Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
File:                     63C9C3AAF95A607F8365E51C375621EF611B029E.mft (raw, json)
Hash identifier:          D5ZgpfqpCvF9+NDK7L+X8rtw7MN25xCCDhre2o3qj2w=
Subject key identifier:   3B:69:FE:2E:9B:F7:97:67:4A:D5:B5:54:73:2F:84:DF:FB:9D:9E:08
Authority key identifier: 63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
Certificate issuer:       /CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Certificate serial:       3533955D281BC1B11BDFB534DF13DB741AF1AC01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 06:06:52 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:52 +0000
Manifest next update:     Sat 25 Jul 2026 08:10:52 +0000
Files and hashes:         1: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: Gj72PKyTW4uThzHAv98WsY3O2r0uo97/yFBA+Iq7xgw=)
                          2: 63C9C3AAF95A607F8365E51C375621EF611B029E.crl (hash: S4bA3wbHFA71Fft4TdgKIKrgztRwyl/jj+4TVL3SGqQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
                          rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:33:95:5d:28:1b:c1:b1:1b:df:b5:34:df:13:db:74:1a:f1:ac:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C9C3AAF95A607F8365E51C375621EF611B029E
        Validity
            Not Before: Jul 24 06:01:52 2026 GMT
            Not After : Jul 25 08:10:52 2026 GMT
        Subject: CN=3B69FE2E9BF797674AD5B554732F84DFFB9D9E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:90:a9:29:43:bb:fd:d2:a0:dd:74:57:28:
                    92:e0:ca:04:b1:2c:26:42:7a:5a:3b:96:6a:44:f2:
                    a6:e4:6b:87:43:b6:eb:4f:80:0a:a9:f3:a4:9d:ef:
                    ca:04:04:48:6d:cc:fd:71:71:f3:e0:fa:8f:ba:0e:
                    0c:9f:5d:97:c0:15:04:62:e3:53:32:49:f8:18:18:
                    23:91:f5:a6:6b:4f:cd:40:28:c8:9c:2a:96:95:b5:
                    10:83:03:18:74:a9:bd:d7:ff:0e:41:8a:10:83:4a:
                    6b:8f:7f:15:29:f5:e5:17:18:06:e0:ae:83:b4:52:
                    26:1f:16:cf:d5:bf:94:08:43:54:c9:da:7c:ca:65:
                    b5:22:01:f7:71:dd:50:21:9c:43:d1:33:20:77:26:
                    c7:67:83:29:8f:25:8f:96:51:73:90:29:0f:26:91:
                    9a:cf:68:08:c9:76:16:b6:7f:49:43:ec:8a:c4:f9:
                    e2:3b:87:9e:15:fe:85:53:2e:eb:8c:47:8a:ff:54:
                    34:e0:6b:be:c8:82:d4:04:03:80:c8:b4:7b:2c:2a:
                    d4:72:38:5a:e9:e5:f0:c8:9e:52:fc:c2:9b:9e:b3:
                    23:58:f6:5e:82:d3:46:f5:90:75:c7:fc:4a:5b:72:
                    d5:ff:6d:6d:43:74:df:4e:38:b6:a5:2e:6a:8a:a1:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:69:FE:2E:9B:F7:97:67:4A:D5:B5:54:73:2F:84:DF:FB:9D:9E:08
            X509v3 Authority Key Identifier:
                keyid:63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:75:7e:87:dc:b8:54:7d:51:45:3e:d3:cf:3f:39:d4:7b:55:
         7d:1c:64:2b:f8:97:a9:06:ad:8d:fd:66:e4:56:02:42:fc:be:
         d4:b4:f8:83:b9:ef:63:b0:98:ae:bf:14:80:50:77:7a:cf:6d:
         8a:fa:83:77:f4:14:09:1d:45:4d:07:a4:9a:af:2f:c1:c9:a1:
         24:58:b6:36:9f:9d:bf:04:8d:c9:23:86:d8:58:57:3d:d1:eb:
         0c:ce:cc:40:1d:42:a1:7b:c7:73:76:8c:c9:91:96:0a:28:a8:
         d3:84:5b:0d:2b:14:ac:c6:2c:01:99:40:ee:bb:2b:43:47:77:
         68:45:ec:b0:1a:e4:25:78:f0:dd:94:5f:25:6b:64:15:bd:7f:
         1c:40:22:ad:e9:8b:22:bc:10:e4:65:25:eb:a7:3e:b7:fe:c4:
         ec:66:11:76:4b:b0:81:7e:8b:36:fb:6a:cc:81:0a:a2:11:55:
         9e:94:80:b8:ed:e6:4f:e8:0c:3e:c8:41:09:05:56:87:aa:15:
         2d:b1:af:3f:80:11:31:43:62:6f:0f:56:43:35:22:33:9f:db:
         47:b7:cc:57:d6:7f:ab:1d:a4:0a:b5:26:d3:ff:89:c3:9e:49:
         c6:5e:66:55:6d:de:0f:2f:74:55:d2:cf:0d:cc:34:e0:23:ab:
         a5:14:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:38 2026 by rpki-client