Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
File:                     2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft (raw, json)
Hash identifier:          +ezsahlvAPboUDOk6IxVua8t+8+NG+Wvl4qgdheSGTQ=
Subject key identifier:   08:EC:29:08:F4:A7:1A:31:E0:CA:A3:F3:A9:70:55:B0:A8:A1:84:B7
Authority key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E
Certificate issuer:       /CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
Certificate serial:       2EC242E57F7E907C32A54AC6C2E3262B6052B1AE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 19:54:21 +0000
Manifest this update:     Thu 23 Jul 2026 19:49:21 +0000
Manifest next update:     Fri 24 Jul 2026 23:45:21 +0000
Files and hashes:         1: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: D52uwwzpgaxCjAFI9GaZMm7APMN7ImtqrU9yyVklPWk=)
                          2: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl (hash: +eiSt58NsE3IlCWh+/a1KmKVP0b0ehPDMH0hUiRIfL0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl
                          rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c2:42:e5:7f:7e:90:7c:32:a5:4a:c6:c2:e3:26:2b:60:52:b1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
        Validity
            Not Before: Jul 23 19:49:21 2026 GMT
            Not After : Jul 24 23:45:21 2026 GMT
        Subject: CN=08EC2908F4A71A31E0CAA3F3A97055B0A8A184B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:33:9c:63:8f:98:7a:eb:60:e8:1e:43:ea:
                    8b:cc:4a:2d:47:84:77:5a:b4:7b:b5:22:62:9f:32:
                    ca:67:4c:a7:cc:7a:7e:28:e7:d8:a4:7d:00:a8:b6:
                    90:6c:a4:41:23:65:a1:be:0b:b9:31:77:57:27:c7:
                    59:4d:32:40:e5:53:00:73:a4:ff:8d:2e:01:c0:7e:
                    c3:93:10:7c:aa:de:d6:64:c8:40:79:2e:e3:e2:76:
                    83:ee:f8:43:7d:9a:54:a1:93:26:53:c9:c1:48:68:
                    84:49:c2:cf:f8:70:9c:1f:24:df:5c:a0:64:44:f6:
                    43:30:26:6c:6d:fa:13:1d:5f:f3:4b:47:98:1a:ee:
                    71:a0:c7:3d:f5:0a:e5:fd:8f:e9:ca:c6:1f:54:84:
                    d0:69:c1:7e:2f:e0:f8:d5:1b:3e:3d:da:11:a6:d6:
                    73:d5:5d:76:c2:ef:1c:d5:81:2e:96:1c:32:51:1b:
                    1e:ab:8e:15:7a:bf:b5:33:a8:86:3f:11:b0:a4:2a:
                    03:95:f1:87:11:ce:1f:c1:91:3f:24:ee:9f:0b:c2:
                    07:cd:5a:ea:b3:77:dc:31:99:88:ce:f9:db:19:0b:
                    98:a7:65:2f:35:ef:b4:c2:f8:0d:b2:68:20:18:3e:
                    93:55:ba:33:d4:1c:13:8e:22:6c:d8:14:30:f2:9d:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EC:29:08:F4:A7:1A:31:E0:CA:A3:F3:A9:70:55:B0:A8:A1:84:B7
            X509v3 Authority Key Identifier:
                keyid:20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:61:00:3c:81:5f:dc:52:7e:56:fd:57:6c:60:2e:0e:19:
         20:6c:d1:5b:d5:92:5b:19:17:21:ae:a0:7d:24:52:b7:b6:96:
         69:72:5d:25:bb:fb:d6:3b:2d:75:21:a0:61:94:ad:06:63:b2:
         fc:ae:12:af:be:c6:5e:b1:ce:e7:dd:ac:52:34:60:e2:d7:3b:
         78:d2:2f:9f:62:df:74:fc:e8:0f:62:de:24:7b:33:9f:da:fb:
         19:82:dc:82:f4:4d:27:a3:4b:f5:e7:fa:30:ce:5c:97:2b:06:
         22:d0:6d:b3:75:5e:42:f2:20:0d:d0:e0:9e:b1:f3:9e:ac:1a:
         33:f9:9d:51:0b:ee:51:9f:d7:af:5d:29:78:af:8b:85:a8:3a:
         1b:12:24:f4:0c:27:b9:50:69:14:c3:59:06:22:c0:03:10:1f:
         ad:22:2e:d3:e4:69:38:8c:20:4f:83:c2:c4:fc:47:6a:08:0b:
         78:5e:29:2d:3e:fa:81:10:70:59:90:c4:e7:1f:b2:25:b7:fd:
         2d:06:00:f9:3b:66:ad:c5:92:3a:53:05:b0:0d:d0:8e:55:36:
         ad:10:da:d1:30:cc:3f:09:91:2b:54:50:86:db:7f:0c:ad:99:
         14:b9:f7:22:a1:de:f2:45:f4:c3:81:8f:3d:b2:ac:a4:37:30:
         41:c8:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:25:21 2026 by rpki-client