Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
File:                     21A1AF13820FECAAC871E77BA706DF913EB6445B.mft (raw, json)
Hash identifier:          y725B1LiJGW+eSb1kv8tz+5uJLbewZeqvVnYkSjKpeo=
Subject key identifier:   56:21:6C:EF:52:4D:4D:33:1F:23:5F:14:FF:BA:3F:2F:81:44:03:3E
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Certificate issuer:       /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial:       2C9F0CD8BECFFFB48ADCF1E67D4F8BF0C264D79D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 04:30:03 +0000
Manifest this update:     Fri 24 Jul 2026 04:25:03 +0000
Manifest next update:     Sat 25 Jul 2026 05:37:03 +0000
Files and hashes:         1: 3131372e3130332e3136392e302f32342d3234203d3e203338353036.roa (hash: Qsox6Kk8HDAVX4i7l03Jcd/WQfiFj+fjIs0gKfLPuTs=)
                          2: 3131372e3130332e3136382e302f32342d3234203d3e203338353036.roa (hash: IO0McpeC2FL/ajQVQIUE0qxjX/PjKIYnF4WZgpoSO2c=)
                          3: 3131372e3130332e3137332e302f32342d3234203d3e203338353036.roa (hash: 0i4nPEoFpr/GYJfY8pvJCgkOX4n2QXrgXEG0nHDCCVk=)
                          4: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=)
                          5: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: PgXL6WDq3i8tznZRJPtlrc9sUxZ4kDtxFC0zL6N0xy0=)
                          6: 3131372e3130332e3137342e302f32342d3234203d3e203338353036.roa (hash: Xb7tiVBBwDbndWohe+iUIm7HMsvAfNFXDENhjOs+mYM=)
                          7: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: +B+NXFwpJtjGtTnF1GyFtKLKPu8WJ7QAXciSbEM5uxA=)
                          8: 3131372e3130332e3137352e302f32342d3234203d3e203338353036.roa (hash: xIUHUChqB6aJdSrOTOIOFQ5CTnnCUv7tS0HA4Ae8KIE=)
                          9: 3131372e3130332e3137302e302f32342d3234203d3e203338353036.roa (hash: sUfhjuCfR1bqJMgvzr7mWjRLO1nuckRuTj3jz6hr/A4=)
                          10: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: ynDJbl5QheJ1es5AfYiOzo7k58LFt+WF0Rj8WpNbQVc=)
                          11: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: obEji41Yjv7XtQObdOqeAvtg0UoecMjHZAoq9W75bp8=)
                          12: 3131372e3130332e3137322e302f32342d3234203d3e203338353036.roa (hash: FE1sTTsqKrtuLPqfAQchwB+jO4XN69uM26+KGEYAKWY=)
                          13: 21A1AF13820FECAAC871E77BA706DF913EB6445B.crl (hash: zuwIXFyUNB2EuR4jY7vWCGHlAmKIpmNaI1jB/4Qt3ho=)
                          14: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: RruqxfOTIl8DRkIq4RhuxCTTKvG0knkItx9zgkPDzPw=)
                          15: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=)
                          16: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: ASD+4k8v/sRyf5EDN4cIOztZDYftQd9NRqTsgRzQzqk=)
                          17: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=)
                          18: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: 1opYdU0q7geBr7kwCmT3Jrk84/C5Dr6ouedrI3HC7JE=)
