Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft
File:                     59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft (raw, json)
Hash identifier:          ncyQ8j2SDCGwnmS7tTm/M7QB8NyO85G8ztFZ8nbWNB0=
Subject key identifier:   3F:3A:9B:49:E2:84:BB:8B:2E:B3:FB:A5:A1:58:0C:47:6F:B9:85:9C
Authority key identifier: 59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90
Certificate issuer:       /CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90
Certificate serial:       7972EF500CCD8F93467B56E5C6A3663F20C2342A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 23:18:16 +0000
Manifest this update:     Thu 23 Jul 2026 23:13:16 +0000
Manifest next update:     Sat 25 Jul 2026 01:03:16 +0000
Files and hashes:         1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: xUpvUE2ZHUc2DU7j7aFTg7BviyLprNaKf2mKbV8517U=)
                          2: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl (hash: JiNrMFIKAkxprNDolj8cWBDtTd4IJZo3CTwJmJDJxpc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl
                          rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:72:ef:50:0c:cd:8f:93:46:7b:56:e5:c6:a3:66:3f:20:c2:34:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90
        Validity
            Not Before: Jul 23 23:13:16 2026 GMT
            Not After : Jul 25 01:03:16 2026 GMT
        Subject: CN=3F3A9B49E284BB8B2EB3FBA5A1580C476FB9859C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:58:43:3a:96:33:e3:d3:ba:8e:91:48:57:
                    3f:66:9f:3a:31:72:63:d4:41:e5:80:e3:17:f7:55:
                    9d:1e:49:29:b3:46:67:b0:20:1a:64:39:25:cb:6f:
                    43:0d:d0:f1:65:af:7f:a1:7a:13:56:6e:d3:c9:79:
                    38:67:7a:0a:07:88:d1:29:86:bc:e7:b0:c6:3a:9f:
                    3b:e4:5a:f0:f4:5f:6c:ba:b1:6c:4c:83:e1:f7:cb:
                    ca:7e:c7:e8:ee:25:c3:b3:5d:40:ea:e1:d1:17:30:
                    63:21:33:0e:bf:b2:77:c3:95:24:5b:6e:90:14:2c:
                    08:d7:da:5a:d1:ba:74:5e:17:f4:c5:f8:9a:94:64:
                    f9:58:21:64:39:4b:26:91:fa:0b:c7:eb:7f:55:a0:
                    f3:9b:04:10:61:41:3e:8a:4f:dd:64:f5:39:64:57:
                    32:54:27:ac:6a:62:f4:6f:39:dc:d0:96:38:22:09:
                    ee:a9:b7:fe:97:c5:34:a8:60:5a:6f:4e:55:e4:4d:
                    f3:2d:4f:58:ef:3e:ec:34:3c:4e:85:cc:59:fe:70:
                    2c:88:86:a7:3b:32:39:76:7c:0d:ab:ad:ce:57:a1:
                    97:52:25:a3:19:16:e2:aa:5c:50:d8:e7:39:6e:92:
                    ff:e5:6b:67:72:15:d9:f1:72:64:ee:92:01:86:a0:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3A:9B:49:E2:84:BB:8B:2E:B3:FB:A5:A1:58:0C:47:6F:B9:85:9C
            X509v3 Authority Key Identifier:
                keyid:59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:b7:6f:b9:74:a7:5b:59:2d:0b:ef:bd:52:e1:d1:32:83:
         69:96:23:60:6e:33:fe:84:ad:70:e7:84:79:25:b9:d7:d7:f0:
         52:d4:08:42:6d:70:89:9e:6d:0b:d3:81:4b:13:29:eb:18:fa:
         48:98:5e:21:31:2f:24:6e:82:e4:05:1e:50:94:b4:99:15:ac:
         d7:59:87:d7:5c:f0:63:7c:f0:b1:fb:ec:15:41:fd:cf:3e:02:
         7c:74:89:5a:ce:91:8f:1e:ee:1a:75:7b:0f:18:8e:7d:d9:af:
         dc:e5:5b:85:6b:d8:63:f7:f4:6c:4b:4b:85:69:5d:1e:2f:95:
         d8:a3:41:2d:67:fb:5b:ea:87:c2:2d:a1:84:a7:5f:49:a8:fb:
         c9:d1:d2:a1:d5:70:01:f7:a3:25:39:e5:c6:8d:8f:f4:00:07:
         fb:01:dd:6e:d6:e5:ff:0c:6c:41:f1:95:83:41:d0:58:d5:cb:
         d8:3b:77:57:09:fa:19:97:09:2f:6d:76:31:f3:09:20:03:e0:
         4b:e8:20:fc:83:20:c2:f9:66:f5:1c:df:a4:2b:7a:22:89:dc:
         02:0a:5f:83:a1:cd:f1:43:35:52:a7:53:53:ac:d5:f4:49:8e:
         ec:5f:39:cc:ba:34:52:a2:f5:48:46:5c:af:f7:16:1b:90:a4:
         2a:cb:f9:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeXLvUAzNj5NGe1blxqNmPyDCNCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRC
QTZFRkQ5MDAeFw0yNjA3MjMyMzEzMTZaFw0yNjA3MjUwMTAzMTZaMDMxMTAvBgNV
BAMTKDNGM0E5QjQ5RTI4NEJCOEIyRUIzRkJBNUExNTgwQzQ3NkZCOTg1OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRUFhDOpYz49O6jpFIVz9mnzox
cmPUQeWA4xf3VZ0eSSmzRmewIBpkOSXLb0MN0PFlr3+hehNWbtPJeThnegoHiNEp
hrznsMY6nzvkWvD0X2y6sWxMg+H3y8p+x+juJcOzXUDq4dEXMGMhMw6/snfDlSRb
bpAULAjX2lrRunReF/TF+JqUZPlYIWQ5SyaR+gvH639VoPObBBBhQT6KT91k9Tlk
VzJUJ6xqYvRvOdzQljgiCe6pt/6XxTSoYFpvTlXkTfMtT1jvPuw0PE6FzFn+cCyI
hqc7Mjl2fA2rrc5XoZdSJaMZFuKqXFDY5zlukv/la2dyFdnxcmTukgGGoN9xAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPzqbSeKEu4sus/uloVgMR2+5hZwwHwYDVR0j
BBgwFoAUWfQjTK7vpGs8sWJ9OFAvtLpu/ZAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzJhOThjOGItY2FkOS00OWUxLWIxNzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENB
RUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRCQTZFRkQ5MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OUY0MjM0Q0FFRUZBNDZCM0NCMTYyN0QzODUwMkZCNEJBNkVG
RDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx
NzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJG
QjRCQTZFRkQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACoQt2+5dKdbWS0L771S4dEyg2mWI2BuM/6E
rXDnhHkludfX8FLUCEJtcImebQvTgUsTKesY+kiYXiExLyRuguQFHlCUtJkVrNdZ
h9dc8GN88LH77BVB/c8+Anx0iVrOkY8e7hp1ew8Yjn3Zr9zlW4Vr2GP39GxLS4Vp
XR4vldijQS1n+1vqh8ItoYSnX0mo+8nR0qHVcAH3oyU55caNj/QAB/sB3W7W5f8M
bEHxlYNB0FjVy9g7d1cJ+hmXCS9tdjHzCSAD4EvoIPyDIML5ZvUc36QreiKJ3AIK
X4OhzfFDNVKnU1Os1fRJjuxfOcy6NFKi9UhGXK/3FhuQpCrL+c4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:36 2026 by rpki-client