Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
File:                     064B9E28C1AE598921210EB5E94CAE9E89533533.mft (raw, json)
Hash identifier:          0mpGSS9xdys8mn1DsDTq5RIYINZ9AsiAo3b9/x8g90g=
Subject key identifier:   DC:EF:E3:B3:18:98:56:FF:F2:5D:BC:3A:0C:33:F6:C0:E0:3B:AE:CA
Authority key identifier: 06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
Certificate issuer:       /CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Certificate serial:       4BB75E33FACDE8F46AE0B88FFFF4AC62BAD21BB9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 17:57:01 +0000
Manifest this update:     Thu 23 Jul 2026 17:52:01 +0000
Manifest next update:     Fri 24 Jul 2026 20:37:01 +0000
Files and hashes:         1: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: rh0sBxj81btPPODPu5P0eEgRgLm8ewf9kn1GsH7FYgE=)
                          2: 064B9E28C1AE598921210EB5E94CAE9E89533533.crl (hash: gy4V1JDQqFeHdGXB5GgxAz9vNmE/aYUUy/uBI7IxG1c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
                          rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b7:5e:33:fa:cd:e8:f4:6a:e0:b8:8f:ff:f4:ac:62:ba:d2:1b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064B9E28C1AE598921210EB5E94CAE9E89533533
        Validity
            Not Before: Jul 23 17:52:01 2026 GMT
            Not After : Jul 24 20:37:01 2026 GMT
        Subject: CN=DCEFE3B3189856FFF25DBC3A0C33F6C0E03BAECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:04:99:d8:94:d9:dd:48:d7:d2:24:a9:c4:
                    37:8d:88:16:e9:ea:57:25:29:02:5f:55:f5:4b:e4:
                    4a:63:db:03:c2:13:db:c3:72:f0:8d:68:80:06:6e:
                    fb:47:90:5b:89:e7:01:bb:3c:6d:8e:84:5d:59:26:
                    16:20:c3:53:89:10:67:60:0c:40:d4:7e:7c:c5:df:
                    79:19:c6:13:43:a8:ea:d6:54:16:18:0f:3c:83:3c:
                    ca:33:11:0c:4e:dd:e1:ed:6b:ab:2d:43:d7:8b:7b:
                    1d:2c:99:f4:be:fa:b0:a0:d8:ae:43:14:a1:5b:a1:
                    1c:8f:4f:c0:c4:30:be:0e:a0:d9:0e:57:e2:4c:9d:
                    e9:0b:9c:ce:ca:49:81:a4:3c:69:e2:75:9b:9f:74:
                    cb:9a:8d:0d:e6:0a:c7:9f:7c:d7:39:cf:61:4f:e8:
                    c9:85:2c:8d:be:2f:ce:40:33:80:4f:71:45:0f:d8:
                    b0:5f:7a:b3:74:39:ec:2f:bd:ef:4d:a8:58:1e:f1:
                    0f:0d:63:f5:2f:fa:75:fe:6d:bf:a5:10:f5:ec:32:
                    07:f4:0e:2f:24:a4:48:bb:2a:29:ee:3a:9f:c1:72:
                    eb:f5:c3:ab:7b:0c:16:5d:82:6d:3f:3b:2a:56:2b:
                    ea:1b:2a:dd:5d:76:53:29:a9:e6:27:f8:6b:13:13:
                    23:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:E3:B3:18:98:56:FF:F2:5D:BC:3A:0C:33:F6:C0:E0:3B:AE:CA
            X509v3 Authority Key Identifier:
                keyid:06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:13:e0:56:74:b0:bf:6b:19:38:de:f7:36:51:ea:79:40:d3:
         5f:6d:96:d3:9c:8a:9c:9c:1d:ef:de:6c:38:b0:8d:05:4f:81:
         dd:12:73:68:90:39:3f:83:95:c4:08:75:fa:cb:a0:56:fd:22:
         04:93:e3:cd:f0:80:84:17:86:db:eb:57:1d:9d:d3:2e:52:c8:
         86:08:b3:d7:43:90:cc:cc:8d:9c:90:bf:8b:62:d0:46:2c:9e:
         0e:12:d4:10:82:b6:5a:e0:bf:de:df:81:e1:26:50:bc:55:e6:
         6f:99:d6:58:92:71:df:d0:ea:1c:54:5e:0b:e0:01:81:7f:3c:
         5e:3b:ed:c5:e8:34:4e:c4:b7:18:21:d2:d2:99:69:cc:a0:66:
         c4:e2:c1:68:49:46:4f:cb:e9:39:37:47:1a:13:33:45:51:71:
         12:1e:cc:f0:e1:2a:1a:41:7d:21:15:6e:dd:af:f6:6b:99:8e:
         6e:32:7a:44:00:56:5e:e0:56:91:f4:ee:aa:fa:f3:fa:88:bc:
         36:fe:96:78:48:18:6f:ea:ff:fb:fd:ef:bc:23:30:9f:16:95:
         87:77:14:e6:f4:3c:63:55:40:ad:a7:c6:05:10:56:f1:48:81:
         29:c4:40:88:f1:c7:04:37:9d:67:2b:32:54:00:36:3b:52:fa:
         36:45:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:47:41 2026 by rpki-client