Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
File:                     F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft (raw, json)
Hash identifier:          nuCKBdGQsFV7n+cEmaWrcqDYy4RcHEg0anT1YRk0WF4=
Subject key identifier:   6A:39:5C:11:9E:40:71:4E:19:F7:60:F6:B7:B8:2B:83:50:CF:40:6B
Authority key identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B
Certificate issuer:       /CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
Certificate serial:       365BFBDE0081B12E8E6B1B376F1450EEC1084557
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 13:36:19 +0000
Manifest this update:     Fri 24 Jul 2026 13:31:19 +0000
Manifest next update:     Sat 25 Jul 2026 17:27:19 +0000
Files and hashes:         1: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: Ko5U+LVnoFJ8wmSh7j4Nh6VXRGbHhjpdwU4CqrLXyts=)
                          2: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: DA2FUhM7Kcld/ZOZCHHz4OC3AwFVi9D3hLd64lN6BR0=)
                          3: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl (hash: UmBTkVoJ72ZYikxkKxqr1tVdEnDGKwbYYFKTur4vHAM=)
                          4: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 6UaquuTBkgXh3T9OTxZgNAGf5O5rLTrtkc8NLnoboV0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl
                          rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5b:fb:de:00:81:b1:2e:8e:6b:1b:37:6f:14:50:ee:c1:08:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
        Validity
            Not Before: Jul 24 13:31:19 2026 GMT
            Not After : Jul 25 17:27:19 2026 GMT
        Subject: CN=6A395C119E40714E19F760F6B7B82B8350CF406B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:83:6e:18:33:66:4c:3d:4c:a4:5c:d9:0a:d0:
                    0c:4b:09:2b:a6:73:f4:ef:75:89:51:3a:7e:18:a5:
                    10:cb:29:79:a6:33:44:56:5e:8b:7b:14:42:c7:8e:
                    d6:bd:75:90:ee:cd:83:8d:ee:32:2a:11:c1:32:4b:
                    79:ed:48:e6:a3:bf:33:59:17:76:1f:91:80:e5:99:
                    b6:b5:49:ba:98:e4:8a:14:f1:c0:61:13:df:ff:10:
                    4b:de:f5:6b:b5:13:20:1b:dd:f1:3f:ab:a8:30:c6:
                    6b:59:c6:95:8f:68:32:32:da:14:53:c8:55:75:dc:
                    6b:98:ec:f5:38:64:a0:9f:66:97:f3:5d:22:3e:9b:
                    c4:a9:7b:42:05:d4:c9:d1:db:e9:27:34:24:1b:ce:
                    b2:fe:72:de:84:32:2d:43:28:ae:ec:ee:65:30:6b:
                    3b:e3:30:05:f1:78:91:16:c5:a9:63:96:c6:51:74:
                    ba:73:4d:94:b1:db:ea:7a:7c:29:1c:6f:68:04:1d:
                    50:d9:af:3a:c6:00:4f:83:2a:3c:10:47:ed:f3:fe:
                    de:aa:e6:32:32:26:59:e8:33:74:75:b4:81:57:d4:
                    dd:42:01:7d:41:0d:ba:2d:16:f1:9a:af:b6:00:45:
                    1a:bb:0d:90:ec:33:20:81:13:5c:1c:a5:d6:08:e8:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:39:5C:11:9E:40:71:4E:19:F7:60:F6:B7:B8:2B:83:50:CF:40:6B
            X509v3 Authority Key Identifier:
                keyid:F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0f:15:af:5f:8c:8b:8e:99:d2:dc:4b:b9:3f:db:e5:13:4d:
         7e:cb:eb:b2:dc:0a:a1:2b:8b:32:69:7e:6f:95:68:16:6e:e4:
         26:ab:ec:cd:69:e6:93:c8:67:6d:d1:35:f2:87:54:5a:a1:68:
         31:2d:e6:90:47:5a:26:22:70:5e:70:14:1f:ae:3e:0e:1f:34:
         fe:c9:30:30:da:83:3d:78:0a:9a:1d:d6:eb:d0:b2:15:fd:29:
         ac:c7:21:89:88:07:c4:9d:c3:f9:98:d8:0e:8e:67:f2:ca:d7:
         05:72:5f:8d:73:10:7e:b5:9e:be:7c:3e:1f:17:f9:38:8f:2d:
         4d:4f:38:49:87:ec:e8:a1:bc:e5:0d:62:ba:0a:9e:22:ff:e3:
         30:3e:10:e0:07:87:9d:64:1b:f0:c6:d7:b4:30:c2:0e:e7:fd:
         50:a4:bd:51:22:f0:d5:d4:33:86:81:7c:bf:a2:55:a8:ea:09:
         06:bf:54:4b:b0:97:f6:f9:f9:f0:9f:03:43:fa:23:f6:86:ee:
         7e:f3:2b:99:4b:7d:cb:3d:f9:90:70:07:18:ab:a6:b4:0a:43:
         c3:43:24:f3:89:74:a7:63:9d:06:c1:d5:d8:35:7f:29:af:6e:
         16:0e:b0:a8:3a:9c:db:5c:60:4a:1a:71:ed:16:00:7e:4e:4a:
         be:4b:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:33 2026 by rpki-client