Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
File:                     C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft (raw, json)
Hash identifier:          Xer3vd2JelpV0njvs17q9tyy72jpp9LJgMbVg1P8N1s=
Subject key identifier:   F5:1B:4C:42:72:81:F6:E2:EC:0C:BB:C2:69:C6:B9:94:73:2A:07:4D
Authority key identifier: C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9
Certificate issuer:       /CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9
Certificate serial:       4140324B5C4CB0F2DA4B4D201F22C00C52DB4FA1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 17:36:42 +0000
Manifest this update:     Thu 23 Jul 2026 17:31:42 +0000
Manifest next update:     Fri 24 Jul 2026 19:08:42 +0000
Files and hashes:         1: C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl (hash: ktPxFsB59NXCVhUbIOdKpwMraTg9gioTOH4Gq07FBlo=)
                          2: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: DSqrZf2t+vOo0dpO9Z2Ts4Q/3PwkQ/7IIkFcOCMaS2c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl
                          rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:40:32:4b:5c:4c:b0:f2:da:4b:4d:20:1f:22:c0:0c:52:db:4f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9
        Validity
            Not Before: Jul 23 17:31:42 2026 GMT
            Not After : Jul 24 19:08:42 2026 GMT
        Subject: CN=F51B4C427281F6E2EC0CBBC269C6B994732A074D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:d5:03:08:fb:a4:ae:9a:24:af:9f:7e:ec:
                    c4:0d:d8:95:10:bc:3f:c9:fb:2d:6b:3e:be:87:01:
                    33:0a:88:06:04:b8:22:e9:bd:d1:b2:1a:77:ff:86:
                    e2:c0:77:54:37:39:4c:3a:87:83:8a:01:91:ed:ee:
                    d1:37:4f:a0:83:7e:d6:78:fe:4e:b8:1f:db:10:2a:
                    53:d9:8d:ac:23:02:74:3f:99:d2:e9:65:9a:a4:18:
                    dc:8a:49:29:06:30:4a:b8:1c:09:01:1d:07:e5:b6:
                    06:54:7c:aa:8b:45:ad:35:04:cb:73:64:43:3d:4f:
                    8f:67:3d:a0:44:24:8d:17:19:72:5e:44:ed:4a:8a:
                    53:41:db:7e:22:35:54:a2:31:d2:b7:1b:95:58:4b:
                    9a:65:7e:74:e3:f6:54:e4:67:bf:5f:2f:34:50:6f:
                    74:c2:de:f5:95:04:4f:bf:e3:e8:a8:b6:3d:25:32:
                    d8:03:16:93:9e:08:67:97:e0:d0:fd:40:a7:05:d1:
                    32:25:df:a2:2c:26:cd:10:c0:ec:9d:42:25:2e:11:
                    4c:28:c7:69:12:47:d6:81:3f:7e:56:de:b0:2d:9b:
                    df:03:16:c2:63:04:f6:1f:e0:26:7e:7d:c3:7d:6c:
                    97:fa:b8:64:22:62:3a:87:a4:35:be:b5:e4:13:41:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:4C:42:72:81:F6:E2:EC:0C:BB:C2:69:C6:B9:94:73:2A:07:4D
            X509v3 Authority Key Identifier:
