Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
File:                     14D784D8F19F00DFBA4C08757485032BE04603A3.mft (raw, json)
Hash identifier:          9a6MeGYUg3p7Qaxr8kmoALfIMO/4uTd6mEad3/57q1A=
Subject key identifier:   07:C9:19:1C:58:C8:C0:91:A2:CA:E9:61:8B:3E:74:52:49:56:17:34
Authority key identifier: 14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3
Certificate issuer:       /CN=14D784D8F19F00DFBA4C08757485032BE04603A3
Certificate serial:       4CC5903CC7078B0A4D7ABD57FEC5EF5574FE3B49
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 01:51:32 +0000
Manifest this update:     Fri 24 Jul 2026 01:46:32 +0000
Manifest next update:     Sat 25 Jul 2026 02:06:32 +0000
Files and hashes:         1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: rA6w7AOgQeO/23WQ9WTNvbNDGzSTa/seU2ViAzbcvrs=)
                          2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: 4CcWucwvFiUbV7yGD9jF0QOdXA3+eK3AiJ4whM9p04M=)
                          3: 14D784D8F19F00DFBA4C08757485032BE04603A3.crl (hash: URJ2XDd3NTptOrqcPAJBDBsgb78nb3OWCD2OGlhcAOE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl
                          rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c5:90:3c:c7:07:8b:0a:4d:7a:bd:57:fe:c5:ef:55:74:fe:3b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14D784D8F19F00DFBA4C08757485032BE04603A3
        Validity
            Not Before: Jul 24 01:46:32 2026 GMT
            Not After : Jul 25 02:06:32 2026 GMT
        Subject: CN=07C9191C58C8C091A2CAE9618B3E745249561734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:66:36:5a:26:44:dd:43:fa:78:a0:69:67:
                    d6:28:e9:33:5f:57:b8:00:11:ac:e7:84:64:8a:e5:
                    27:2f:e6:07:6e:38:a1:c1:d6:95:1d:98:a6:e4:d4:
                    6b:35:e6:c5:dc:01:47:39:1b:b2:34:7c:ee:12:8c:
                    51:d8:97:23:44:ca:b4:e4:f2:94:05:da:eb:b6:5f:
                    45:e0:65:b8:cb:e4:ec:2c:07:d8:b5:1b:9b:35:3f:
                    76:bc:cd:9d:62:db:88:d0:ff:b0:03:cb:a1:1d:95:
                    36:1a:4d:7d:4f:72:04:b0:a9:11:21:ad:e0:67:8d:
                    7c:f4:ef:36:92:cc:15:49:25:39:56:fc:c1:5c:86:
                    93:97:d5:f8:52:6c:5b:f4:8b:26:21:a1:4d:38:2c:
                    a2:07:d0:86:eb:5d:e0:95:bd:d1:06:b9:4f:a1:6a:
                    e5:e1:80:48:11:5a:09:94:4d:69:10:fe:49:6e:19:
                    eb:bc:82:c5:f4:7a:3f:da:c7:48:78:3a:60:74:4d:
                    ed:66:92:f4:48:21:f6:ce:0b:05:12:2e:27:53:0e:
                    b7:14:c0:00:3e:32:94:55:4b:71:e1:38:fc:6b:b1:
                    7c:fe:7a:7d:7b:0d:d0:fd:d9:ae:81:9e:48:ad:fd:
                    d4:5e:e3:fd:ff:01:dc:80:bf:67:54:95:4a:f8:39:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C9:19:1C:58:C8:C0:91:A2:CA:E9:61:8B:3E:74:52:49:56:17:34
            X509v3 Authority Key Identifier:
                keyid:14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:70:90:78:70:6e:d4:e7:d3:4d:1e:44:94:c1:c5:fd:ba:
         e0:38:da:9d:b8:f3:14:35:da:d1:bc:a7:14:86:eb:be:69:3d:
         5f:da:61:85:36:34:aa:62:62:ff:0c:64:79:86:0a:14:f3:d1:
         a4:e4:d5:1a:a5:56:f6:0b:3e:06:c9:fa:dd:a4:b4:22:9b:cc:
         0b:29:88:30:ac:92:26:f5:f8:8e:7a:f4:68:1a:c5:c0:5a:69:
         02:20:a8:75:a2:7d:19:83:6f:18:76:c3:44:9c:30:2c:3f:93:
         95:04:77:82:6c:f5:4d:4a:11:82:bb:0b:29:09:62:77:6a:43:
         4e:40:49:cc:1f:ff:7f:5a:5b:01:d4:32:57:94:b1:34:09:3f:
         ca:7a:85:26:9b:bc:85:2e:ce:cd:98:6e:13:26:40:ef:b4:c2:
         20:12:1b:48:80:b2:75:c8:87:3e:a6:c6:16:e6:92:c8:50:2e:
         27:37:db:57:d0:d9:05:dc:1b:f9:96:19:30:70:e8:3e:94:5a:
         b3:14:9a:75:ca:0e:1e:1b:93:79:bd:fe:d6:d3:38:3e:11:f9:
         c6:fe:6c:f5:3d:9e:09:f0:74:78:09:29:e1:26:28:c8:e4:61:
         b4:63:c9:61:98:31:fe:c3:79:08:c1:a7:2a:2c:48:ea:4d:58:
         ce:b3:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:50 2026 by rpki-client