Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft
File:                     636964CD271D2009F5B6D34255EB744F3791245D.mft (raw, json)
Hash identifier:          +v6/EoSF787cEYgNR42Z6cEHVeIJ6KeA04+XCJBiAyU=
Subject key identifier:   49:88:3C:C3:AC:7D:48:36:08:22:4F:BA:20:9A:10:F8:7B:CC:C3:75
Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D
Certificate issuer:       /CN=636964CD271D2009F5B6D34255EB744F3791245D
Certificate serial:       2E2EDCB8846ECEB2C8225382DC3E0397A18503FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft
Manifest number:          71
Signing time:             Fri 24 Jul 2026 01:51:30 +0000
Manifest this update:     Fri 24 Jul 2026 01:46:30 +0000
Manifest next update:     Sat 25 Jul 2026 01:59:30 +0000
Files and hashes:         1: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6dvxTqYXa9l0Nvb47oeD7uqupUUpey1d9KPx/TFkWZc=)
                          2: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: aWOLzIn2x5kpaR5z9FtYwftOiGecceuudPRE6v0eVaA=)
                          3: 636964CD271D2009F5B6D34255EB744F3791245D.crl (hash: A4tW5bycPmjd4tgUt9AN4NHvWC4/ql4RoSrA8JZGwS4=)
                          4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: CRlStcVLlPbgkaOXZGS+9wEQ7WP2ijdeiyB/zUIWiTs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl
                          rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2e:dc:b8:84:6e:ce:b2:c8:22:53:82:dc:3e:03:97:a1:85:03:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D
        Validity
            Not Before: Jul 24 01:46:30 2026 GMT
            Not After : Jul 25 01:59:30 2026 GMT
        Subject: CN=49883CC3AC7D483608224FBA209A10F87BCCC375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:22:0c:4b:db:53:c6:09:05:79:b4:ce:96:
                    bf:7f:6e:ad:16:81:31:d2:3c:25:58:fe:8a:a5:72:
                    85:3a:f3:39:58:1a:94:62:21:f6:54:d7:c3:5b:3c:
                    91:80:1d:85:ce:4a:7c:7e:2c:f4:c1:cb:2e:24:f4:
                    f6:63:37:e3:d1:03:71:2b:9b:e9:79:3a:6b:86:60:
                    e1:16:9e:bb:8d:7e:62:59:ad:5f:69:43:77:72:fc:
                    17:bf:6f:2a:33:fb:a9:cf:39:ac:cd:a7:2c:d6:75:
                    7f:23:83:1f:6d:2a:c2:06:47:f2:8b:3f:e3:d6:43:
                    62:07:5d:7c:6d:34:19:ba:2a:9c:a1:1d:1e:12:f1:
                    66:5f:af:53:a2:ae:bf:9d:7a:e0:96:d0:7e:89:c5:
                    51:da:c1:44:69:36:c0:02:29:98:50:a1:57:b2:3a:
                    01:ac:b0:91:93:c4:cd:c9:bb:64:69:10:11:e3:55:
                    15:3a:18:57:70:64:99:32:5a:42:17:15:ce:d5:7b:
                    a6:fc:d9:e9:e0:ad:20:f3:a7:45:1a:65:8f:62:87:
                    1a:53:44:e4:06:59:68:bb:e6:67:0e:a7:8d:48:3a:
                    44:d2:1f:93:e9:9c:76:ef:d9:c4:75:84:b7:e2:10:
                    30:f9:33:21:e2:d0:e3:1e:6a:3c:66:5f:d8:c8:19:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:88:3C:C3:AC:7D:48:36:08:22:4F:BA:20:9A:10:F8:7B:CC:C3:75
            X509v3 Authority Key Identifier:
                keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:82:69:5e:a3:32:2e:9c:5f:1b:21:90:e6:00:2f:44:d4:99:
         bf:40:a4:fb:c0:2f:48:5e:e8:6e:a0:73:ab:9c:78:ba:c1:87:
         2c:b8:42:fe:74:28:1b:bc:3a:df:3c:91:cd:ac:bf:b6:c6:34:
         3c:f8:fa:5d:c9:06:cc:fb:0c:ed:e4:9f:2a:5f:4d:30:5f:f3:
         8c:b9:7e:95:78:f9:27:42:0c:49:47:41:9f:07:41:bf:17:86:
         25:eb:62:2c:4e:e2:68:28:fa:85:44:7f:2d:0a:47:6c:47:c3:
         74:a6:35:ac:ed:4e:13:d5:2d:f8:d2:c5:32:e0:b8:a1:33:22:
         78:bb:51:f7:21:9e:54:45:aa:34:16:81:e1:08:d2:cb:2b:04:
         59:54:03:07:b1:7a:d6:5b:09:cf:ae:3a:77:90:d6:86:dd:eb:
         ae:3d:65:b8:83:95:b7:a9:37:d8:4b:94:36:d5:c7:25:e8:55:
         49:6b:2f:fe:c2:7b:78:6b:1b:ef:4e:52:20:af:00:56:be:72:
         bb:0e:ef:9c:f3:35:9c:6f:ef:cb:b7:2e:ba:65:9f:bd:4c:62:
         22:81:18:d6:c4:a9:86:3a:b8:8a:47:92:71:ec:a4:f2:99:4b:
         18:ba:f8:a6:04:8e:83:7c:72:e1:66:d0:92:7a:e9:1f:b9:ed:
         67:5f:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:33:15 2026 by rpki-client