Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
File:                     3790F06CA970C551E1C9D51C4794B87804967AF1.mft (raw, json)
Hash identifier:          3TC7fDFox6ST9juPp+Be3G0VbWOxgE+hG/MJaKyd/Es=
Subject key identifier:   12:BA:19:4A:CF:08:AC:AE:7A:07:A8:E3:B0:5D:34:84:72:64:9F:3B
Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1
Certificate issuer:       /CN=3790F06CA970C551E1C9D51C4794B87804967AF1
Certificate serial:       4A50CAD445515DF9A178D13E61F028CBC7E3E294
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 10:22:09 +0000
Manifest this update:     Fri 24 Jul 2026 10:17:09 +0000
Manifest next update:     Sat 25 Jul 2026 13:28:09 +0000
Files and hashes:         1: 3790F06CA970C551E1C9D51C4794B87804967AF1.crl (hash: Re7iyG4ssJaaZ4AG7+SusNnLTS21RKmheOWH1wOZOoM=)
                          2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl
                          rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 09:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:50:ca:d4:45:51:5d:f9:a1:78:d1:3e:61:f0:28:cb:c7:e3:e2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1
        Validity
            Not Before: Jul 24 10:17:09 2026 GMT
            Not After : Jul 25 13:28:09 2026 GMT
        Subject: CN=12BA194ACF08ACAE7A07A8E3B05D348472649F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b6:1d:b0:90:2d:75:48:65:e7:44:b2:fe:47:
                    59:59:00:e7:b1:ee:1d:49:6b:f1:b4:bb:85:eb:42:
                    64:df:6b:32:10:b0:f4:40:53:86:53:36:11:77:6d:
                    e3:73:b7:55:05:dc:f2:a7:eb:28:3a:68:63:e3:9e:
                    72:fd:ed:9a:63:57:d6:42:3f:f9:17:7a:b6:d9:9d:
                    6b:9f:52:ef:f4:1e:71:a1:37:70:ce:22:cb:8c:6e:
                    c9:a6:0b:1a:85:f7:bd:a6:a8:33:bc:1a:f7:07:ad:
                    cf:c9:ac:3f:1d:51:e5:cf:3c:27:7b:16:13:91:da:
                    70:fc:a4:bd:61:54:bd:d9:2b:ad:b6:43:8e:ec:06:
                    8e:b5:73:17:39:27:14:3b:90:fc:0a:f3:42:76:0c:
                    9e:32:b0:ce:34:66:fa:72:df:26:e9:3b:49:5b:e2:
                    ac:4c:04:e2:13:95:3c:1d:e4:42:13:df:c2:86:fa:
                    ee:87:f1:f4:87:30:9e:c7:0d:3d:8e:6f:91:ce:7c:
                    dc:a1:1c:6d:b2:d4:8a:0f:18:5f:c4:a3:9d:0b:4e:
                    2a:92:7b:70:e3:c8:81:a4:bd:63:d5:00:97:91:1a:
                    ee:97:d3:8b:6e:7f:b6:96:ba:96:dd:75:a0:6f:34:
                    b1:cd:a5:5f:b8:54:cb:ea:d8:c8:c6:5f:a5:f7:10:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BA:19:4A:CF:08:AC:AE:7A:07:A8:E3:B0:5D:34:84:72:64:9F:3B
            X509v3 Authority Key Identifier:
                keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:50:4d:07:34:5e:58:d0:ec:8e:33:1e:4c:4c:63:e2:91:a4:
         a3:6a:96:20:d1:08:59:5a:06:e7:50:69:d5:86:a3:44:fa:82:
         95:f2:1e:f1:99:b8:68:24:15:c2:c0:b1:fe:f8:31:84:ed:bc:
         51:45:0f:68:f5:59:69:db:89:08:96:6f:0c:a8:f8:e4:d6:a0:
         a3:1f:12:99:7a:3f:a5:60:70:ba:e6:58:13:aa:c3:c5:fa:83:
         69:3f:ee:aa:bd:82:d6:96:f8:a5:e4:3f:f9:6a:3a:6e:4c:41:
         1d:d3:d3:7b:e6:08:4d:14:34:16:86:c5:f7:69:13:cd:23:08:
         9c:a3:69:57:3b:cc:f9:bb:02:14:08:5b:9e:18:7f:44:80:ca:
         d3:49:f5:11:ba:a8:ee:41:88:fd:33:30:ba:a0:d8:00:d3:41:
         31:8d:6f:0e:d5:98:87:df:31:f4:71:77:74:6b:e1:55:dc:90:
         26:af:e4:fe:36:20:c0:dd:c2:78:75:13:99:d4:f5:4f:da:d7:
         4e:0c:e6:26:88:e6:02:92:37:12:3f:fc:93:70:ae:95:4e:b7:
         86:a9:aa:3e:77:24:35:60:b4:68:b0:1d:24:00:7e:cd:d9:f4:
         dc:af:de:e9:3b:31:b5:a5:37:36:b6:a1:c1:30:90:10:09:e0:
         87:41:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:38 2026 by rpki-client