Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
File:                     04D52083D82721F61634E6629E16C7C7A870B9F5.mft (raw, json)
Hash identifier:          pb5Gbsy4PMDOYG5K5lQcWboqDLNkkPjWBqJgLmbw/IQ=
Subject key identifier:   87:D7:35:94:40:27:E8:2C:AB:D4:D0:A0:78:1A:E9:B5:42:EC:60:A4
Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
Certificate issuer:       /CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Certificate serial:       075D7EEB69D1BE07CC1BEB9A96E32657F00E8CD5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 02:37:30 +0000
Manifest this update:     Fri 24 Jul 2026 02:32:30 +0000
Manifest next update:     Sat 25 Jul 2026 05:44:30 +0000
Files and hashes:         1: 04D52083D82721F61634E6629E16C7C7A870B9F5.crl (hash: j+mzMkNFosnpp121qZOhI5lKxGe8jT1sSV0zKLukPcY=)
                          2: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=)
                          3: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
                          rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 05:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5d:7e:eb:69:d1:be:07:cc:1b:eb:9a:96:e3:26:57:f0:0e:8c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5
        Validity
            Not Before: Jul 24 02:32:30 2026 GMT
            Not After : Jul 25 05:44:30 2026 GMT
        Subject: CN=87D735944027E82CABD4D0A0781AE9B542EC60A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:f3:3c:bc:03:e0:25:08:4e:92:db:46:79:
                    44:0d:dd:34:fa:9c:d3:e6:88:a5:2e:ba:36:e4:c8:
                    6b:1f:ce:53:25:96:90:9b:e3:94:73:26:6a:42:73:
                    c8:69:17:35:6f:41:bb:c8:a2:a4:d3:e4:44:c4:f1:
                    fa:22:b2:07:4a:e8:1e:e2:f7:99:d5:74:63:67:06:
                    ca:72:de:32:28:c7:00:0b:aa:8f:3c:02:23:27:ef:
                    66:13:f3:44:eb:ed:45:63:6b:32:52:67:3e:1a:1c:
                    37:be:e7:e7:80:ce:6f:74:85:18:62:61:68:2e:98:
                    b7:89:9b:00:99:d7:52:df:01:cc:d4:93:a2:eb:85:
                    a4:48:31:e7:5e:d5:69:f9:aa:a2:f2:2d:6e:df:c1:
                    11:18:9a:e6:e9:46:f4:21:f3:d5:a2:10:c6:60:73:
                    65:db:bd:c6:ab:d6:00:0b:23:3a:03:b5:c5:1a:17:
                    5c:d0:0a:15:55:93:3f:ad:65:f1:43:20:a3:59:39:
                    e0:64:67:42:e5:b8:ea:17:ba:d3:ff:29:8e:62:14:
                    da:12:94:6b:e4:52:c6:86:87:66:5c:0c:6f:9a:bb:
                    16:00:46:6a:49:72:db:36:1c:b7:50:d2:56:68:34:
                    fa:e2:31:81:8b:2d:5c:6b:3e:a1:7c:cb:c4:23:fd:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D7:35:94:40:27:E8:2C:AB:D4:D0:A0:78:1A:E9:B5:42:EC:60:A4
            X509v3 Authority Key Identifier:
                keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:ae:82:7d:76:ca:33:d9:59:26:78:07:32:79:0f:04:47:
         f5:d2:d1:2f:f4:b6:bf:72:62:e9:5b:40:12:89:41:77:5b:98:
         cf:17:88:7d:ec:20:2e:ab:5b:23:c0:36:16:d3:a2:b3:ed:b8:
         9b:76:ba:36:f6:af:12:6b:4d:fb:9f:99:e3:98:f0:d3:92:de:
         1a:5a:46:b4:2f:5f:f2:9c:da:ba:1c:d3:5d:fb:0d:5c:09:2e:
         80:75:45:b6:e1:10:a4:dc:3b:d4:2d:c7:d0:ee:87:11:e6:9a:
         a2:b3:8e:ae:22:57:a8:43:44:80:0a:37:2a:f4:6d:89:b2:14:
         09:ff:06:35:02:92:5a:db:24:d3:6e:72:ff:1f:43:c0:31:0f:
         90:35:45:f5:e0:7d:0f:3a:a1:b5:35:b8:f9:bc:5c:e8:10:30:
         3c:b5:3f:ac:3f:06:d3:1b:8d:9c:ed:d9:b1:db:55:f8:8c:89:
         09:fe:81:88:9d:3b:ad:8b:d2:4b:75:30:92:0f:57:19:d2:ba:
         44:c2:63:96:18:74:98:aa:d4:00:5a:26:9b:cc:91:dd:6d:5c:
         a2:09:92:71:be:7c:ce:4e:5a:7f:61:00:24:10:79:44:4c:45:
         25:e5:ae:ef:cd:45:bb:19:9d:05:2b:86:8c:6c:8d:92:8b:18:
         5e:e1:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:26 2026 by rpki-client