Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
File:                     91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft (raw, json)
Hash identifier:          kdCFpPfi6ObTiv8d1PXuN6KMWaUTowcGX88jwPRguFA=
Subject key identifier:   66:49:04:0F:EB:E9:E2:EE:E8:7F:5F:36:CD:D9:6A:7E:25:26:60:3A
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Certificate issuer:       /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial:       25D1D016AF3FCB0792A6E6B2D0A47C220FD6C0E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 01:15:41 +0000
Manifest this update:     Fri 24 Jul 2026 01:10:41 +0000
Manifest next update:     Sat 25 Jul 2026 02:38:41 +0000
Files and hashes:         1: 3230322e31302e33362e302f32332d3233203d3e203538343837.roa (hash: vbQLd6cdONw7Pp3qW0mvbEDsNufsb7r6bxU1ZSatIVI=)
                          2: 3130332e3235332e3231332e302f32342d3234203d3e203538343837.roa (hash: E+N1immRENPXVU/7bbv3smD3y2taIwXbBggOaxh1iyw=)
                          3: 3230322e31302e33372e302f32342d3234203d3e203538343837.roa (hash: 9q8vmFKL7oGsGWkB1BKhhu/P2e7OqlLbcokrLiJELeQ=)
                          4: 3130332e3235332e3231342e302f32332d3233203d3e203538343837.roa (hash: lLp8Y/uyg9R/4Ak9RdIJf00LqFNskbQ2V+gJZBz02Jg=)
                          5: 3230322e31302e34302e302f32342d3234203d3e203538343837.roa (hash: Hw0kdXNaECW5DIE3IdeWHlxia0Z8ePgN5IvMwxgcTk4=)
                          6: 3230322e31302e34312e302f32342d3234203d3e203538343837.roa (hash: g0Hx5yrKopEHxPdHtj/SRdO2/5oBYvD/cLkEtfxzcgA=)
                          7: 91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl (hash: 01uRB3jARklk56MpKPgxlzUkTCqQaLdNObkgOQ4K2HI=)
                          8: 3230322e31302e33352e302f32342d3234203d3e203538343837.roa (hash: xPINf6qMhMNXsRzoY5JvjSNwNPIFtsb12j6CHRo1d8o=)
                          9: 3230322e31302e34362e302f32342d3234203d3e203538343837.roa (hash: qBJmiieahiSmBerrZ+MrOlgczH6EjYj5/TLPwBkeogE=)
                          10: 3130332e3235332e3231322e302f32342d3234203d3e203538343837.roa (hash: pLawXbkYKxokhCiGu4htgBjnF2duVmR81lZEpVfXqtE=)
                          11: 3230322e31302e34322e302f32342d3234203d3e203538343837.roa (hash: iq+TPsb2JWtOfSocldqSjmo2icbhTwmo72t7zi5fLU4=)
                          12: 3130332e3235332e3231352e302f32342d3234203d3e203538343837.roa (hash: Vo2Jpt+dSXazibEuz+y6WvVaVvXarzLBSGUclttgvSw=)
                          13: 3230322e31302e34322e302f32332d3233203d3e203538343837.roa (hash: zIT7bQQsfuFKgRAuHb2rpJgo4iUY2OkkcZskjqMXX/8=)
                          14: 3230322e31302e33342e302f32332d3233203d3e203538343837.roa (hash: NFc2WVD68KvDyLGSXGxgzJXnsXBUY7x8VG9AIvZ5nuk=)
                          15: 3230322e31302e34342e302f32342d3234203d3e203538343837.roa (hash: WKuOJrVVZlYWwTvTmiW45MtVMO0eJoMBeuJku53fqVY=)
                          16: 3230322e31302e34342e302f32332d3233203d3e203538343837.roa (hash: 5gGU6Ludw6Y05TY5TZpCEOfkE+AhTpTefa6G6vry47k=)
                          17: 3230322e31302e34332e302f32342d3234203d3e203538343837.roa (hash: 5bOvpLw6b1VcZVTrWaOK+xges8G3zIybqqd+s4sPxNE=)
                          18: 323030313a6466313a373830303a3a2f34382d3438203d3e203538343837.roa (hash: vY/Ub03xqcj72v4RHCIezucQY4Qdw7prwT9UpJT80Mk=)
                          19: 3230322e31302e33392e302f32342d3234203d3e203538343837.roa (hash: FMOzKFepxalJiA9R7ziV+8N8e6PtElsKQhGhROCbxF4=)
                          20: 3230322e31302e33382e302f32332d3233203d3e203538343837.roa (hash: FfgCUaM5r0YJEAtUKJB14M1Hd/RxAj7aA8Zb83q8BcM=)
                          21: 3230322e31302e34362e302f32332d3234203d3e203538343837.roa (hash: kKmRE86U5utxwwvOtfvRLdagvzUOQsqXYNn7P0V7LAg=)
                          22: 3230322e31302e34302e302f32332d3233203d3e203538343837.roa (hash: bYsTywGdUh8Nwv8Sft0lrumaB+A6L+3snty95MBp9SE=)
