Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
File:                     AE03A0FB122D3B828822172D20A923BA84A5CB76.mft (raw, json)
Hash identifier:          1fIYyNM+sAYY4Qy63mTG7CjFVeJA7yJ//hJyPZ7ChSc=
Subject key identifier:   88:EF:DB:F9:8F:F9:BE:1F:89:4B:C8:2D:90:14:19:6B:FF:52:BA:24
Authority key identifier: AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76
Certificate issuer:       /CN=AE03A0FB122D3B828822172D20A923BA84A5CB76
Certificate serial:       0A19FF3F9CB9127A1E4CE98348224475C83DA8A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 23:08:06 +0000
Manifest this update:     Thu 23 Jul 2026 23:03:06 +0000
Manifest next update:     Sat 25 Jul 2026 02:10:06 +0000
Files and hashes:         1: AE03A0FB122D3B828822172D20A923BA84A5CB76.crl (hash: 1GIxZb2qQUMv/3RHgkdFPvrE7jOk6lnmUxGbaPUQHB8=)
                          2: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: ur7yrhWHiFsydqZ/PScY2ULnHYX291BUphgqfad6RC4=)
                          3: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: sM8kT9+lnDp66j8gZ6lQEt5JkL6qeZtqa7PnwIaHyfU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl
                          rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:19:ff:3f:9c:b9:12:7a:1e:4c:e9:83:48:22:44:75:c8:3d:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE03A0FB122D3B828822172D20A923BA84A5CB76
        Validity
            Not Before: Jul 23 23:03:06 2026 GMT
            Not After : Jul 25 02:10:06 2026 GMT
        Subject: CN=88EFDBF98FF9BE1F894BC82D9014196BFF52BA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:6c:d9:50:3a:4a:18:c7:c8:86:09:8b:fa:
                    0c:1a:8e:07:03:04:88:22:34:f8:36:c2:5e:3f:3d:
                    a1:a0:3b:09:58:3d:0d:28:08:53:ce:1c:9c:34:50:
                    37:d0:16:47:51:9a:66:40:6b:bb:b5:a9:bb:ad:7b:
                    aa:c7:0e:f3:47:7a:c9:8f:4b:21:45:68:99:ee:2b:
                    b4:50:bd:6f:79:5e:76:d9:b1:c0:52:07:86:8a:c7:
                    2d:33:d6:c5:6a:52:13:9c:44:db:16:80:ec:d4:e9:
                    b6:cd:c7:3b:bc:80:9a:cc:78:0c:e5:97:cf:5e:8a:
                    63:8a:bd:0e:b0:75:8d:81:71:d1:69:20:bb:a6:d0:
                    73:f1:09:b3:da:29:a9:13:43:7f:9b:d2:1d:ca:0e:
                    1f:fe:bd:24:6f:47:a3:77:c5:71:8c:37:bf:c2:f8:
                    b2:9e:ca:dd:22:85:1c:0b:8c:fe:eb:b4:5e:1a:73:
                    17:00:4b:65:ca:04:e9:e4:ab:f4:75:d5:ef:23:6a:
                    22:a1:cf:9d:15:33:06:fb:51:c5:06:dc:d3:a7:2a:
                    07:c9:63:84:50:65:c4:9b:72:c5:a2:b5:6d:d3:a4:
                    ce:ea:9f:ff:41:4a:87:e3:90:3e:fe:7c:35:41:ee:
                    13:06:ec:35:dd:e8:bb:74:cb:2b:b2:6e:80:5f:54:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EF:DB:F9:8F:F9:BE:1F:89:4B:C8:2D:90:14:19:6B:FF:52:BA:24
            X509v3 Authority Key Identifier:
                keyid:AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2c:40:1a:80:5e:7e:6f:26:32:c8:22:e4:68:23:f8:13:66:
         9c:1f:2f:26:6f:0d:df:cc:47:23:54:93:84:91:55:4e:8b:b0:
         23:80:9d:a4:35:a6:e1:c8:d5:3d:81:da:02:da:fe:51:7e:87:
         2b:6b:49:30:a3:8c:31:89:b4:52:80:72:49:97:9d:4e:5e:05:
         1b:f1:ea:28:3a:cf:9d:4d:a7:f0:c3:ca:ef:c8:fc:17:32:8f:
         36:1d:6a:b3:bd:12:2a:fa:8a:4d:66:27:78:96:57:3e:ab:b6:
         bb:7a:7c:53:0d:38:aa:c8:bd:7b:e0:1e:1b:61:2c:02:41:da:
         22:13:36:f1:19:b0:6c:e1:27:ee:34:82:18:35:1b:69:e9:d4:
         52:2a:b2:6a:6b:83:b3:50:8f:54:38:cd:3b:90:0d:dd:25:cb:
         b8:f2:a7:77:4b:36:57:d6:8c:05:ef:ab:60:3c:4f:a3:9c:2e:
         eb:e3:3e:5f:45:cb:ad:de:c0:70:8c:25:4a:fd:3d:72:67:33:
         f0:63:eb:cf:b3:e2:87:d2:30:38:85:a2:89:d9:7d:75:c9:6a:
         0f:fd:1f:10:10:a2:31:40:ac:b5:e7:28:be:76:5b:1c:e3:bb:
         33:d0:be:0b:c7:b5:c9:42:d7:83:9a:b9:bd:92:b1:c8:ce:17:
         11:7c:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:34 2026 by rpki-client