Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
File:                     494BBF61A7ADCFAD78873BA2370358D4C942405D.mft (raw, json)
Hash identifier:          j6gmKLN8sDcvr36zBBZhNwm2DBbaqNIiRxAwVtzmqz8=
Subject key identifier:   AE:0C:1C:02:6C:9A:F8:88:52:59:A3:A9:B1:F5:1D:54:F6:74:19:8D
Authority key identifier: 49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D
Certificate issuer:       /CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
Certificate serial:       40521A3C19AB536A4C678C6A7CCE3A0FD5C1A3FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 00:44:58 +0000
Manifest this update:     Fri 24 Jul 2026 00:39:58 +0000
Manifest next update:     Sat 25 Jul 2026 01:13:58 +0000
Files and hashes:         1: 494BBF61A7ADCFAD78873BA2370358D4C942405D.crl (hash: /QKxENn5pGj1TcBktzWNNghc1Wt/kig8XR4Dn/Xug0g=)
                          2: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: Ckq81tABd9P/ltS1UN2BW7llZjF9ry0atyKHbIk0sEg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:52:1a:3c:19:ab:53:6a:4c:67:8c:6a:7c:ce:3a:0f:d5:c1:a3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
        Validity
            Not Before: Jul 24 00:39:58 2026 GMT
            Not After : Jul 25 01:13:58 2026 GMT
        Subject: CN=AE0C1C026C9AF8885259A3A9B1F51D54F674198D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:0b:ec:bb:b9:e6:e3:a7:78:56:b4:c1:cc:
                    c9:0b:d8:68:14:c4:13:4c:f3:f8:b9:bc:3e:9d:08:
                    3c:de:f4:10:32:e9:2a:60:d9:8f:80:a0:56:cd:79:
                    24:88:ed:94:d4:59:8b:e6:e6:fa:88:94:97:fd:8a:
                    27:de:04:e4:c2:1d:d2:fb:f0:38:d7:ee:44:dc:db:
                    1a:a7:77:31:f8:93:ca:80:78:e1:96:d4:c3:8f:b1:
                    58:55:57:4e:6f:e9:b3:9b:0d:9c:73:55:92:ef:b5:
                    8e:b5:f8:cf:6b:bc:bc:ae:dc:4b:ea:f1:f1:bf:e5:
                    03:6c:c1:aa:48:0a:2c:a9:30:21:06:16:cf:c8:f3:
                    21:fb:c5:d5:81:db:80:82:a5:b1:4b:99:51:6f:d9:
                    59:c4:fa:81:f4:f8:f4:d5:13:e9:c6:70:d3:98:f5:
                    d7:65:08:e5:82:67:d5:41:31:2b:8d:56:4f:3e:e9:
                    5d:62:a9:14:7c:96:8d:8c:8f:47:96:cb:36:62:46:
                    a4:60:f3:c4:ff:94:eb:c6:90:02:6c:0d:ed:af:4c:
                    18:33:29:9d:a2:78:1d:48:d7:8a:b6:df:9c:d5:7c:
                    2f:21:24:d2:7b:a8:ad:2b:25:d3:01:2c:ac:62:7e:
                    d3:d4:a9:84:a6:92:aa:0d:4c:90:04:d1:25:7e:6f:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0C:1C:02:6C:9A:F8:88:52:59:A3:A9:B1:F5:1D:54:F6:74:19:8D
            X509v3 Authority Key Identifier:
                keyid:49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3b:c4:5e:0b:c0:7a:77:51:64:a3:26:d3:25:03:8d:f6:68:
         d7:81:62:3f:9e:5e:ad:30:e4:18:56:37:c3:cc:4f:d7:86:67:
         33:49:fc:c8:07:15:c6:ea:a3:46:95:77:fc:cc:95:b4:6e:45:
         b8:a1:24:fe:c4:c7:ea:bf:c4:02:60:fb:c7:e0:14:7c:0d:83:
         6c:7c:01:2f:49:57:1f:44:fe:50:a8:70:1d:f8:f5:4b:c4:82:
         30:08:a6:46:66:50:4e:ad:10:b4:2e:7f:f8:b1:99:8c:d3:03:
         1e:57:99:35:be:8f:0f:c7:9c:d9:3f:1f:ed:9b:01:20:79:f6:
         ce:19:24:6e:ec:b7:bc:78:ac:6d:24:7c:7c:ac:15:12:60:09:
         75:fd:b5:c6:26:cd:8c:be:ae:7f:f0:37:bc:7d:5e:8e:4d:41:
         69:00:e5:aa:4d:3d:0d:5f:b8:5c:a7:f8:62:ef:29:55:75:03:
         09:82:1a:8d:3d:06:bc:21:5c:ba:23:c8:63:5a:61:35:22:12:
         ad:b0:1e:1d:e5:4e:86:77:31:e0:5e:54:c7:cf:e4:27:e9:7f:
         0d:b4:1e:56:f1:bf:a9:40:17:24:59:8c:fb:ae:22:31:d4:24:
         bb:90:9c:81:ca:63:e4:94:aa:06:31:bb:90:77:a5:5d:da:04:
         be:6e:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:15 2026 by rpki-client