Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
File:                     4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json)
Hash identifier:          sRvo+B8UdARcMWPXxJgq3l731l3Emfnzqq6PoKcP5Pg=
Subject key identifier:   15:B1:96:9F:80:62:3B:4B:D5:24:F7:D9:18:1D:28:DE:5C:17:64:D3
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Certificate issuer:       /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial:       06BA70E5286FBB778E681F185B1562AF44B23661
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
Manifest number:          95
Signing time:             Sat 22 Aug 2026 12:35:41 +0000
Manifest this update:     Sat 22 Aug 2026 12:30:41 +0000
Manifest next update:     Sun 23 Aug 2026 15:06:41 +0000
Files and hashes:         1: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=)
                          2: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=)
                          3: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=)
                          4: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=)
                          5: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=)
                          6: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=)
                          7: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=)
                          8: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=)
                          9: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=)
                          10: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=)
                          11: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=)
                          12: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=)
                          13: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: 6+A5utW3fQzaVexag8zMUOzw/xSQTvS1GoJUx6CmG7o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
                          rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Aug 2026 11:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ba:70:e5:28:6f:bb:77:8e:68:1f:18:5b:15:62:af:44:b2:36:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
        Validity
            Not Before: Aug 22 12:30:41 2026 GMT
            Not After : Aug 23 15:06:41 2026 GMT
        Subject: CN=15B1969F80623B4BD524F7D9181D28DE5C1764D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:c8:a9:e5:4b:e4:44:5a:ec:7c:b3:d7:84:
                    c0:85:07:32:35:8c:e2:76:94:3c:4e:65:9a:06:dd:
                    c1:8c:4d:d7:f8:38:8e:3c:70:35:a3:10:1e:81:70:
                    d2:04:b1:8b:8f:13:dc:25:64:78:e3:52:13:d7:66:
                    f0:eb:b3:8c:85:26:b0:3d:41:e6:bf:61:43:5f:f0:
                    12:09:29:04:c3:cb:a9:1a:5c:5b:9a:83:91:46:27:
                    6c:c9:e5:45:ff:8a:3a:b3:6c:77:80:be:c7:f4:20:
                    19:29:51:eb:f7:69:eb:2f:c4:63:5a:58:8a:4f:88:
                    cf:40:2b:cd:90:7a:e2:d6:bf:0a:8d:91:a0:3b:db:
                    5c:be:af:f3:c0:a9:54:35:68:b9:ad:8c:d8:73:f7:
                    79:22:06:e8:68:cd:03:2c:78:1c:c7:45:be:36:a2:
                    32:6e:ec:35:f5:71:ce:12:0b:eb:12:45:7c:fc:74:
                    67:a0:07:74:94:a9:3c:5b:9e:35:69:56:bd:59:2e:
                    0c:3f:a0:c6:78:2f:38:6c:e7:02:c6:cc:4e:2c:9f:
                    8d:73:99:b6:3f:09:c1:f3:37:e8:73:93:5d:07:ab:
                    de:2b:b3:1f:14:d6:53:e1:b4:ce:b9:9e:5b:be:1e:
                    ad:86:fa:d0:f3:0b:a9:2f:13:31:52:cc:ef:de:36:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:96:9F:80:62:3B:4B:D5:24:F7:D9:18:1D:28:DE:5C:17:64:D3
            X509v3 Authority Key Identifier:
                keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:54:79:dd:e5:c1:48:8f:a0:96:26:08:62:03:54:4b:60:
         94:6e:e4:05:c1:aa:23:1f:29:af:c2:05:a3:0d:ff:05:9a:a9:
         38:54:07:47:2f:7b:a0:9a:d9:e0:fc:05:b5:e3:10:ae:9c:5b:
         65:0b:b6:3b:84:c4:78:3b:94:73:89:40:92:78:d9:4b:23:47:
         6f:ee:62:f6:f5:f1:65:19:82:71:e5:31:ce:ab:dc:b7:f0:cd:
         08:26:bf:10:07:f1:05:01:6d:43:9f:72:89:99:79:6e:b9:de:
         e5:7b:43:b8:c5:e9:f3:de:b9:4d:af:35:af:0c:53:d5:59:38:
         09:16:a2:e1:45:45:fe:8e:5a:b6:59:d5:85:8f:8e:a0:f7:a7:
         a0:a3:5e:e8:38:55:fc:44:ba:0f:b5:81:99:c4:00:32:1a:55:
         b8:e1:21:03:a9:3f:80:47:67:31:d9:3d:e5:38:6d:cc:11:17:
         dd:62:a3:c5:aa:e8:60:1f:2b:03:98:1c:52:ae:8f:74:93:e6:
         e6:4a:27:39:35:a5:06:ae:a7:6d:0c:28:51:02:87:74:81:dc:
         4b:a4:d2:03:a4:84:82:55:39:fa:e8:7f:f4:5a:41:be:b3:62:
         85:07:fc:e8:18:6e:63:84:0d:bf:20:2c:ea:56:c3:43:3f:32:
         24:46:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:43:30 2026 by rpki-client