                          23: 3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa (hash: 1jCC2C8CSqcWHluuI8h5rB9IAj4BjYVy3yCbZsU32bo=)
                          24: 3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa (hash: DCKoKYnpwUxGTL6mTQPgNviVbzOSMo7Pt0/wG5p706Q=)
                          25: 3230322e31302e33362e302f32342d3234203d3e203538343837.roa (hash: QhlhHRS58TOKP2TlkeSZ3GSiJh6rVZb0yknG88DBN/8=)
                          26: 3230322e31302e34352e302f32342d3234203d3e203538343837.roa (hash: Pq42kdvVdDx27B5bNAeqjUJLTlrLQKyMHAB5zlyHMPU=)
                          27: 3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa (hash: qXViQe0IG/eTHkD0fbY5SDfFmHb+Xoz2ICUsMklVTgs=)
                          28: 3230322e31302e33382e302f32342d3234203d3e203538343837.roa (hash: BuU2j2Tzku9Y+Nv4sLTJnMWdagAd0n4W+YSomxmWS8w=)
                          29: 3230322e31302e33342e302f32342d3234203d3e203538343837.roa (hash: P0Lt12HkMOn7Oz1k9JyvB66m4KQafgfYAgd99v0Pdkg=)
                          30: 3230322e31302e34372e302f32342d3234203d3e203538343837.roa (hash: o/ovZODvAYW8nitqxabUgfoEb6l26ISQ4qAXkJQ9bRQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
                          rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d1:d0:16:af:3f:cb:07:92:a6:e6:b2:d0:a4:7c:22:0f:d6:c0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
        Validity
            Not Before: Jul 24 01:10:41 2026 GMT
            Not After : Jul 25 02:38:41 2026 GMT
        Subject: CN=6649040FEBE9E2EEE87F5F36CDD96A7E2526603A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:42:b4:37:68:1f:a6:ed:0f:7b:c5:d7:99:
                    ba:7e:94:a1:71:e6:fb:a7:15:16:db:5e:be:0b:19:
                    34:fb:16:c5:cd:c5:3b:22:37:04:e2:79:62:41:d1:
                    60:d6:a4:e3:ec:4e:0f:88:25:69:bc:91:82:68:4b:
                    9b:61:3b:03:f1:d9:d8:60:f9:88:99:be:f2:4f:e6:
                    72:99:c5:34:f1:d5:04:ce:48:e7:61:51:84:85:ed:
                    90:24:ba:17:01:95:18:5f:76:29:ad:84:f2:f0:2a:
                    00:b6:3d:89:5a:dd:e8:47:1c:9a:85:0e:64:40:f3:
                    b5:a8:b5:73:98:7d:c8:81:d7:43:b8:3f:09:45:57:
                    ee:8a:14:c7:22:7e:78:da:6b:73:1b:9f:07:7f:70:
                    02:03:e8:21:e4:82:fd:57:22:72:4a:34:c1:bb:1d:
                    d1:87:df:67:f7:9f:ac:1f:7f:82:f8:60:53:e4:ff:
                    d3:55:8d:2b:90:91:28:4a:be:56:b7:44:c0:ee:69:
                    8b:fa:9e:1e:63:f7:a9:26:2c:d3:c9:a7:85:4f:16:
                    74:dc:7f:9f:ce:a5:30:1f:13:76:9e:da:4e:7c:c5:
                    dd:d0:2d:66:f8:83:e7:9c:b1:b4:1a:15:27:69:e6:
                    39:a5:d1:f5:4b:ad:fe:a4:01:5f:46:1a:d5:01:73:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:49:04:0F:EB:E9:E2:EE:E8:7F:5F:36:CD:D9:6A:7E:25:26:60:3A
            X509v3 Authority Key Identifier:
                keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:84:94:e8:03:fd:10:c1:2b:17:72:6d:2b:b3:7b:a3:5f:47:
         7d:cc:d8:ac:ea:48:77:fe:0c:b6:df:7b:0f:e6:c3:68:d4:b9:
         b9:b5:99:f4:dd:e2:ff:29:ed:b1:cc:12:7b:6d:63:80:a2:45:
         9a:9e:70:af:90:68:48:b0:69:15:87:2b:d5:fc:dc:07:a6:13:
         cb:1a:01:8c:dc:57:c5:ee:bc:7b:e3:e9:80:ca:2e:39:e5:51:
         d6:c3:4f:34:dd:bd:19:3b:4e:92:a7:5e:e7:d2:a0:92:18:2f:
         03:a2:80:14:e6:de:b5:97:ae:6f:12:46:e7:de:a8:e4:ca:aa:
         6c:11:00:f3:fe:ed:16:8b:95:e8:fe:ee:4c:36:12:4b:cf:1f:
         19:d2:2a:02:6d:8a:56:c0:b0:ac:d8:9e:27:38:70:91:de:40:
         97:c7:09:56:89:8c:5d:0f:b6:0f:83:b3:e9:d7:8d:c1:b3:f7:
         f0:e6:00:ff:e0:35:46:28:2e:53:51:9e:16:ef:f3:bf:e7:4f:
         e9:6d:a4:a4:13:5b:0a:9c:43:d9:70:b5:3c:8b:66:59:e7:ae:
         9b:e7:a9:06:c6:ba:42:84:77:2b:a0:44:05:9f:30:98:56:b6:
         00:2b:8b:80:dd:df:59:ec:47:e4:6a:9d:a9:c2:66:db:ea:eb:
         ea:87:9b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:34:37 2026 by rpki-client