Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft
File:                     5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json)
Hash identifier:          KUru6kFM2jbICZFXPHx/DtbtQ3h42xFFiuVMajLe/ww=
Subject key identifier:   43:DF:4D:0B:76:17:C8:72:4E:C8:6F:1B:90:0E:B7:34:21:E9:95:87
Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3
Certificate issuer:       /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3
Certificate serial:       6986EC80E5A862874A5FD5044189B97B07287D64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 11:18:13 +0000
Manifest this update:     Fri 24 Jul 2026 11:13:13 +0000
Manifest next update:     Sat 25 Jul 2026 12:26:13 +0000
Files and hashes:         1: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=)
                          2: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=)
                          3: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: eXDeLD/X13TgUc6Vbo8LPR0kkR5sZxbsr3/rstGmurk=)
                          4: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=)
                          5: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl
                          rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:86:ec:80:e5:a8:62:87:4a:5f:d5:04:41:89:b9:7b:07:28:7d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3
        Validity
            Not Before: Jul 24 11:13:13 2026 GMT
            Not After : Jul 25 12:26:13 2026 GMT
        Subject: CN=43DF4D0B7617C8724EC86F1B900EB73421E99587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:b0:51:75:95:dd:79:24:fc:52:a2:c0:98:
                    aa:8c:ce:b7:a1:d2:78:39:4c:66:22:2a:4f:82:41:
                    23:bb:c4:6f:d1:67:e7:4d:4a:16:9a:7a:9a:0c:38:
                    e0:9d:32:92:a6:c3:f4:aa:cb:61:65:30:40:26:ca:
                    56:cb:62:cc:86:63:c8:76:55:d2:dc:7a:d5:0e:06:
                    47:50:5d:20:7b:35:c4:27:fd:3d:75:59:12:09:1a:
                    36:ea:77:b6:0a:d4:8a:74:0e:1f:83:4e:fe:e4:65:
                    a0:ee:05:f0:b0:eb:f1:25:86:ae:20:01:e8:3e:ad:
                    d2:b7:3f:42:97:35:dc:92:a3:3d:f5:57:e3:30:9b:
                    01:fe:16:76:95:03:1b:e0:38:61:bb:b0:be:4b:46:
                    5e:53:87:41:82:11:05:6e:62:d1:12:76:8f:42:95:
                    8e:d7:6a:d2:b9:5e:0e:28:19:2b:c1:ff:23:7f:f6:
                    d0:42:4a:01:b0:f4:a6:c0:af:34:a8:21:49:76:7e:
                    d4:86:ff:36:de:bd:43:cc:28:ec:4b:13:1d:7f:21:
                    c2:bb:b3:2a:f6:c9:77:0f:26:89:c2:a7:98:ff:44:
                    74:58:ad:3c:69:db:17:fa:51:76:9c:1d:b6:f4:5c:
                    ff:03:9d:41:87:e7:0e:bf:09:cc:4c:1c:6e:41:d3:
                    8c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DF:4D:0B:76:17:C8:72:4E:C8:6F:1B:90:0E:B7:34:21:E9:95:87
            X509v3 Authority Key Identifier:
                keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e8:10:2c:ad:8d:9f:11:45:99:bb:c3:c1:f5:e8:12:ab:6a:
         dd:62:ae:e7:f4:b3:c3:b5:05:83:1c:22:f6:ce:8e:a7:11:73:
         3d:f0:93:c4:07:ae:a5:f0:6d:5c:ef:f1:c8:a3:10:8e:e8:90:
         d0:96:4a:1b:a0:f4:8f:fc:0f:9c:b9:30:73:54:bc:00:cd:db:
         a4:98:e5:30:db:12:0b:d1:6f:29:4c:87:81:88:21:e9:82:e8:
         de:62:72:4b:f3:f3:d6:40:f7:25:28:1c:8f:59:18:cf:16:c3:
         c1:c8:b9:07:fa:49:0d:bf:38:28:48:3f:f4:a3:15:5f:51:12:
         f0:dd:4d:a1:30:e7:a9:d6:ba:ee:eb:41:85:39:a9:13:27:e9:
         08:78:58:03:d4:1e:e7:1f:8f:30:2a:48:47:44:04:bf:3f:b6:
         7f:8a:08:83:5c:0e:7b:3a:b6:d8:30:56:65:42:fe:f8:79:9d:
         ad:80:ba:29:8c:d9:31:cd:57:65:42:89:a6:68:12:a8:66:43:
         c2:90:e7:03:33:2e:06:ac:b2:86:7f:9a:8f:a8:6a:c4:5c:38:
         19:0c:85:54:97:1c:11:f6:41:f6:3b:2e:0a:09:25:92:98:e4:
         d9:1f:6e:5b:61:84:7f:80:4d:a4:5d:0e:e3:a2:11:dc:cc:98:
         85:2a:74:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaYbsgOWoYodKX9UEQYm5ewcofWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz
OUE4M0ZGMzAeFw0yNjA3MjQxMTEzMTNaFw0yNjA3MjUxMjI2MTNaMDMxMTAvBgNV
BAMTKDQzREY0RDBCNzYxN0M4NzI0RUM4NkYxQjkwMEVCNzM0MjFFOTk1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQLBRdZXdeST8UqLAmKqMzreh
0ng5TGYiKk+CQSO7xG/RZ+dNShaaepoMOOCdMpKmw/Sqy2FlMEAmylbLYsyGY8h2
VdLcetUOBkdQXSB7NcQn/T11WRIJGjbqd7YK1Ip0Dh+DTv7kZaDuBfCw6/Elhq4g
Aeg+rdK3P0KXNdySoz31V+MwmwH+FnaVAxvgOGG7sL5LRl5Th0GCEQVuYtESdo9C
lY7XatK5Xg4oGSvB/yN/9tBCSgGw9KbArzSoIUl2ftSG/zbevUPMKOxLEx1/IcK7
syr2yXcPJonCp5j/RHRYrTxp2xf6UXacHbb0XP8DnUGH5w6/CcxMHG5B04yTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQ99NC3YXyHJOyG8bkA63NCHplYcwHwYDVR0j
BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2
MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz
RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy
ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG
NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEXoECytjZ8RRZm7w8H16BKrat1iruf0s8O1
BYMcIvbOjqcRcz3wk8QHrqXwbVzv8cijEI7okNCWShug9I/8D5y5MHNUvADN26SY
5TDbEgvRbylMh4GIIemC6N5ickvz89ZA9yUoHI9ZGM8Ww8HIuQf6SQ2/OChIP/Sj
FV9REvDdTaEw56nWuu7rQYU5qRMn6Qh4WAPUHucfjzAqSEdEBL8/tn+KCINcDns6
ttgwVmVC/vh5na2AuimM2THNV2VCiaZoEqhmQ8KQ5wMzLgassoZ/mo+oasRcOBkM
hVSXHBH2QfY7LgoJJZKY5NkfblthhH+ATaRdDuOiEdzMmIUqdNU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:52 2026 by rpki-client