Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
File:                     B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft (raw, json)
Hash identifier:          5INMqFoNadA2vKA9R1011G5XzfhTVZ7dxHRL7dw2GNw=
Subject key identifier:   8D:0A:2E:66:8C:06:3B:C5:18:E9:81:A7:58:50:83:30:24:16:95:C9
Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
Certificate issuer:       /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Certificate serial:       23EB8CC97473F9FACCBA8C4E74745A91F882453E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
Manifest number:          EA
Signing time:             Sat 24 Oct 2026 00:55:14 +0000
Manifest this update:     Sat 24 Oct 2026 00:50:14 +0000
Manifest next update:     Sun 25 Oct 2026 03:24:14 +0000
Files and hashes:         1: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=)
                          2: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl (hash: O5HJ6z4Rf58exrZVKx8jnFCHmUd0W28OgAVkkw7VEmw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
                          rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 03:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:eb:8c:c9:74:73:f9:fa:cc:ba:8c:4e:74:74:5a:91:f8:82:45:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
        Validity
            Not Before: Oct 24 00:50:14 2026 GMT
            Not After : Oct 25 03:24:14 2026 GMT
        Subject: CN=8D0A2E668C063BC518E981A758508330241695C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:8a:a9:10:17:1c:97:73:09:e1:44:57:6e:
                    88:62:a3:4b:7b:90:ed:d0:8a:04:49:a2:ca:99:ab:
                    d9:60:ec:4a:d6:87:ca:83:70:24:7f:37:99:77:f7:
                    ce:82:53:25:1d:de:c1:09:15:d8:32:0c:bb:be:90:
                    02:e6:f4:c0:bb:da:12:8f:5a:15:e0:58:a5:24:ab:
                    00:61:01:38:b8:c1:c8:4d:8a:fa:96:de:c9:3c:56:
                    d2:a4:5a:29:c2:d6:3c:c6:b9:96:18:9e:a7:45:dc:
                    7f:f2:91:eb:80:2c:ab:43:56:5a:4d:d3:f0:2c:90:
                    54:99:51:e0:2b:32:8d:42:c8:39:09:6a:15:66:19:
                    03:f8:11:c8:af:6c:a1:c2:2f:a5:7b:2c:33:2a:85:
                    1f:92:25:1c:87:44:24:a7:6c:b2:ce:cb:5d:2c:69:
                    87:61:50:7d:4f:f6:9e:af:6e:33:15:b3:f6:f6:f4:
                    6b:33:b5:ee:6a:03:3f:47:e2:97:3c:bd:33:34:95:
                    6f:f7:dc:d5:aa:74:69:7f:34:a9:6b:61:9a:ee:a4:
                    f3:bf:05:ce:d2:d9:27:36:89:c2:bb:13:bb:02:1b:
                    0f:1e:e0:5e:69:d0:56:bf:59:42:0d:95:13:39:1b:
                    36:15:6e:de:d8:61:0d:4e:67:c7:ad:c3:db:ea:bb:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0A:2E:66:8C:06:3B:C5:18:E9:81:A7:58:50:83:30:24:16:95:C9
            X509v3 Authority Key Identifier:
                keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d2:10:c2:26:0a:95:b6:5b:02:d2:ef:c8:af:a2:c1:c2:b7:
         67:60:e2:21:8b:0b:1e:e0:87:d9:4e:06:80:49:c9:66:05:d9:
         16:ba:42:9c:3a:93:cd:24:9e:7a:28:4d:c5:a7:3e:2d:11:3b:
         b1:7b:5c:11:e6:31:9e:89:9e:cb:34:95:7d:72:ac:4f:c0:1f:
         7d:fd:ba:a3:b3:88:b9:08:f4:a8:3f:e4:c8:40:d2:14:30:ba:
         e9:d3:04:66:f1:8a:56:8c:7b:04:a7:e6:0e:c8:c2:04:f5:d8:
         9f:3f:d0:7c:a9:8f:59:dd:43:aa:66:71:7d:be:2b:e2:51:da:
         11:0a:d7:cd:67:67:28:57:cb:ce:44:2c:6c:ed:81:85:36:b0:
         2d:c3:2d:07:37:25:4d:f2:56:66:cf:9a:d9:0a:9b:61:b8:6b:
         05:be:e1:21:a0:60:a3:87:5b:ad:62:bd:d6:6a:92:80:c8:60:
         9e:3b:92:57:99:94:5e:43:be:4b:02:02:50:6a:61:c2:1f:f6:
         45:00:e3:84:cb:59:f8:f6:8e:82:62:63:65:90:97:59:6d:8f:
         60:0a:3e:9e:40:1b:2c:52:b9:7c:c6:1f:f6:9a:b4:2b:c1:dd:
         2f:f7:a3:97:21:b6:8e:1c:10:67:b5:3d:03:a6:0f:1d:73:94:
         a8:70:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:50 2026 by rpki-client