Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
File:                     C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft (raw, json)
Hash identifier:          spuEQJuqKmyq2spG15Be/D3DItkqSF97793XkAIpU0U=
Subject key identifier:   A6:40:EA:07:58:F4:BE:46:A7:DE:A6:34:7D:A0:98:A4:90:6E:6E:EE
Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
Certificate issuer:       /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Certificate serial:       67A4E5B7C35119D9F8F82AD154B424AFADCC1C5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 23:23:23 +0000
Manifest this update:     Thu 23 Jul 2026 23:18:23 +0000
Manifest next update:     Sat 25 Jul 2026 01:41:23 +0000
Files and hashes:         1: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: sk3ZxSGwRUSHyuGSOaKTetRq+YknC9DBGmC5NH67SNI=)
                          2: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: O05Ps8hAd8rr0CaoB90NQsqUuO2fcg1LWgMOuLkP0To=)
                          3: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: b3pQDI/eP+0SwgVnsmQmkeZ1d2w8eSJ1YWWJnGvXDz8=)
                          4: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MuOtiRCK+tp6U+hzr1x3k/1BlmKfEwjNnXDtMTn3C54=)
                          5: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: gfbcpg+SVHwH5IjoNRXSMVdGISaiGt5LV1khyRPoF44=)
                          6: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: 0HDp+vfD+4sT/TKrDDPYxk4/65tF4UinBvnW6pYSahU=)
                          7: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: 1xZJhr0aQYYOOzMLyDygpRTMMvY7vsa9JEcRlTrt0Lw=)
                          8: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: zV398UgRTlptT97Qc1/wsPkzfK97ViGntlsJokWgHgg=)
                          9: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: 9y9riMr8hw8IaD+ig1yYTfIKYToP3AFvgLBOvq0dUqA=)
                          10: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: RZNwhsdWPwHsJ1753q7l7RVtxdL0EUNu722JNRatZoc=)
                          11: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: Z17KOPUimeqYA1aZq3SNkRhgncaUQxfgpGD5Ws+TmaM=)
                          12: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: 5JKbjJnU69SJlm4fg3FPZyCqBIfVS060Z1KnNVEVtkw=)
                          13: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: oQlQCcGSIyApZwe0zh02JHB8NgdLlqCqb+hc+WKLBAk=)
                          14: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: UT1h2LMTjTQJ7ZJ7JztoMi17EHjsbtJIUvBVi8DlKSo=)
                          15: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: AzVrbmw1D35LXqWCeqtZ4xDM2Ov824Fl8I4Xi69Tl/A=)
                          16: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: CqP8eUG+XNHe2ZRDBQbbiW1JHTmz7eUiEFlYMZh4rHY=)
                          17: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 5IqA+aFlD3C+qm5E4iE8TertLT23UTTXA9Svn7QpuMk=)
                          18: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: 0dcMygO+Bc+TXcrUgmdBEdxgQ/GML+71SETcyrBroSo=)
                          19: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: bUiGB1W7Se2nx9Nc64eycOugCZo681BWG/duCoJZWeI=)
                          20: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: R1kE9uKrZbeLkgzHC7e5BusLmDv674DkMdgzbBvwhAw=)
                          21: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: VEWKVQt8y/8GPWkN8tAdK8b4mgUdgFzyKGEQfkduN98=)
