Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
File:                     8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json)
Hash identifier:          jVtaZfvOlrs22bIx7xHzrnboud8TKoux8HV0PQ94xaA=
Subject key identifier:   6D:3A:37:D5:6F:15:5F:C0:2B:58:69:16:84:E1:56:93:4C:8D:76:54
Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C
Certificate issuer:       /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C
Certificate serial:       57A763974477FD2EA339F2E97EEE9EA9F076D28F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 10:22:42 +0000
Manifest this update:     Thu 23 Jul 2026 10:17:42 +0000
Manifest next update:     Fri 24 Jul 2026 11:27:42 +0000
Files and hashes:         1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=)
                          2: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: 923BuD+JrgOKb9IBshZ9Lq4RrHc14wVYNrd9Tq9J1ME=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl
                          rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 11:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a7:63:97:44:77:fd:2e:a3:39:f2:e9:7e:ee:9e:a9:f0:76:d2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C
        Validity
            Not Before: Jul 23 10:17:42 2026 GMT
            Not After : Jul 24 11:27:42 2026 GMT
        Subject: CN=6D3A37D56F155FC02B58691684E156934C8D7654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:34:81:be:0a:61:c9:97:7b:ba:c3:48:67:
                    db:34:13:c2:3c:4d:1f:6c:17:69:aa:8c:f0:6c:3f:
                    aa:c7:28:db:2f:c9:fe:79:c6:5f:d9:1d:a2:d3:bd:
                    eb:4f:65:23:d7:be:b3:b3:6e:0f:4e:4e:a1:90:89:
                    2a:e1:a1:00:66:45:48:1f:f5:bf:3a:d9:6e:14:f6:
                    10:88:a7:6a:f3:95:0f:da:3b:b6:3b:df:da:32:46:
                    e3:ea:db:0f:71:40:b0:08:65:ab:26:51:dd:e1:b1:
                    94:0e:8f:64:c6:f6:cd:7b:60:bd:94:b6:d5:a5:4e:
                    ff:f2:bc:4b:09:03:96:9d:18:6d:93:40:1b:9d:0c:
                    b5:2d:00:5c:a2:cf:21:d3:a9:4d:3f:b5:e7:80:45:
                    8a:50:50:d3:cf:33:21:cd:14:39:ff:df:44:ff:89:
                    6c:b0:8f:08:59:13:fc:24:c7:8a:b6:ec:5e:5a:1c:
                    22:25:0c:82:c2:f7:46:6d:5e:cf:de:50:96:7b:a1:
                    16:1a:dd:04:96:ac:aa:b1:41:59:0b:1a:cd:2a:fb:
                    07:19:f8:f4:12:28:bb:01:2c:62:21:0e:ea:24:11:
                    9f:02:51:5a:3f:e5:8e:0f:ff:ed:89:ef:63:66:ae:
                    2f:58:0c:c7:28:03:4a:eb:88:c1:f5:78:ef:65:54:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3A:37:D5:6F:15:5F:C0:2B:58:69:16:84:E1:56:93:4C:8D:76:54
            X509v3 Authority Key Identifier:
                keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1b:8f:9c:46:a4:ed:fa:b1:c0:c2:ab:7e:34:25:85:1a:83:
         53:bb:01:1f:90:4d:c6:9b:8a:4a:a7:fc:af:1b:ef:53:d1:b0:
         00:6f:69:c5:3b:a7:f8:78:02:9b:57:71:37:44:a9:a5:5f:9e:
         f6:91:c6:29:e3:59:69:3a:f4:60:a1:7e:68:de:8c:39:ae:21:
         b0:c7:c2:bb:d4:60:f5:21:9e:9e:59:f5:7f:82:49:23:51:37:
         45:2a:ac:76:9a:24:ed:cd:7b:c1:df:bb:84:fd:3e:95:f1:13:
         ac:63:c9:8d:95:4c:b7:58:a3:f4:d5:2b:32:1f:25:0d:d7:b7:
         d1:c4:4b:a2:19:b9:78:d5:17:44:62:72:af:6e:53:f4:45:ff:
         7f:a0:47:6b:a3:db:4b:b3:89:34:ea:e3:4f:64:64:77:ec:70:
         3d:cc:fd:46:b1:cb:0a:bf:1d:0e:48:4a:bd:ba:66:98:b4:56:
         c4:c5:ea:c8:26:77:79:f8:cf:7b:83:14:1f:98:51:f0:90:4c:
         24:30:28:6f:6b:22:5a:e8:fd:9f:49:9d:16:ea:ec:33:f8:0e:
         7a:31:c2:9b:cf:5a:46:ec:2d:55:aa:9e:08:1e:7e:eb:1e:24:
         02:e7:1c:bc:db:95:af:0c:60:71:f0:fa:56:b5:d4:d5:62:ae:
         f4:58:ad:b1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV6djl0R3/S6jOfLpfu6eqfB20o8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMy
NzAwNjI4QzAeFw0yNjA3MjMxMDE3NDJaFw0yNjA3MjQxMTI3NDJaMDMxMTAvBgNV
BAMTKDZEM0EzN0Q1NkYxNTVGQzAyQjU4NjkxNjg0RTE1NjkzNEM4RDc2NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDORTSBvgphyZd7usNIZ9s0E8I8
TR9sF2mqjPBsP6rHKNsvyf55xl/ZHaLTvetPZSPXvrOzbg9OTqGQiSrhoQBmRUgf
9b862W4U9hCIp2rzlQ/aO7Y739oyRuPq2w9xQLAIZasmUd3hsZQOj2TG9s17YL2U
ttWlTv/yvEsJA5adGG2TQBudDLUtAFyizyHTqU0/teeARYpQUNPPMyHNFDn/30T/
iWywjwhZE/wkx4q27F5aHCIlDILC90ZtXs/eUJZ7oRYa3QSWrKqxQVkLGs0q+wcZ
+PQSKLsBLGIhDuokEZ8CUVo/5Y4P/+2J72Nmri9YDMcoA0rriMH1eO9lVL33AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbTo31W8VX8ArWGkWhOFWk0yNdlQwHwYDVR0j
BBgwFoAUjhabWjni+FgO5/aqTnbWQycAYowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDNkZGI3OWYtMmMzNy00N2FmLWI5NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEz
OUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMyNzAwNjI4Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84RTE2OUI1QTM5RTJGODU4MEVFN0Y2QUE0RTc2RDY0MzI3MDA2
MjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5
NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2
NDMyNzAwNjI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIQbj5xGpO36scDCq340JYUag1O7AR+QTcab
ikqn/K8b71PRsABvacU7p/h4AptXcTdEqaVfnvaRxinjWWk69GChfmjejDmuIbDH
wrvUYPUhnp5Z9X+CSSNRN0UqrHaaJO3Ne8Hfu4T9PpXxE6xjyY2VTLdYo/TVKzIf
JQ3Xt9HES6IZuXjVF0Ricq9uU/RF/3+gR2uj20uziTTq409kZHfscD3M/Uaxywq/
HQ5ISr26Zpi0VsTF6sgmd3n4z3uDFB+YUfCQTCQwKG9rIlro/Z9JnRbq7DP4Dnox
wpvPWkbsLVWqnggefuseJALnHLzbla8MYHHw+la11NVirvRYrbE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:17 2026 by rpki-client