                          19: 3131372e3130332e3137312e302f32342d3234203d3e203338353036.roa (hash: XZlD8l7T5G9t+cHIAR+1PIe8LedIntTnzcBzapuPT88=)
                          20: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: 4j6hlYNmDWL6STxcmNLJzK33rXVdOWRVZ9jzrMGheb0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
                          rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9f:0c:d8:be:cf:ff:b4:8a:dc:f1:e6:7d:4f:8b:f0:c2:64:d7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
        Validity
            Not Before: Jul 24 04:25:03 2026 GMT
            Not After : Jul 25 05:37:03 2026 GMT
        Subject: CN=56216CEF524D4D331F235F14FFBA3F2F8144033E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:d7:8b:c5:5b:43:b2:e0:04:98:16:5d:80:
                    2b:5b:83:4a:ba:04:c9:ff:36:02:1a:ff:1f:67:e0:
                    a6:19:d7:b4:bf:82:2d:bc:54:6d:06:ce:dc:e9:00:
                    99:1d:81:dc:09:b2:dd:a2:4f:cd:50:3f:94:ef:24:
                    48:bb:f4:2a:68:25:21:fd:51:46:2e:57:29:bc:32:
                    35:96:c1:5a:61:6d:18:04:7d:c1:92:63:92:6a:8a:
                    9f:9f:5f:61:90:c2:58:81:fb:9a:7d:cb:e3:92:1e:
                    1f:f1:36:5e:cd:11:81:9c:b5:48:76:5a:00:1d:ce:
                    14:02:c3:8a:0d:75:e1:28:f3:04:d8:30:cd:14:1e:
                    dc:d5:c6:25:e5:7a:64:d5:dd:ee:94:38:b2:59:55:
                    90:29:32:92:46:e0:67:09:9b:cb:ba:27:ef:5b:47:
                    5f:28:93:a2:b6:d0:7e:78:35:f1:49:de:d6:48:b4:
                    d7:0b:2a:01:20:25:41:8a:85:ab:46:30:8e:a3:cd:
                    70:53:04:0b:12:52:8f:22:c4:13:b9:5f:f7:61:35:
                    ae:a4:bd:2d:f6:a9:81:3a:83:3f:78:c4:57:51:00:
                    ae:35:d2:a8:d3:51:64:a3:9f:cb:91:7d:c6:f4:b3:
                    0f:b4:5f:0e:0f:22:28:84:6c:ae:f3:99:4a:50:8f:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:6C:EF:52:4D:4D:33:1F:23:5F:14:FF:BA:3F:2F:81:44:03:3E
            X509v3 Authority Key Identifier:
                keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:01:71:95:b4:2e:9c:a3:72:7d:b8:88:dc:7f:f0:e2:77:82:
         2c:35:3d:68:55:ca:12:9c:c7:f6:c3:35:01:2f:ca:0b:4c:d8:
         a8:7a:0e:58:06:2d:de:4a:57:ac:16:cd:d7:99:6b:78:af:fc:
         33:d4:80:56:97:84:83:fa:92:d4:03:8a:33:cb:05:e5:80:0c:
         93:c8:b6:62:ae:88:f8:2c:91:d4:64:86:76:5e:de:2d:2c:73:
         56:40:62:a5:b8:26:db:b6:7d:54:3c:a9:93:09:ea:9f:a1:c8:
         7e:63:46:5e:b5:50:0a:d5:83:06:a6:da:f3:15:1d:09:ca:e0:
         c9:8e:32:fb:e6:00:34:f3:f5:e6:e7:4e:b6:be:ed:ac:8e:b4:
         42:d6:ce:e5:8e:7f:55:fc:1b:d0:b9:20:46:c5:76:f2:18:2b:
         ca:04:2a:ed:1b:a7:de:64:72:a2:4b:3a:ed:a2:4b:6f:f8:64:
         7e:e6:20:25:2f:de:59:a4:f5:fd:d2:0e:08:3e:ce:a5:09:e2:
         f7:60:36:5e:70:ab:37:d6:2a:77:6e:fb:e0:82:ed:cc:e6:2c:
         8c:39:d3:c5:e2:ea:a0:25:b3:f8:8f:1c:8f:32:82:22:69:73:
         e0:ef:a2:60:bb:12:2a:88:31:27:ed:2d:7f:bb:6b:b8:37:6a:
         94:40:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:34:21 2026 by rpki-client