Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
File:                     4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json)
Hash identifier:          aK4bR6oZsFB3AryEVHL2TcKX8jRHdQ4GVLV+z5bHhlI=
Subject key identifier:   FD:BC:3C:81:F4:F1:C1:0A:8E:4B:0C:FA:BF:0A:DE:B1:DE:0A:1C:7A
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Certificate issuer:       /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial:       4D07AA05125E410F128E5AF487479D6721FAB323
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
Manifest number:          59
Signing time:             Wed 08 Jul 2026 04:40:10 +0000
Manifest this update:     Wed 08 Jul 2026 04:35:10 +0000
Manifest next update:     Thu 09 Jul 2026 07:00:10 +0000
Files and hashes:         1: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=)
                          2: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=)
                          3: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=)
                          4: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=)
                          5: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=)
                          6: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=)
                          7: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=)
                          8: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=)
                          9: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=)
                          10: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: V2s3fnsAvtd8eM2EjtPYsnd8oE19RHvp9LIWxg3pS/M=)
                          11: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=)
                          12: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=)
                          13: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
                          rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:07:aa:05:12:5e:41:0f:12:8e:5a:f4:87:47:9d:67:21:fa:b3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
        Validity
            Not Before: Jul  8 04:35:10 2026 GMT
            Not After : Jul  9 07:00:10 2026 GMT
        Subject: CN=FDBC3C81F4F1C10A8E4B0CFABF0ADEB1DE0A1C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:2d:25:4d:ba:45:d2:f7:1c:7b:20:d4:8d:
                    38:e8:8f:5f:0b:99:12:c9:6d:1d:36:00:a3:f5:09:
                    77:d9:ba:7c:3c:bd:80:df:a3:10:1a:9b:5c:ba:ab:
                    ab:24:45:74:7b:4d:1f:83:77:d9:9f:fa:9f:66:eb:
                    d9:27:92:a2:08:16:87:5a:6d:ff:e5:c9:5d:ab:6b:
                    c2:94:f0:92:e2:14:0c:8b:46:bc:ff:2d:d2:b1:03:
                    69:69:e6:36:7d:fd:54:1c:9c:c8:20:cf:e6:73:5f:
                    6d:47:3d:68:c8:a4:94:e8:a1:af:b1:d7:9d:bd:5d:
                    7c:96:a7:95:f5:41:8c:db:4d:ba:10:b3:db:a5:0d:
                    d1:bc:ca:86:d1:35:d4:49:f5:d2:ce:d7:3b:b7:ad:
                    c7:36:3f:b8:ea:68:32:c1:e9:26:52:42:39:54:a6:
                    40:c4:06:6e:38:b7:87:83:6f:86:64:2d:c2:15:40:
                    ca:91:d1:70:63:82:03:7c:42:8f:57:48:7b:07:74:
                    be:3f:ab:44:5e:22:e7:36:e8:cd:f6:69:f9:be:1c:
                    71:97:88:72:f5:a2:0a:7b:55:68:7d:4e:4f:d4:3d:
                    09:ce:f7:69:c1:80:94:61:02:87:f9:96:4b:c4:48:
                    e2:3e:f2:82:48:33:43:0d:ff:ed:1d:27:24:e1:0f:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BC:3C:81:F4:F1:C1:0A:8E:4B:0C:FA:BF:0A:DE:B1:DE:0A:1C:7A
            X509v3 Authority Key Identifier:
                keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:a7:93:0b:6c:03:65:f9:e6:29:2c:ff:1f:70:96:dd:26:
         78:3b:27:0f:b1:c4:5f:ff:00:68:86:f8:6f:c5:99:9b:4e:87:
         e0:52:52:5f:c5:4e:f4:03:bd:37:92:c0:fe:84:cd:3f:fa:af:
         fe:32:8e:72:71:d0:30:02:58:c4:ce:89:0a:13:31:e9:54:2d:
         f9:0a:b3:92:17:5c:08:04:a2:9c:19:80:ad:69:e4:b4:35:b5:
         61:5d:b3:78:cf:25:3c:22:ca:51:14:bd:0f:84:23:50:ae:e8:
         c2:0e:3a:85:84:80:91:44:13:3c:d8:42:0a:e4:41:49:79:63:
         6a:82:ee:1e:68:ca:21:0a:9a:bd:20:fe:b6:6c:2d:60:17:77:
         ac:06:da:74:14:f9:1a:0a:22:bb:4b:b9:a4:f4:ee:4e:3c:21:
         3b:0b:65:93:60:91:71:f4:4d:bd:f1:36:3b:a5:10:c9:00:c5:
         96:13:16:d8:b4:3a:c6:bd:56:0a:e2:c6:a0:e3:26:e6:c6:f7:
         76:02:3c:bc:51:d1:f7:6c:c6:af:88:de:49:a5:17:4b:d9:6e:
         7e:2d:eb:73:44:f5:1c:a1:bf:84:0d:c2:e7:1f:e4:c2:3f:9d:
         6b:7f:db:b2:e5:3c:b3:2a:f6:4f:3f:ff:70:b7:0d:4a:2d:c4:
         e6:64:24:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:03:34 2026 by rpki-client