Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft
File:                     535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft (raw, json)
Hash identifier:          1FBxh5yifcSrd5P/6lGQJvEPmPPhsTp+J/1yc9qYCJM=
Subject key identifier:   AB:4B:98:30:11:75:10:35:41:0B:08:9B:F6:68:18:07:B4:29:9B:73
Authority key identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99
Certificate issuer:       /CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99
Certificate serial:       706D58FB99985471F9816A83F52B9501B526FBEB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 22:27:17 +0000
Manifest this update:     Thu 23 Jul 2026 22:22:17 +0000
Manifest next update:     Sat 25 Jul 2026 01:50:17 +0000
Files and hashes:         1: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl (hash: 2T86G7YVVYzozdF5xZT7ImgrEaAwyoffqmID3rQY/DY=)
                          2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: XHqyQLGVve3ZT8Kfh4uyyc91xlGDqpssM8vgHeuLO+M=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl
                          rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6d:58:fb:99:98:54:71:f9:81:6a:83:f5:2b:95:01:b5:26:fb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99
        Validity
            Not Before: Jul 23 22:22:17 2026 GMT
            Not After : Jul 25 01:50:17 2026 GMT
        Subject: CN=AB4B983011751035410B089BF6681807B4299B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c7:62:90:ec:b2:7f:d3:c5:b9:e8:9e:31:20:
                    22:12:09:7e:03:d8:aa:70:60:b1:4f:b7:64:ed:63:
                    23:ce:82:f7:e8:2b:f9:30:b7:0b:ed:38:f8:25:94:
                    0c:53:8b:3c:8f:30:15:aa:e1:1a:f1:5b:4d:9e:37:
                    c9:13:48:05:85:44:73:4b:2d:71:05:76:db:92:d0:
                    a3:a4:d8:10:4e:16:57:80:6f:76:a9:50:92:a3:f2:
                    2f:7a:10:f2:48:e3:16:54:32:09:c4:51:de:13:ba:
                    5b:b9:87:8c:e8:5f:ad:9c:3d:84:cc:16:29:07:72:
                    9f:f5:cc:8e:d6:d0:c0:27:f0:5d:e7:a4:9e:c4:cf:
                    4b:fa:7a:b6:f8:e2:28:82:cd:8b:2c:66:ef:d5:4c:
                    16:77:1c:da:14:3d:05:65:3f:0e:4c:3e:36:73:cf:
                    5a:cd:3e:71:de:5d:a9:e1:c3:53:6d:36:6d:1c:8b:
                    e1:fc:af:28:b6:f2:e0:ca:51:03:e0:99:04:5e:bf:
                    4f:15:51:a2:06:a0:26:e3:06:b8:a7:41:5b:3c:69:
                    8a:70:39:17:6e:7e:90:f4:94:44:27:25:4a:9f:f1:
                    3a:e4:8d:6a:c7:5f:02:ab:b5:f1:52:c9:96:eb:96:
                    30:ef:70:37:49:51:a9:66:c1:3c:fc:84:ae:c7:cd:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4B:98:30:11:75:10:35:41:0B:08:9B:F6:68:18:07:B4:29:9B:73
            X509v3 Authority Key Identifier:
                keyid:53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9e:57:b6:63:8d:98:37:43:e2:80:ea:dc:04:3e:ba:96:cd:
         41:73:88:48:24:30:96:3b:2c:e0:29:a9:4e:d2:99:a9:72:66:
         0c:40:ab:a9:66:3a:b5:6c:67:e4:14:d1:e5:c9:c1:4f:77:3e:
         c7:d9:e0:d0:85:ac:9f:a2:f1:0b:c8:dd:bd:e5:88:e2:22:39:
         d9:65:b4:6c:6e:c6:8c:77:4a:83:a9:d7:9d:cf:0e:b4:14:86:
         8c:56:68:27:47:77:df:51:7b:c9:47:e3:a2:15:4f:11:35:f4:
         33:cd:c7:9a:3b:68:46:d1:03:8d:a9:1f:bb:f8:61:b3:39:a9:
         c9:9a:68:7e:99:9c:0d:07:f9:22:c8:25:e5:4e:9b:4a:06:0d:
         fe:b3:b3:fa:ff:14:a5:88:3c:98:7f:b5:cc:44:84:b2:ae:22:
         84:b6:e6:19:c9:5d:d6:ff:a9:a0:3c:b4:e4:d0:a5:ec:1e:e6:
         3b:82:79:8b:e7:ba:42:75:e9:92:04:43:dd:c4:1b:bf:21:70:
         97:1f:a2:64:29:a4:4e:a7:75:e8:5f:9a:9e:60:a0:30:f2:6a:
         8d:08:6b:81:ef:8e:7b:c7:e5:0d:bc:ba:79:8e:c4:2c:0a:66:
         ce:42:6a:ec:1c:3b:cc:0c:45:8b:d7:2f:58:7c:5e:8c:a3:33:
         77:af:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:45 2026 by rpki-client