Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft
File:                     100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft (raw, json)
Hash identifier:          MR+a+kVCePABwZxjctLWxzYqo/cJRhoT3rB4zgDV+00=
Subject key identifier:   1D:3A:E9:C5:07:5C:AB:8D:54:26:0C:A2:92:AA:9A:46:60:9D:FD:4A
Authority key identifier: 10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3
Certificate issuer:       /CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3
Certificate serial:       3C35E6EB870C872AD74A962756E1CAE83214996E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 22:32:22 +0000
Manifest this update:     Thu 23 Jul 2026 22:27:22 +0000
Manifest next update:     Sat 25 Jul 2026 02:21:22 +0000
Files and hashes:         1: 100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl (hash: E8YvZro/lvK13U6Vm3Rx7uSGGflB7qJ541AEWy0OUic=)
                          2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: qQsYjjc0UOS4U0mqMilyLxWp2Jg/oy/EO/6yTd0J1SE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl
                          rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:35:e6:eb:87:0c:87:2a:d7:4a:96:27:56:e1:ca:e8:32:14:99:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100E5A40865841D56C5AB9D0CEE72188077EFAA3
        Validity
            Not Before: Jul 23 22:27:22 2026 GMT
            Not After : Jul 25 02:21:22 2026 GMT
        Subject: CN=1D3AE9C5075CAB8D54260CA292AA9A46609DFD4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a9:35:76:14:10:f9:a1:5a:89:f6:cd:82:27:
                    5b:c6:a0:12:b6:b2:d5:0a:4a:7d:7d:89:36:6a:0e:
                    f9:fd:9f:be:e3:a6:01:2c:fa:46:5e:8b:20:94:3c:
                    89:37:ac:90:cf:c4:bf:07:9e:ba:9d:32:bb:3e:55:
                    b3:d8:00:dc:77:4f:d3:c7:4a:88:d7:7a:9c:94:82:
                    ad:5f:89:02:66:6b:94:b0:aa:5c:42:48:5b:de:92:
                    3a:17:d5:d9:a4:6b:f5:1b:50:72:dd:cc:74:d5:f8:
                    04:ac:b8:cb:b9:7b:a3:f4:08:be:d3:5f:c5:41:8f:
                    31:36:ce:18:e6:bf:bf:89:88:6f:55:1b:6d:4a:bf:
                    8f:41:5f:e3:d7:15:6d:95:f4:97:a4:3d:8e:78:5a:
                    ed:65:c9:21:ec:58:a5:d5:fb:28:91:df:8c:41:3b:
                    86:7c:7c:0b:d3:73:29:a1:75:2b:25:05:e8:2a:dc:
                    d7:ea:0a:cf:c7:e2:05:c5:c0:59:42:e8:ea:92:86:
                    92:bf:fc:c2:f8:40:1a:ff:2b:32:2c:c3:58:27:89:
                    11:79:19:cd:b4:50:d2:91:e1:14:31:8a:e9:fe:eb:
                    b3:c8:3f:2c:3e:5b:d1:cf:5e:26:e4:92:8e:3d:d9:
                    9c:72:f1:2f:46:69:ac:27:2d:24:c6:b2:c3:7f:99:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:E9:C5:07:5C:AB:8D:54:26:0C:A2:92:AA:9A:46:60:9D:FD:4A
            X509v3 Authority Key Identifier:
                keyid:10:0E:5A:40:86:58:41:D5:6C:5A:B9:D0:CE:E7:21:88:07:7E:FA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/100E5A40865841D56C5AB9D0CEE72188077EFAA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e9:de:17:8e:be:12:0b:8b:1f:e8:88:ce:58:aa:33:0e:5b:
         6e:72:0f:f2:e0:6c:e4:94:55:dd:67:6c:66:c0:ba:82:23:78:
         7e:dc:3e:6a:db:cb:e1:68:41:64:a0:31:01:9d:d8:87:ad:d1:
         8c:0c:ff:36:6e:16:40:59:dc:21:ff:f1:0d:ab:87:07:3a:37:
         cb:99:67:ee:d9:a3:a3:58:cb:85:bf:51:45:44:59:bc:e5:9f:
         e7:91:d9:2b:51:87:46:49:1d:7f:b9:28:da:55:6a:96:71:be:
         e1:f8:7a:e3:18:50:99:cc:cd:d2:94:d5:e3:84:0c:68:98:40:
         cc:00:2e:69:c7:bb:ba:fa:52:14:e3:93:2a:07:f9:23:e8:f0:
         6e:f7:ef:31:d8:5c:db:ee:e5:ce:88:4d:48:a8:87:5f:9a:e5:
         48:65:9b:a0:7f:92:4e:c0:48:06:66:17:a3:dd:a6:8c:30:3a:
         7b:50:56:af:a5:f3:5e:b0:c5:0c:ff:1b:19:60:9f:4b:75:b9:
         23:a2:f3:f1:1a:8d:e8:5c:68:e9:1d:c5:a8:dc:aa:93:1d:7e:
         0b:34:dd:12:1b:ff:bf:c0:94:b9:d8:fd:2d:a4:0b:2e:3b:78:
         9a:91:60:df:0c:65:07:60:84:b8:aa:da:c9:3a:0c:af:c3:a3:
         ce:3d:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:04:13 2026 by rpki-client