                          22: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: Xtekq0XfiyDF84CgG01kPnBfk5gv3roxTAHumf4Y5lY=)
                          23: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: AMjnyAEfiOVxNwyzM8O6HXzZGTxkgyap27aKj3W6Skk=)
                          24: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: WVnSwWyfbHb1cF4zK3nfAh3+4mXKYVShqhzNFGYV1/4=)
                          25: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: 8i1yDAIM/jiddL2Dyt3x+4fTdzbaN44q0VQUxOtuXgI=)
                          26: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: HLJY57d7qqR9FiGfUIjlFjjQrGocl/3YC5fSm+HtD9U=)
                          27: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: 5SgJA7bdr6raZ7Mqjwc8wZqhlg7dpVjh8FGcFa+U5rk=)
                          28: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: rrbo9gFfKTg6spECSvy8Q2yWG7nEl4xu5sTVFZ6rz7o=)
                          29: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: LiXvBI/+0aSmpVLjojfaeEmHB07g7RdwE9fmn4IWLtc=)
                          30: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: FpuosyUSWMTfhk1yjPzRRle4FSUaLD0RRnI3/i081xk=)
                          31: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: ysVciOe07++0v5Vr1hzLx8fA/0jTLiYdiUqf/6pXrkA=)
                          32: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: OLNk+VWdGI1qmIPu8Drgqpmv6WGw5uCOToriZ5VHa9w=)
                          33: C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl (hash: G/oWNDeZBxnrcFXrqg0V6hoR/k/g5blvCXhxwdeh8Ds=)
                          34: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: +wm/VK77fHrWVU/ZkF+Uqbjn7YBt3NYF+N/EiT1H9LU=)
                          35: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: QdXCuvjo6r6bGTPWedrJUM8DCfGtVmTE0qQwjHkmDQ4=)
                          36: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: +c41dutgFT2ZE2lEvbuAaTazQUEb6UW8ui2Kg7nMrVo=)
                          37: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: OzuliA2N8wNt6MGtPujtGB6U6rXsRoWhjjYaeaS0yAs=)
                          38: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: RgFmlKKxmL5ut1KmXAx7XdZwngIvPGxFdbg1RlK2QKc=)
                          39: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: cACJn3CN44BJInMN2D1DUzz5f/u9M8K8ZaV5c704i0c=)
                          40: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: /GIxYy0vSq64HynAB2s2ChjySqHSwoYFUlMZoPK4jfs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
                          rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a4:e5:b7:c3:51:19:d9:f8:f8:2a:d1:54:b4:24:af:ad:cc:1c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
        Validity
            Not Before: Jul 23 23:18:23 2026 GMT
            Not After : Jul 25 01:41:23 2026 GMT
        Subject: CN=A640EA0758F4BE46A7DEA6347DA098A4906E6EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:61:36:da:e9:9c:77:dd:40:11:0a:ab:d2:
                    f1:b7:dd:44:78:15:31:84:14:ce:1c:5f:3f:8d:6e:
                    8c:be:4b:51:42:d2:3c:52:03:92:d3:74:8a:d6:71:
                    1a:fe:c8:0c:5d:46:06:b6:09:f5:c0:01:76:72:9c:
                    1e:37:e2:b9:4a:5b:1a:78:b8:a3:84:88:c7:11:45:
                    78:28:01:46:85:aa:ae:00:bf:9f:cd:83:6c:cd:90:
                    b8:e6:c5:c8:68:ce:94:5d:5d:2a:72:ed:01:2b:d5:
                    fd:76:43:69:ee:1a:d7:2d:8e:24:6e:ed:4c:2a:1f:
                    aa:71:9f:e5:fc:42:8f:3c:e3:68:f6:a0:de:c6:99:
                    47:ce:e0:cc:e0:ab:43:3c:13:d1:15:c6:0c:54:93:
                    a0:26:f9:b4:87:a1:64:12:c5:fd:d3:da:27:f1:39:
                    26:f0:5d:f1:88:7d:31:b3:6b:85:fb:23:6d:de:38:
                    80:06:11:7a:88:b4:b4:6a:1a:23:31:a8:7c:ba:e0:
                    8a:8b:af:a4:0e:b7:c9:62:c8:98:bf:5e:3e:96:13:
                    d1:0e:e0:2f:e7:a4:e6:60:44:72:ef:c2:b1:5e:93:
                    55:fb:38:0c:ba:16:26:b8:7d:30:ce:42:65:6c:50:
                    d1:7e:6e:99:8c:a0:1c:c0:bd:eb:20:35:68:2b:b8:
                    b0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:40:EA:07:58:F4:BE:46:A7:DE:A6:34:7D:A0:98:A4:90:6E:6E:EE
            X509v3 Authority Key Identifier:
                keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:67:58:48:75:23:b3:be:50:f1:53:28:38:ce:08:e9:fe:fa:
         f8:e0:31:3b:9f:59:42:2f:24:80:4c:d6:01:92:61:ea:cd:7f:
         05:60:23:eb:ab:f5:79:ad:b0:5f:d2:6a:43:ba:88:8d:7d:5b:
         22:a2:c5:d7:9f:b9:90:ed:95:cf:9b:dc:0a:c6:c6:26:a5:3e:
         de:85:dc:4c:24:3d:ce:01:22:44:65:4e:6f:3d:57:13:7f:78:
         08:05:32:93:2e:84:49:bd:d6:7e:14:93:f3:8c:7d:29:64:a5:
         8d:38:d5:3f:74:cd:19:3b:41:8b:b1:46:5b:e5:7f:0d:d1:e6:
         99:06:d7:9c:a4:c4:a4:6f:72:c4:79:00:54:23:c0:9d:8c:8e:
         5b:b4:70:96:88:82:38:86:23:98:5c:8f:c8:7b:6b:85:ad:f6:
         fe:08:fa:20:29:fb:de:1c:03:2b:15:9f:8a:9d:c0:72:f4:32:
         d7:24:e6:c6:55:f6:72:f5:a3:ec:06:97:7c:e7:a6:88:90:4f:
         7e:d0:79:74:c1:91:6b:ef:70:c7:ec:ad:b8:63:7a:66:8e:70:
         08:6d:8e:7c:0a:a0:68:22:41:4b:3b:94:ae:47:a1:c1:a5:82:
         6a:1b:92:24:00:d2:ff:00:9a:38:cf:2f:fd:98:01:82:d7:8b:
         af:64:98:e5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ6Tlt8NRGdn4+CrRVLQkr63MHF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAyRDND
NURDQjNGOTAeFw0yNjA3MjMyMzE4MjNaFw0yNjA3MjUwMTQxMjNaMDMxMTAvBgNV
BAMTKEE2NDBFQTA3NThGNEJFNDZBN0RFQTYzNDdEQTA5OEE0OTA2RTZFRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbWE22umcd91AEQqr0vG33UR4
FTGEFM4cXz+Nboy+S1FC0jxSA5LTdIrWcRr+yAxdRga2CfXAAXZynB434rlKWxp4
uKOEiMcRRXgoAUaFqq4Av5/Ng2zNkLjmxchozpRdXSpy7QEr1f12Q2nuGtctjiRu
7UwqH6pxn+X8Qo8842j2oN7GmUfO4Mzgq0M8E9EVxgxUk6Am+bSHoWQSxf3T2ifx
OSbwXfGIfTGza4X7I23eOIAGEXqItLRqGiMxqHy64IqLr6QOt8liyJi/Xj6WE9EO
4C/npOZgRHLvwrFek1X7OAy6Fia4fTDOQmVsUNF+bpmMoBzAvesgNWgruLC5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpkDqB1j0vkan3qY0faCYpJBubu4wHwYDVR0j
BBgwFoAUwNcCjA+mKDSK4iRd0MwC08Xcs/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2E2NjVjMzItNmRhZi00NzJiLWJjZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMw
RkE2MjgzNDhBRTIyNDVERDBDQzAyRDNDNURDQjNGOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMEQ3MDI4QzBGQTYyODM0OEFFMjI0NUREMENDMDJEM0M1RENC
M0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E2NjVjMzItNmRhZi00NzJiLWJj
ZTYtMzE3ZDVkNmM3ODllLzAvQzBENzAyOEMwRkE2MjgzNDhBRTIyNDVERDBDQzAy
RDNDNURDQjNGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGBnWEh1I7O+UPFTKDjOCOn++vjgMTufWUIv
JIBM1gGSYerNfwVgI+ur9XmtsF/SakO6iI19WyKixdefuZDtlc+b3ArGxialPt6F
3EwkPc4BIkRlTm89VxN/eAgFMpMuhEm91n4Uk/OMfSlkpY041T90zRk7QYuxRlvl
fw3R5pkG15ykxKRvcsR5AFQjwJ2Mjlu0cJaIgjiGI5hcj8h7a4Wt9v4I+iAp+94c
AysVn4qdwHL0Mtck5sZV9nL1o+wGl3znpoiQT37QeXTBkWvvcMfsrbhjemaOcAht
jnwKoGgiQUs7lK5HocGlgmobkiQA0v8AmjjPL/2YAYLXi69kmOU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:39 2026 by rpki-client