Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
File:                     4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft (raw, json)
Hash identifier:          dIThpus4htZ3DJpgEkPddJj7sHqU0kKEYislrMeeLcw=
Subject key identifier:   F6:31:3B:19:9E:4A:A5:2B:FB:86:FC:95:A3:0C:48:76:EE:EA:EF:5E
Authority key identifier: 4B:77:26:53:CA:93:D4:06:8F:6D:D1:DA:58:CB:DA:A6:51:59:8C:94
Certificate issuer:       /CN=4B772653CA93D4068F6DD1DA58CBDAA651598C94
Certificate serial:       3712F2B949DAA9AFDFC4B1A9F7235C02BE3E2C4D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B772653CA93D4068F6DD1DA58CBDAA651598C94.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
Manifest number:          EC
Signing time:             Sun 25 Oct 2026 17:08:04 +0000
Manifest this update:     Sun 25 Oct 2026 17:03:04 +0000
Manifest next update:     Mon 26 Oct 2026 18:58:04 +0000
Files and hashes:         1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: LP4i7KxphXT4TiytVVY6T0WCBkg+cxC7sq55Sfj8HZg=)
                          2: 4B772653CA93D4068F6DD1DA58CBDAA651598C94.crl (hash: 2405UUtqMKIPT9cCF+hCwMkpzP2Cem/RVkgB6qJNSZE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.crl
                          rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B772653CA93D4068F6DD1DA58CBDAA651598C94.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:12:f2:b9:49:da:a9:af:df:c4:b1:a9:f7:23:5c:02:be:3e:2c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B772653CA93D4068F6DD1DA58CBDAA651598C94
        Validity
            Not Before: Oct 25 17:03:04 2026 GMT
            Not After : Oct 26 18:58:04 2026 GMT
        Subject: CN=F6313B199E4AA52BFB86FC95A30C4876EEEAEF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:f8:3f:e8:24:5a:f4:5c:1e:e8:70:26:5c:
                    dc:3a:cb:72:aa:8b:47:3f:ed:8a:ad:a5:62:f7:6e:
                    ce:20:7e:d4:e0:c9:e9:8d:cd:8b:88:8d:02:1b:2c:
                    a6:b5:87:d5:75:22:71:2f:2f:24:ff:75:18:22:df:
                    ec:0b:62:da:aa:82:5a:c5:94:bd:14:4d:6e:ae:1e:
                    f8:6c:74:6c:4b:52:97:a8:f4:bf:8b:ad:2e:14:52:
                    81:c5:d9:52:92:05:78:61:49:25:8f:14:18:e5:86:
                    9e:b1:a3:f2:20:8a:a1:94:9a:ea:7d:a3:fe:fd:aa:
                    b1:08:5c:07:b1:5f:64:29:f1:07:f0:d8:a7:7f:0c:
                    24:c3:96:d8:4e:4f:4c:b6:d7:83:87:77:d7:d5:4f:
                    7b:69:2d:80:59:d8:d4:60:34:0a:74:9a:13:e7:38:
                    05:30:f3:77:27:c4:36:b9:bb:c6:a5:60:35:a5:38:
                    18:3c:65:98:21:2a:45:24:92:3a:7e:f5:2a:3a:ca:
                    bb:ff:af:08:0d:65:b1:e3:99:c6:a4:61:0b:ce:e4:
                    50:a6:97:63:5f:26:79:5e:0b:0e:50:9d:63:42:e3:
                    6d:e9:12:e7:f6:b8:9c:29:d4:4d:57:19:f8:41:61:
                    90:97:37:cf:e9:29:3f:8b:85:1d:66:32:d8:c0:7b:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:31:3B:19:9E:4A:A5:2B:FB:86:FC:95:A3:0C:48:76:EE:EA:EF:5E
            X509v3 Authority Key Identifier:
                keyid:4B:77:26:53:CA:93:D4:06:8F:6D:D1:DA:58:CB:DA:A6:51:59:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B772653CA93D4068F6DD1DA58CBDAA651598C94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:72:b4:75:72:37:ef:6e:9f:4b:8c:45:82:3b:d8:f7:67:69:
         92:b5:66:df:91:75:c1:c9:f3:05:75:ea:a1:9f:12:4a:ec:73:
         a3:34:d6:c7:5b:da:83:9c:c1:63:36:8b:c2:13:30:ee:0b:20:
         b3:dc:c0:50:b4:3a:27:70:cc:ab:6e:92:83:dc:b3:ce:e5:b3:
         73:c6:61:85:00:97:74:c6:2e:ce:a0:c9:28:3f:b2:e4:52:2b:
         f6:e3:d8:da:d2:e8:70:6a:d9:c4:b2:a2:a3:45:d2:16:3e:a1:
         b5:f1:20:58:19:84:66:c6:bf:93:7d:cb:b9:23:35:89:78:16:
         e0:12:b6:c6:d5:d6:a4:9d:a7:6c:97:f9:6d:96:80:23:e2:1d:
         49:df:7b:65:90:54:fe:d9:7a:8b:0b:51:8f:81:a4:83:59:27:
         40:6a:05:b2:ab:bb:5c:24:82:31:36:43:2f:52:4f:cc:3e:84:
         a1:43:a4:9d:34:b2:9b:3b:f7:18:e4:b9:62:cf:59:2f:d9:74:
         00:fb:5d:81:a0:a6:09:2a:ef:4e:8c:89:8c:34:9a:57:9b:bc:
         c2:7f:d5:23:0b:95:9d:1e:99:c5:72:ed:94:ea:a3:58:37:25:
         24:21:e9:24:05:b6:81:7d:8d:37:52:17:f6:f5:b2:3a:db:56:
         0f:18:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:50:21 2026 by rpki-client