Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
File:                     90A149FB759A6A176FE4D47F5082FA60C9767022.mft (raw, json)
Hash identifier:          rZ4IyKGpLi2SPEu97+p08lhZQswAjzvSR/TnEAuujOI=
Subject key identifier:   A7:A5:7A:6A:68:44:07:72:40:D3:58:5E:B2:01:9F:09:E4:A8:C7:3A
Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22
Certificate issuer:       /CN=90A149FB759A6A176FE4D47F5082FA60C9767022
Certificate serial:       15D4D153C88BDEF47ED64EDE4A4CA76FAFEBD147
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 15:13:32 +0000
Manifest this update:     Thu 23 Jul 2026 15:08:32 +0000
Manifest next update:     Fri 24 Jul 2026 18:21:32 +0000
Files and hashes:         1: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: dcQ3Sb65sjjLX49tVMmjaQB6c8zJqXUEiFfQJc1R5QA=)
                          2: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: G5X9t8nXB1mRf0UKItbT4yn3eidWxB2oSMgKDMVRVbE=)
                          3: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: /6rKJIPdCG5UyO3XHODZZ3EDU0CTpBfu4ou77AX6cek=)
                          4: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: hcuXQrxnDSCR9sGH8AKpCLGAnxBa8Jctci8rHhKNuLM=)
                          5: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: ckYh7W2IVtz0AntnQ+PueP5/KAoXf5rAosyZM59PhNk=)
                          6: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: wR1gyIq5cKfCTApo9vqdO2nlAEKOlwrS+SEI5BtyjVc=)
                          7: 3132302e32392e3232352e302f32342d3234203d3e203139393035.roa (hash: WJbMrhYWH52zN+15Q0lEM0yHGULJofqinsPUUc3DEoM=)
                          8: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: fEHjHjujgkqVA1apLtwPlgVoJB63v2RTVUpYlDyn+3c=)
                          9: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: /bFeq3oJ+j4yhcHhIfucgcl6Z3OfaEag9GMIa9agARs=)
                          10: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: PkQgWHfFkFDdD7JqzWkftJuZG03TTvKBUbVrhzww6Q4=)
                          11: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: MYxtWKdKnWygaDzucgDa2e53LN0HkZn96bp2EuKqQIc=)
                          12: 90A149FB759A6A176FE4D47F5082FA60C9767022.crl (hash: Iq7+tb0I84qjFAuEt1RSLD4myv+hzmorxq+heJsToNc=)
                          13: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: ZyVnCGfpVMbL3rPs3FU6HbGvjwN2cgfbIIbFeRp+eSg=)
                          14: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: X5HsBE1ewqrCbWqrNdoiRxUV2ywDPMva+dNQ4cS5oB4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl
                          rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d4:d1:53:c8:8b:de:f4:7e:d6:4e:de:4a:4c:a7:6f:af:eb:d1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022
        Validity
            Not Before: Jul 23 15:08:32 2026 GMT
            Not After : Jul 24 18:21:32 2026 GMT
        Subject: CN=A7A57A6A6844077240D3585EB2019F09E4A8C73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:bb:a8:dd:ea:5d:9c:f2:d8:eb:db:7f:e2:
                    1a:c4:59:80:0f:83:f1:80:4b:93:cc:7b:77:2b:83:
                    d5:4f:23:da:13:a8:cc:a1:c4:b0:99:6a:c2:45:35:
                    ea:32:88:87:5a:c4:c5:fe:85:d9:a8:e6:c8:8c:a3:
                    a0:ee:7a:d2:f6:7e:1a:de:98:81:45:bd:05:5f:2b:
                    04:6f:b8:de:c2:d6:a9:52:3d:fb:07:1e:b8:b2:48:
                    d7:51:27:8c:87:ef:24:58:41:46:07:bf:65:8b:71:
                    25:aa:c1:dd:c9:9a:13:11:9d:a3:8e:d4:d3:a5:fe:
                    b5:bc:50:5a:7f:c6:ea:f2:71:c3:2b:36:bc:d2:63:
                    45:58:dd:a6:d6:fd:e5:25:b2:ed:b9:52:35:a3:af:
                    3f:a1:14:17:bb:08:01:cf:43:9c:d1:53:b8:e0:d9:
                    77:2f:f3:85:f4:ea:18:94:cf:c0:74:36:40:a9:7e:
                    de:51:10:8b:43:f8:04:5f:3e:02:3b:fa:29:3a:7b:
                    c7:a5:d4:b5:3c:dc:cb:3c:60:6e:09:19:ae:b4:36:
                    b9:41:65:4f:c9:0b:e1:2b:5e:49:1b:d9:a9:e1:91:
                    cf:3c:c9:3f:2a:5d:95:92:4b:bc:0d:f7:3c:18:c5:
                    97:9a:a3:c3:4d:64:4f:9f:4f:92:c1:78:78:f6:2e:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A5:7A:6A:68:44:07:72:40:D3:58:5E:B2:01:9F:09:E4:A8:C7:3A
            X509v3 Authority Key Identifier:
                keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:c1:54:b2:80:47:08:3b:ff:2f:20:1a:3b:b4:66:1c:c1:
         a8:ef:71:4f:41:8a:52:8a:2e:44:3e:32:c9:7f:8d:54:b0:03:
         59:00:de:32:36:2b:5d:fa:6d:5e:15:3a:5e:31:62:13:0c:6c:
         9d:85:b6:da:8a:1d:c7:3b:45:8e:da:b0:68:5a:7f:19:f7:3c:
         c9:9d:63:c7:4f:5c:5f:a9:03:b7:da:b5:46:39:5d:22:a0:a9:
         b3:25:a0:7a:f8:82:96:ea:89:04:1d:f1:97:43:c6:ea:0a:06:
         fe:0a:8a:da:79:f7:18:74:2a:99:d4:17:78:c7:68:5a:91:5c:
         58:cd:73:76:ae:85:13:05:d1:0b:fb:f4:4a:e4:5c:88:4b:75:
         90:86:ae:6a:8e:95:fd:df:38:c7:1c:d6:4a:a2:51:6d:39:78:
         69:74:a9:95:07:56:ef:86:46:55:7b:ed:d1:45:7f:a2:5d:c9:
         07:d2:54:2b:22:4b:d1:ba:04:33:b9:9e:f8:f3:39:0d:93:08:
         ca:af:b9:da:b8:05:44:78:ae:15:52:f2:12:e3:85:6f:8a:f6:
         df:f8:c5:07:06:6b:20:05:63:bb:ce:49:9c:5a:ce:be:7c:4b:
         14:f1:93:35:eb:c9:dc:b2:86:cb:5f:bc:bd:1f:6f:43:07:68:
         a3:cc:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:06 2026 by rpki-client