Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft
File:                     C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json)
Hash identifier:          j0PwbAL9gZ3nKHG8KWyqsiwExcO7lVFgdQOT8a3C3/M=
Subject key identifier:   1C:6D:20:57:6F:11:DE:23:A7:EB:0E:46:BD:9A:E8:39:06:8F:5C:66
Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C
Certificate issuer:       /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C
Certificate serial:       6C99358AE958C2690890FACC6EF5C71EF7436546
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 13:31:38 +0000
Manifest this update:     Thu 23 Jul 2026 13:26:38 +0000
Manifest next update:     Fri 24 Jul 2026 15:46:38 +0000
Files and hashes:         1: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=)
                          2: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: 7FCU7wlLr/cO50b2UCmvPGlndFmwwAg0TPro2n90e9U=)
                          3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=)
                          4: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl
                          rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 15:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:99:35:8a:e9:58:c2:69:08:90:fa:cc:6e:f5:c7:1e:f7:43:65:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C
        Validity
            Not Before: Jul 23 13:26:38 2026 GMT
            Not After : Jul 24 15:46:38 2026 GMT
        Subject: CN=1C6D20576F11DE23A7EB0E46BD9AE839068F5C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:a4:34:a8:c1:52:99:aa:52:0b:17:e2:97:
                    5d:d9:24:dd:4c:a4:da:a5:af:77:b1:46:bc:26:38:
                    4c:59:e7:68:47:46:8a:11:45:28:bd:e2:7e:a4:c0:
                    71:b1:17:c4:f7:6c:5b:3f:31:1f:a4:82:0b:cd:ec:
                    df:a8:ff:85:0b:73:a5:45:5e:d9:2c:03:77:1f:9b:
                    6e:a8:0f:53:e4:d7:51:33:b0:d5:19:21:da:90:f3:
                    c7:e5:98:67:3d:3a:08:95:3c:39:08:d9:15:1c:5f:
                    cd:fa:66:1e:c3:c7:19:ba:bf:53:85:11:c8:94:e7:
                    72:7c:d7:09:43:44:78:a9:33:1a:92:ba:97:cd:9f:
                    62:f8:b7:47:48:a1:b3:89:ed:91:e9:7a:d9:fb:54:
                    69:41:2c:75:66:a8:f4:65:2f:26:8f:5e:ec:64:2d:
                    7d:99:61:9d:8f:0c:4f:fd:d3:4b:5e:53:a0:1e:3f:
                    70:bf:d4:91:0d:92:a4:38:a1:57:8f:dd:73:92:45:
                    55:27:ec:f0:c0:e0:3e:b3:56:70:4f:75:a5:fd:49:
                    9c:27:71:eb:b7:58:04:a7:f0:0a:c3:df:7a:51:5a:
                    d5:74:4f:d8:e9:06:37:a4:f5:6e:46:24:2b:5d:d4:
                    74:be:b6:c6:ec:68:e0:af:12:6d:c8:af:b9:07:46:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:20:57:6F:11:DE:23:A7:EB:0E:46:BD:9A:E8:39:06:8F:5C:66
            X509v3 Authority Key Identifier:
                keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7e:f1:3e:fb:d6:ed:ac:bc:0c:65:10:a1:0c:fc:cd:34:e8:
         94:e1:26:a0:ad:fd:00:fb:d0:52:cb:a8:14:dd:88:e9:b7:0e:
         44:96:23:98:d1:6e:54:09:d7:36:b1:ff:2d:c0:53:e9:ac:11:
         5d:1a:c4:b2:83:55:70:c9:69:ba:95:a1:93:1d:72:5d:e6:49:
         98:cb:e0:c9:f4:cd:26:fa:6d:c2:30:f7:bb:2b:e0:a1:ee:eb:
         84:d5:7e:50:4e:fe:f3:ef:8d:d0:c1:f2:a9:b2:4f:e3:7a:68:
         6f:07:b6:1f:a3:11:9b:bd:95:2b:04:4d:ab:60:ca:7a:a0:ac:
         51:3e:99:74:51:d3:bd:99:2f:53:ea:46:60:c0:a6:23:f5:6d:
         49:13:87:15:0d:35:a7:76:af:48:52:ed:c9:41:f2:b7:fc:86:
         7e:95:0a:ff:82:cc:96:10:17:d6:e6:b2:55:4d:26:df:9c:a0:
         8c:d7:86:ff:59:6b:6e:58:45:5c:13:7a:dd:f3:e5:20:41:74:
         f5:ab:c5:e3:1a:bd:54:b1:32:ad:ac:a1:75:5c:27:55:c4:ad:
         3e:b5:15:ea:6e:14:01:bb:13:e9:b4:68:b1:f5:47:8a:24:e3:
         f0:2a:30:61:e5:00:cf:11:b0:7b:b4:37:4b:57:85:3a:ca:9b:
         4b:01:b4:66
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbJk1iulYwmkIkPrMbvXHHvdDZUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzRE
MEEwNTI2QzAeFw0yNjA3MjMxMzI2MzhaFw0yNjA3MjQxNTQ2MzhaMDMxMTAvBgNV
BAMTKDFDNkQyMDU3NkYxMURFMjNBN0VCMEU0NkJEOUFFODM5MDY4RjVDNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf6qQ0qMFSmapSCxfil13ZJN1M
pNqlr3exRrwmOExZ52hHRooRRSi94n6kwHGxF8T3bFs/MR+kggvN7N+o/4ULc6VF
XtksA3cfm26oD1Pk11EzsNUZIdqQ88flmGc9OgiVPDkI2RUcX836Zh7Dxxm6v1OF
EciU53J81wlDRHipMxqSupfNn2L4t0dIobOJ7ZHpetn7VGlBLHVmqPRlLyaPXuxk
LX2ZYZ2PDE/900teU6AeP3C/1JENkqQ4oVeP3XOSRVUn7PDA4D6zVnBPdaX9SZwn
ceu3WASn8ArD33pRWtV0T9jpBjek9W5GJCtd1HS+tsbsaOCvEm3Ir7kHRpPLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHG0gV28R3iOn6w5GvZroOQaPXGYwHwYDVR0j
BBgwFoAUwEM8/C4GSnf9yze0nCyTxNCgUmwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjRjZjYzMmQtZDYxYS00ODI2LWI1NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMy
RTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzREMEEwNTI2Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMDQzM0NGQzJFMDY0QTc3RkRDQjM3QjQ5QzJDOTNDNEQwQTA1
MjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1
NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkz
QzREMEEwNTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABV+8T771u2svAxlEKEM/M006JThJqCt/QD7
0FLLqBTdiOm3DkSWI5jRblQJ1zax/y3AU+msEV0axLKDVXDJabqVoZMdcl3mSZjL
4Mn0zSb6bcIw97sr4KHu64TVflBO/vPvjdDB8qmyT+N6aG8Hth+jEZu9lSsETatg
ynqgrFE+mXRR072ZL1PqRmDApiP1bUkThxUNNad2r0hS7clB8rf8hn6VCv+CzJYQ
F9bmslVNJt+coIzXhv9Za25YRVwTet3z5SBBdPWrxeMavVSxMq2soXVcJ1XErT61
FepuFAG7E+m0aLH1R4ok4/AqMGHlAM8RsHu0N0tXhTrKm0sBtGY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:14 2026 by rpki-client