Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
File:                     3559C104797053AE8E5C72BE7726BF44C2878CF1.mft (raw, json)
Hash identifier:          4sIkIDQaWAbdq/vSSbrzdNh1QcMHHZpIUOKK41EIGXc=
Subject key identifier:   06:26:B5:31:51:86:98:19:5B:C8:63:4C:9B:68:25:92:56:59:99:23
Authority key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1
Certificate issuer:       /CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
Certificate serial:       2FF2D3980D9056180497D8493D64318C005516B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 00:19:27 +0000
Manifest this update:     Fri 24 Jul 2026 00:14:27 +0000
Manifest next update:     Sat 25 Jul 2026 01:36:27 +0000
Files and hashes:         1: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: TDHHkU7auhZbGybqQy/XY5A0u3/rxbPGk544rbieSIw=)
                          2: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: eqd0E+Lb4EVtDoQqymHQTLKTQ6HfKOpFx++L2qv+u+A=)
                          3: 3559C104797053AE8E5C72BE7726BF44C2878CF1.crl (hash: sSIoTO/wDEndcWWPaY4sE0krWNUqreIsAO3HAAgmRGc=)
                          4: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: fC4L8rYhZI0UDA/WORkA1APzTZ9nOmT1ddK9x1B6L7w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl
                          rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f2:d3:98:0d:90:56:18:04:97:d8:49:3d:64:31:8c:00:55:16:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1
        Validity
            Not Before: Jul 24 00:14:27 2026 GMT
            Not After : Jul 25 01:36:27 2026 GMT
        Subject: CN=0626B531518698195BC8634C9B68259256599923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:ca:03:84:b5:6e:e9:e4:70:57:05:22:d3:
                    aa:92:12:bf:fa:36:3b:66:83:55:43:55:a1:09:3f:
                    c6:31:37:fb:52:d2:92:ac:58:6b:b5:45:d5:41:7b:
                    40:0a:27:f8:c8:e4:3c:f0:a6:9e:55:f2:8d:ec:d2:
                    30:5d:df:11:88:57:8d:66:15:96:e5:61:d0:92:3a:
                    4c:2d:f5:bd:68:f2:4c:ad:22:a7:e7:15:fb:4c:62:
                    f1:26:62:07:6c:39:1a:dc:24:b3:bf:b4:92:f7:43:
                    f1:b5:bf:e6:a8:18:be:eb:d8:2a:3b:21:cb:6d:ab:
                    8f:24:c0:a7:07:c6:d1:ca:82:31:71:f6:71:97:ee:
                    e2:c5:bc:e2:06:67:7e:aa:95:72:32:bf:75:b6:05:
                    91:c8:08:fd:44:83:64:7a:3b:c2:81:7b:db:87:30:
                    f2:2c:5e:c5:a7:25:70:47:fe:31:82:c2:6a:3e:b0:
                    41:1b:3a:ff:c7:53:23:ea:74:8d:9e:0a:91:14:10:
                    83:e4:a3:cf:cf:cd:f0:4e:3a:02:7e:c4:98:03:bd:
                    ae:bc:c4:00:0e:40:22:15:a0:31:2e:88:6c:c9:a4:
                    b8:87:85:22:6f:0c:86:6a:d6:b8:a1:3d:46:3b:cd:
                    f0:87:ed:bf:14:14:af:53:12:0c:7c:15:0a:1a:3d:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:26:B5:31:51:86:98:19:5B:C8:63:4C:9B:68:25:92:56:59:99:23
            X509v3 Authority Key Identifier:
                keyid:35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3d:80:c1:38:33:2d:1c:14:e1:d0:70:19:ce:93:33:75:dc:
         cb:8a:7c:a2:d6:f6:36:23:8b:5a:fc:5c:e5:67:54:20:ff:b1:
         a8:58:e2:8d:12:23:4e:b1:3b:ff:62:ef:7f:84:50:06:2f:45:
         96:7f:36:f2:5a:e4:d5:22:75:d8:ac:42:23:5e:bf:8f:47:77:
         62:10:d3:8e:e0:95:da:17:25:aa:34:70:f5:3c:6f:cd:00:38:
         3b:b0:ea:e9:3a:b3:fb:a9:be:2d:23:e4:7e:0e:98:f5:62:bc:
         b9:fc:c0:11:6e:1a:9b:a6:97:4c:68:e5:18:fb:c3:e3:ff:5d:
         02:e0:be:cc:58:cb:59:4b:dc:ed:74:d5:77:a6:2c:91:15:64:
         9b:b5:60:fd:18:d8:c4:fa:b8:6b:90:a7:09:89:fd:4f:c2:88:
         26:46:c1:8e:52:e1:03:2a:67:2d:62:11:7b:61:49:2e:e1:26:
         3d:80:b8:33:46:68:fb:4f:f0:ad:a2:82:c7:49:7a:53:9b:a2:
         d3:a6:3a:1f:b8:eb:2a:bc:6c:9e:c7:c3:c6:7a:77:80:81:8e:
         e9:69:51:39:cf:cb:11:01:24:06:09:b8:c3:8e:3f:d8:4b:09:
         43:a2:e1:d2:95:8f:48:d5:29:46:b7:00:9a:4d:79:06:83:ff:
         8e:fa:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:06 2026 by rpki-client