                keyid:C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:78:6a:29:e7:0e:d1:21:75:f5:c8:6a:c1:fb:f0:eb:43:28:
         a4:43:2d:7d:11:06:57:42:82:6f:f6:77:c3:11:c5:ef:b5:a1:
         4e:98:c1:b7:b0:16:8f:34:e1:4a:f8:a9:7d:26:3a:4c:78:86:
         41:a1:6e:d9:60:64:85:1a:d3:97:90:4f:89:79:21:a2:ef:9f:
         fa:7f:d7:09:f4:18:64:13:e9:a2:50:8f:ba:13:dc:26:4a:7b:
         c2:9d:ee:e5:22:5f:6d:7d:1e:43:14:e5:2a:b6:89:35:e4:6a:
         16:99:76:bb:3f:2e:97:fe:4f:84:49:2e:9d:04:43:cc:a0:ab:
         0d:c7:b7:f7:7f:4b:49:49:d1:36:ab:82:7c:a3:e1:d2:28:4c:
         cc:fd:ff:a8:6b:5e:1c:b8:c6:1a:27:62:b3:a9:f4:b4:c9:c5:
         82:d0:81:fe:a3:3f:50:0d:94:07:63:5c:99:bc:8c:d7:b4:44:
         8b:b1:aa:55:70:88:c2:a3:ec:09:3b:97:f3:71:3a:0f:4d:92:
         68:d6:f0:78:83:93:4c:98:29:af:33:51:15:8a:bb:6f:6c:aa:
         f3:c0:2d:4b:81:05:ce:eb:50:92:34:7a:95:9a:a8:a5:3c:7d:
         9f:76:5d:5f:7c:d2:39:14:5e:0f:ff:29:e1:a7:10:15:56:fb:
         ec:1d:3d:c8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQUAyS1xMsPLaS00gHyLADFLbT6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRUUzQUZFMEIyNjVFQTMxNERCQkFCN0MwMTVDODA1
MDAwQThFOTAeFw0yNjA3MjMxNzMxNDJaFw0yNjA3MjQxOTA4NDJaMDMxMTAvBgNV
BAMTKEY1MUI0QzQyNzI4MUY2RTJFQzBDQkJDMjY5QzZCOTk0NzMyQTA3NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEidUDCPukrpokr59+7MQN2JUQ
vD/J+y1rPr6HATMKiAYEuCLpvdGyGnf/huLAd1Q3OUw6h4OKAZHt7tE3T6CDftZ4
/k64H9sQKlPZjawjAnQ/mdLpZZqkGNyKSSkGMEq4HAkBHQfltgZUfKqLRa01BMtz
ZEM9T49nPaBEJI0XGXJeRO1KilNB234iNVSiMdK3G5VYS5plfnTj9lTkZ79fLzRQ
b3TC3vWVBE+/4+iotj0lMtgDFpOeCGeX4ND9QKcF0TIl36IsJs0QwOydQiUuEUwo
x2kSR9aBP35W3rAtm98DFsJjBPYf4CZ+fcN9bJf6uGQiYjqHpDW+teQTQSOTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9RtMQnKB9uLsDLvCaca5lHMqB00wHwYDVR0j
BBgwFoAUxT7jr+CyZeoxTburfAFcgFAAqOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDYzMDU0ZjYtOGQwOS00ZDEyLWIxOWItNTAwZDZkOTIxZmMxLzAvQzUzRUUzQUZF
MEIyNjVFQTMxNERCQkFCN0MwMTVDODA1MDAwQThFOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNTNFRTNBRkUwQjI2NUVBMzE0REJCQUI3QzAxNUM4MDUwMDBB
OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx
OWItNTAwZDZkOTIxZmMxLzAvQzUzRUUzQUZFMEIyNjVFQTMxNERCQkFCN0MwMTVD
ODA1MDAwQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEl4ainnDtEhdfXIasH78OtDKKRDLX0RBldC
gm/2d8MRxe+1oU6YwbewFo804Ur4qX0mOkx4hkGhbtlgZIUa05eQT4l5IaLvn/p/
1wn0GGQT6aJQj7oT3CZKe8Kd7uUiX219HkMU5Sq2iTXkahaZdrs/Lpf+T4RJLp0E
Q8ygqw3Ht/d/S0lJ0Targnyj4dIoTMz9/6hrXhy4xhonYrOp9LTJxYLQgf6jP1AN
lAdjXJm8jNe0RIuxqlVwiMKj7Ak7l/NxOg9NkmjW8HiDk0yYKa8zURWKu29sqvPA
LUuBBc7rUJI0epWaqKU8fZ92XV980jkUXg//KeGnEBVW++wdPcg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:52 2026 by rpki-client