Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft
File:                     399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json)
Hash identifier:          JPCLUDbkalHAtkUJ7Hcxpmsof8gzvIOBMGyezhxr0cc=
Subject key identifier:   C1:65:C5:9B:85:24:FC:54:E5:C5:41:00:B4:2E:98:B8:E5:97:A4:33
Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45
Certificate issuer:       /CN=399FBE55CFD957C1E3849C75FE378403E394BB45
Certificate serial:       3BDDA9D05EF31F5B97BE150E1CE3A1318010F8E4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 11:02:57 +0000
Manifest this update:     Fri 24 Jul 2026 10:57:57 +0000
Manifest next update:     Sat 25 Jul 2026 11:47:57 +0000
Files and hashes:         1: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=)
                          2: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: 131YAKpDLzEIr/gUTRLucb2MXtYWGGckvBubsWvNie8=)
                          3: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=)
                          4: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=)
                          5: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=)
                          6: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=)
                          7: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=)
                          8: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=)
                          9: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl
                          rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:dd:a9:d0:5e:f3:1f:5b:97:be:15:0e:1c:e3:a1:31:80:10:f8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45
        Validity
            Not Before: Jul 24 10:57:57 2026 GMT
            Not After : Jul 25 11:47:57 2026 GMT
        Subject: CN=C165C59B8524FC54E5C54100B42E98B8E597A433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:2f:1d:e7:0c:fa:03:ac:96:22:57:06:55:
                    ef:14:aa:99:52:31:d2:cc:e5:cf:83:93:4d:fa:b2:
                    cd:40:46:a2:a1:34:c8:32:39:8e:04:dd:d2:82:30:
                    c7:99:b1:f0:d5:8a:07:e4:9d:63:83:68:f6:8a:23:
                    51:b9:68:03:ab:bd:27:14:1d:be:9f:60:3d:85:3a:
                    07:d0:ac:b6:48:18:76:22:6d:b1:7d:7e:f8:59:a4:
                    61:a8:45:8c:6d:fa:2a:79:19:99:44:1e:61:bd:d7:
                    2c:51:5e:f2:cd:03:c4:aa:95:4f:9b:80:70:8a:fe:
                    d2:06:8d:4d:eb:ad:8a:a0:0e:40:e9:eb:78:3b:74:
                    88:71:ae:28:f1:26:45:ea:8c:1b:15:37:7b:65:33:
                    1b:09:80:8a:84:0d:02:91:4e:53:36:f3:87:67:d9:
                    cb:64:b5:da:c8:4f:e5:f2:f2:41:33:df:2d:1f:45:
                    0b:02:67:50:ca:dc:9d:73:29:8f:fd:79:31:e9:1b:
                    96:4d:86:01:da:ce:b6:65:e8:6e:1a:de:11:11:6c:
                    a5:e6:eb:ae:e5:8d:25:a0:bc:cb:64:47:e8:37:74:
                    a9:e7:52:9d:c5:3a:8f:70:fe:98:b5:ae:d8:18:e3:
                    f9:4c:64:08:1c:ba:83:96:ba:c8:0b:97:c4:ab:69:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:65:C5:9B:85:24:FC:54:E5:C5:41:00:B4:2E:98:B8:E5:97:A4:33
            X509v3 Authority Key Identifier:
                keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ad:97:99:03:d9:f1:f0:b6:ac:33:48:fb:9d:f2:ad:7f:2e:
         aa:73:86:51:99:a0:7b:57:a0:23:fc:0f:ea:e1:a0:03:5f:e7:
         9e:55:4b:9e:f2:d1:87:61:e5:4f:fa:55:dc:43:75:ba:de:9f:
         95:45:2d:7f:ab:a2:37:2c:18:a6:7b:02:e3:50:e9:b3:56:70:
         6a:2d:e3:ab:8c:6a:d7:21:af:19:a0:53:4a:66:7b:70:33:02:
         75:68:1c:5a:4d:80:59:31:94:48:47:59:a5:01:a3:a7:90:e8:
         f4:43:24:4d:e1:b7:f7:8b:6e:43:8a:43:68:65:62:9a:f9:e6:
         b4:af:80:1b:db:78:98:4b:e3:95:d7:d3:52:fc:7a:94:c8:99:
         dd:2a:f7:fc:f5:fa:f1:ee:33:c3:13:98:2e:a5:60:51:fb:80:
         f9:46:a2:05:e5:b9:ad:19:ab:07:02:ea:cb:ea:86:48:7b:91:
         20:9b:63:ec:ec:48:33:58:d2:7a:52:36:79:e3:c9:88:c9:e2:
         d0:c7:33:f9:44:f4:1a:23:2d:ca:5a:c1:71:b2:10:6a:91:9c:
         54:04:41:0e:69:a0:30:6a:0b:b1:2a:4c:89:2a:e6:47:86:bd:
         43:22:e7:2e:8f:86:81:e7:cd:b6:1c:20:7b:bd:55:1e:cb:3b:
         be:3c:d7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:00 2026 by rpki-client