Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
File:                     9FA20A14AF60219662C9668DE75D25F0C8B84220.mft (raw, json)
Hash identifier:          JE6+bewDgIczq7SNpyfZzsHkMaMNJXwsH/olJy3vlOE=
Subject key identifier:   95:E4:F0:DB:0E:7E:55:8B:F7:21:4E:5E:D8:18:77:AA:8B:32:BD:2C
Authority key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20
Certificate issuer:       /CN=9FA20A14AF60219662C9668DE75D25F0C8B84220
Certificate serial:       3C341F233A65E486F6B575BB509A223C0676A064
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 10:01:42 +0000
Manifest this update:     Fri 24 Jul 2026 09:56:42 +0000
Manifest next update:     Sat 25 Jul 2026 11:19:42 +0000
Files and hashes:         1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: YS2T4alON/4lMEWof38ueY05KIoXFInJbn/EVbWzFdU=)
                          2: 9FA20A14AF60219662C9668DE75D25F0C8B84220.crl (hash: 7xazs+k+9JQ6tTE5S9ClCVse9HaVSfeWzgON+v7Rth0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl
                          rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:34:1f:23:3a:65:e4:86:f6:b5:75:bb:50:9a:22:3c:06:76:a0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220
        Validity
            Not Before: Jul 24 09:56:42 2026 GMT
            Not After : Jul 25 11:19:42 2026 GMT
        Subject: CN=95E4F0DB0E7E558BF7214E5ED81877AA8B32BD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:69:45:cd:d7:ba:a9:50:55:ba:fc:e3:c6:
                    1a:52:4a:10:64:1a:09:3f:f4:de:4d:5f:05:a0:13:
                    5a:73:79:41:94:4b:89:fa:48:76:e9:94:65:9e:0b:
                    be:84:4a:ef:08:c3:88:c3:fa:41:ac:8b:b3:8f:c6:
                    0d:8d:b0:21:3d:eb:68:b3:04:19:83:1c:d2:d3:5d:
                    22:cf:21:ba:77:28:9e:79:89:bb:cf:59:b4:c7:f4:
                    a7:14:72:7e:d5:f9:36:a0:80:23:e7:ba:56:3d:90:
                    4a:f0:cf:88:89:ec:94:54:e9:20:88:ac:3e:a7:b2:
                    d3:ce:e2:9b:0e:2d:c3:d6:eb:09:1e:79:33:05:0b:
                    23:bb:ef:2f:cb:b3:e7:01:18:2b:60:de:f3:39:c9:
                    5f:d3:bf:c6:1b:37:cd:f0:f4:8b:14:75:63:62:82:
                    a1:ad:cb:07:17:dd:09:ef:3c:e9:30:4a:b2:a1:de:
                    e1:44:b1:95:07:b5:c3:b7:4c:7f:0e:5e:be:be:ab:
                    61:f3:65:e4:40:d3:10:98:6f:ac:98:dd:f0:db:bf:
                    04:1a:a1:a1:57:f5:1c:66:18:de:82:19:a3:00:f1:
                    d8:03:34:d5:1a:b5:a2:8c:2e:93:b3:a3:4b:cc:4f:
                    61:a1:2a:77:4e:74:c9:7b:37:16:c8:ce:73:21:03:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E4:F0:DB:0E:7E:55:8B:F7:21:4E:5E:D8:18:77:AA:8B:32:BD:2C
            X509v3 Authority Key Identifier:
                keyid:9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ba:a4:6c:63:d6:f3:b7:0e:d7:14:f7:b9:d3:da:df:10:e0:
         03:b8:0f:96:5e:6f:aa:26:92:47:90:37:2c:d4:a8:58:db:4d:
         ca:ff:c4:25:47:ce:d4:48:e3:e9:08:e0:54:a7:82:f9:0a:c4:
         c9:0e:12:fa:f5:5c:6e:22:1b:a8:84:d8:1e:6d:d2:e0:53:52:
         8a:4c:62:6d:f5:fc:0a:1c:52:c2:7e:d6:30:4d:ab:f5:6e:56:
         62:49:79:aa:63:29:00:3d:1e:39:8e:0e:78:d9:2a:70:c1:e8:
         c8:66:dd:46:6d:76:36:1b:5c:8e:6f:6f:34:b2:90:7e:9d:45:
         04:d8:27:3a:2a:a4:f5:13:54:e0:33:c2:63:be:48:3b:57:3d:
         0b:de:dc:e6:62:0a:70:99:d2:09:a4:95:da:2d:ed:a0:fb:62:
         f0:93:11:2b:d6:09:eb:4e:9b:39:41:9b:5c:88:f4:af:e0:80:
         91:6c:b6:d3:24:34:d8:62:eb:f0:a9:76:d7:9c:f2:8f:bd:f1:
         cf:3e:02:fa:c0:77:28:51:de:8a:10:2c:14:e7:16:0c:b7:3c:
         b0:c9:dd:b9:7d:69:3b:58:95:83:79:ac:37:f0:88:f0:2e:2a:
         8b:06:10:90:56:46:7c:03:a4:58:0e:46:26:a7:71:42:20:72:
         9f:8f:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:18 2026 by rpki-client