTM1NDlCOTY4RERFNzY2Mzgw
OEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll
N2QtODZmNWY4NTJlMjc2LzAvNEEwMTVCMEIwQTA4RDFCM0Y3RUEzNTQ5Qjk2OERE
RTc2NjM4MDhEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEZvolpT3NVOfzGiMF6Ko3wM1NuHjrVS098i
uqHG2GJFaTd+kGHM1YXFIbDQUtGYmbHYpJhDGsZj7qMxyg5SEJIDDDADqQ9q4PsE
5n8tY/JYOxg56JesbskkYto/j0LnMuiZ4YCFYrtgwEbeMP2zKOzPbz4f/vbMZsd+
hVekS3EofnjM+PNlFg1kBSPJjYkKSNl2G6bcL7wW+l82IY+qPZl/ZzLI4wNIsZa0
zPXwa+j29YEN5nuCqJaXgbJH+l4ADt+xhPliZHsTg2gSPfnFlumEPaM0rYnmPacU
S/blpmGwo8NXWP4dp4skKnrZDo5GRWdGkll50Mnmh3IU2uKKRMk=
-----END CERTIFICATE-----
Generated at Mon Jul 13 09:54:22 2026 by rpki-client