Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft
File:                     9F018573ABC40A1244EF018EE95D73D8E54A5247.mft (raw, json)
Hash identifier:          06rBIgftYe3zHXPqOsZydFi7mAEe+u1iqG3Hi7lZB/E=
Subject key identifier:   D5:66:4B:91:52:30:D4:92:E6:26:8C:80:A4:1F:55:97:C1:71:58:A6
Authority key identifier: 9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47
Certificate issuer:       /CN=9F018573ABC40A1244EF018EE95D73D8E54A5247
Certificate serial:       1C96D5345A38C7AF856B7B3E261512718EAF2164
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 10:22:45 +0000
Manifest this update:     Thu 23 Jul 2026 10:17:45 +0000
Manifest next update:     Fri 24 Jul 2026 12:28:45 +0000
Files and hashes:         1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: On7lPgtr4muQ2OAv+z91B4cwc8QzzKQys3kXiufzPRc=)
                          2: 9F018573ABC40A1244EF018EE95D73D8E54A5247.crl (hash: BG5aMZUjTUMOvbUUoTFzyWKHUujAFHRoNf90okCiQiI=)
                          3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: 5rI4L+b8xzlRIUsWxeEF2NdCqFStv1SMLdpn9443Ve4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl
                          rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 12:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:96:d5:34:5a:38:c7:af:85:6b:7b:3e:26:15:12:71:8e:af:21:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F018573ABC40A1244EF018EE95D73D8E54A5247
        Validity
            Not Before: Jul 23 10:17:45 2026 GMT
            Not After : Jul 24 12:28:45 2026 GMT
        Subject: CN=D5664B915230D492E6268C80A41F5597C17158A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:5c:de:1c:c6:03:bd:e2:1f:f5:2d:3a:a7:
                    1a:3a:13:8e:2f:09:1b:ac:ee:5a:29:90:4a:d1:6b:
                    d5:e6:e0:e6:80:17:9c:56:8d:55:9d:3e:86:80:1b:
                    30:54:4f:e0:4d:16:81:3d:32:0e:c5:82:fe:19:6d:
                    74:e3:60:d7:72:96:c7:01:5b:63:63:0f:fa:91:26:
                    1a:85:1f:0a:27:7a:a7:80:4f:4c:1f:4f:75:b9:c9:
                    5b:01:e9:7f:9e:61:52:d5:9e:f8:00:8a:26:0d:50:
                    71:07:e2:2d:14:e5:1e:a0:27:6b:84:62:11:67:dc:
                    39:79:80:fc:ce:d1:cf:8e:29:42:75:b7:6d:7a:7e:
                    2e:53:13:f0:68:a1:a1:d1:56:b9:0b:b6:6e:5d:be:
                    04:3d:17:c4:fc:5a:de:ac:12:06:4f:b0:a4:7a:bb:
                    6b:e6:35:7e:78:5b:28:01:4d:cd:50:ea:fc:a7:86:
                    46:80:a2:c1:f7:cd:2c:7d:5e:7c:ee:10:e5:e7:42:
                    e2:e7:b4:d6:6c:dc:22:9c:d1:b0:61:08:ed:28:e9:
                    cb:76:47:a2:f4:a1:4f:4a:8e:de:e1:a3:26:f3:f9:
                    f7:bd:47:2e:b1:b4:60:e2:f8:f9:08:5a:7f:bd:a6:
                    e6:da:d0:40:23:52:5a:83:1e:2f:d7:0e:5d:25:85:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:66:4B:91:52:30:D4:92:E6:26:8C:80:A4:1F:55:97:C1:71:58:A6
            X509v3 Authority Key Identifier:
                keyid:9F:01:85:73:AB:C4:0A:12:44:EF:01:8E:E9:5D:73:D8:E5:4A:52:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F018573ABC40A1244EF018EE95D73D8E54A5247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/9F018573ABC40A1244EF018EE95D73D8E54A5247.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:09:db:d1:a3:b6:34:e2:04:c4:70:01:46:c5:70:d5:39:dc:
         74:c9:82:d6:18:33:be:84:19:f8:e1:10:b5:7e:dd:bb:db:1a:
         b2:7b:5a:6c:1d:83:fb:87:c0:3a:32:8a:79:bc:d6:03:4c:b3:
         f0:b4:0e:88:b2:4d:57:6f:78:b0:39:cb:54:be:02:47:02:32:
         f2:86:9b:35:f1:0c:63:ff:4c:48:be:10:8a:cd:fe:11:6c:9c:
         2f:8a:02:94:72:51:d1:94:fe:e5:b9:dc:84:dc:31:b5:72:18:
         fd:7c:3d:8f:81:34:00:48:6c:10:6e:be:98:1e:14:7b:80:d7:
         ad:c0:1a:62:e3:a1:1a:0f:3a:80:3f:16:2a:15:f2:80:48:03:
         77:d4:59:8e:f4:94:60:e8:f2:f9:2c:9a:61:ed:05:d9:ad:0d:
         d7:a3:f1:5a:08:05:62:5d:4f:e3:95:f7:80:65:58:c6:94:35:
         6b:6d:a8:bc:77:bf:50:b1:97:4e:03:d1:12:e6:31:be:31:ce:
         c8:3f:95:c9:f3:2f:0e:f4:34:96:db:6e:de:92:d6:dc:fb:22:
         06:bf:0a:d5:5d:87:3d:5c:3d:01:fc:44:60:e3:8f:dc:5f:35:
         5d:cf:8d:b2:8d:df:5a:26:6a:28:fb:36:65:a2:c3:93:74:46:
         92:2c:10:da
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHJbVNFo4x6+Fa3s+JhUScY6vIWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDczRDhF
NTRBNTI0NzAeFw0yNjA3MjMxMDE3NDVaFw0yNjA3MjQxMjI4NDVaMDMxMTAvBgNV
BAMTKEQ1NjY0QjkxNTIzMEQ0OTJFNjI2OEM4MEE0MUY1NTk3QzE3MTU4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6A1zeHMYDveIf9S06pxo6E44v
CRus7lopkErRa9Xm4OaAF5xWjVWdPoaAGzBUT+BNFoE9Mg7Fgv4ZbXTjYNdylscB
W2NjD/qRJhqFHwoneqeAT0wfT3W5yVsB6X+eYVLVnvgAiiYNUHEH4i0U5R6gJ2uE
YhFn3Dl5gPzO0c+OKUJ1t216fi5TE/BooaHRVrkLtm5dvgQ9F8T8Wt6sEgZPsKR6
u2vmNX54WygBTc1Q6vynhkaAosH3zSx9XnzuEOXnQuLntNZs3CKc0bBhCO0o6ct2
R6L0oU9Kjt7hoybz+fe9Ry6xtGDi+PkIWn+9puba0EAjUlqDHi/XDl0lhX25AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1WZLkVIw1JLmJoyApB9Vl8FxWKYwHwYDVR0j
BBgwFoAUnwGFc6vEChJE7wGO6V1z2OVKUkcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTNmNzVlOTgtMTRlZi00NDU3LTk0ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNB
QkM0MEExMjQ0RUYwMThFRTk1RDczRDhFNTRBNTI0Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85RjAxODU3M0FCQzQwQTEyNDRFRjAxOEVFOTVENzNEOEU1NEE1
MjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0
ZjMtZTViNzNhOTIyZmM1LzAvOUYwMTg1NzNBQkM0MEExMjQ0RUYwMThFRTk1RDcz
RDhFNTRBNTI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACUJ29GjtjTiBMRwAUbFcNU53HTJgtYYM76E
GfjhELV+3bvbGrJ7Wmwdg/uHwDoyinm81gNMs/C0DoiyTVdveLA5y1S+AkcCMvKG
mzXxDGP/TEi+EIrN/hFsnC+KApRyUdGU/uW53ITcMbVyGP18PY+BNABIbBBuvpge
FHuA163AGmLjoRoPOoA/FioV8oBIA3fUWY70lGDo8vksmmHtBdmtDdej8VoIBWJd
T+OV94BlWMaUNWttqLx3v1Cxl04D0RLmMb4xzsg/lcnzLw70NJbbbt6S1tz7Iga/
CtVdhz1cPQH8RGDjj9xfNV3PjbKN31omaij7NmWiw5N0RpIsENo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:37 2026 by rpki-client