Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft
File:                     C940C2C66C795EF89DE57AA820616ED8225890BC.mft (raw, json)
Hash identifier:          C7KM0S8ktZimmU6YoyvQGbbGl19hnBOwt2eVMiXgbss=
Subject key identifier:   B0:AC:CB:3B:8B:98:7C:9A:97:25:DC:98:38:CF:FA:60:E3:02:F9:4E
Authority key identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC
Certificate issuer:       /CN=C940C2C66C795EF89DE57AA820616ED8225890BC
Certificate serial:       5787F7B0B34121AAFFFE8F13F0F21CACBFC3F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 16:40:20 +0000
Manifest this update:     Thu 23 Jul 2026 16:35:20 +0000
Manifest next update:     Fri 24 Jul 2026 19:08:20 +0000
Files and hashes:         1: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: EIKjtb6bLXexCIbSvIG/auaO1yK9dSi+ewqDx2meiK4=)
                          2: C940C2C66C795EF89DE57AA820616ED8225890BC.crl (hash: P1MFG975198z2q+iVnXkzi3VbKzEkbOwcUdBIwA5svw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl
                          rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:87:f7:b0:b3:41:21:aa:ff:fe:8f:13:f0:f2:1c:ac:bf:c3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C940C2C66C795EF89DE57AA820616ED8225890BC
        Validity
            Not Before: Jul 23 16:35:20 2026 GMT
            Not After : Jul 24 19:08:20 2026 GMT
        Subject: CN=B0ACCB3B8B987C9A9725DC9838CFFA60E302F94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:db:88:d7:2a:5f:8a:fb:b1:c5:fb:f3:1b:
                    d2:0f:b6:de:ac:dd:32:5d:b8:f9:e9:2a:db:98:ae:
                    27:d6:ce:c3:66:c3:be:f7:3f:7e:56:9c:16:c1:83:
                    bc:59:4b:cd:e0:62:61:6a:0b:cb:26:67:72:cc:6b:
                    1f:cd:a2:cb:6e:a4:58:31:15:56:41:89:9b:6c:ad:
                    66:c4:64:1d:98:d0:68:62:1d:07:03:33:20:97:48:
                    d7:c9:c9:1c:b1:f8:18:df:9a:62:cb:44:0e:94:5d:
                    c1:90:b9:39:a4:77:3b:d1:0d:2c:98:92:82:64:61:
                    a1:3d:8a:f5:09:ce:19:97:23:c5:2d:ef:87:37:0b:
                    21:dc:76:1b:e7:e3:11:a9:3d:0c:e5:6e:34:87:52:
                    49:d3:91:95:e1:13:fb:5a:45:2a:26:4b:6e:b7:70:
                    94:fb:98:3e:66:eb:16:64:6b:cd:c4:ec:b1:d0:e5:
                    ae:57:5a:09:52:e1:26:61:5a:4c:8b:c9:3b:9f:07:
                    49:74:fa:93:1f:df:6f:c2:a6:d6:dc:97:d7:f8:f4:
                    28:85:d2:48:49:22:ca:20:c3:9f:ab:b8:5d:90:1c:
                    46:1b:43:90:72:cf:e2:8b:1c:47:ef:f7:96:e6:52:
                    ce:cd:26:4f:53:90:4b:86:d4:2c:4d:33:eb:76:49:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:CB:3B:8B:98:7C:9A:97:25:DC:98:38:CF:FA:60:E3:02:F9:4E
            X509v3 Authority Key Identifier:
                keyid:C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:61:4c:73:97:b4:35:44:9a:b1:f8:26:5a:22:3b:5e:7c:
         ee:cf:ee:dd:c5:c4:5d:f2:dc:05:89:93:e4:ef:90:23:78:3b:
         4f:51:bb:8e:9a:9b:cf:03:d7:88:a5:4d:4f:13:3c:ff:cf:15:
         3d:11:ef:af:d8:32:6b:5d:7f:47:12:0e:79:52:0d:82:be:0d:
         e7:62:b2:21:4e:f1:d7:57:a7:f9:d0:9d:b4:7f:42:5e:ef:70:
         e1:b3:a0:0b:f4:26:f7:b5:a1:a5:7a:aa:22:85:05:c4:a2:0a:
         99:f0:6e:77:7c:5e:e5:b7:86:85:f1:09:2b:50:a9:10:79:1e:
         59:15:79:9e:81:5e:b7:9f:61:5c:62:2f:07:0b:ef:de:67:01:
         14:36:a6:87:1c:09:ae:3e:27:b5:27:17:53:44:d8:0d:7b:b6:
         7c:b4:5f:5c:1a:75:65:cf:02:30:bd:c4:4d:8c:91:b1:91:39:
         59:fc:6c:91:54:cf:e9:7c:c3:6c:67:8b:a8:07:44:c2:4a:ee:
         5b:a7:3f:b3:9b:4d:30:73:1d:4f:b9:1a:5f:fd:32:fb:34:4e:
         38:53:ee:74:3e:df:95:88:40:56:ea:88:c5:05:43:0c:38:65:
         f8:2a:c2:1e:d0:77:11:7c:8e:c3:f5:37:4a:0c:1c:63:db:d8:
         7b:d8:6a:17
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITV4f3sLNBIar//o8T8PIcrL/D9zANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhDOTQwQzJDNjZDNzk1RUY4OURFNTdBQTgyMDYxNkVEODIy
NTg5MEJDMB4XDTI2MDcyMzE2MzUyMFoXDTI2MDcyNDE5MDgyMFowMzExMC8GA1UE
AxMoQjBBQ0NCM0I4Qjk4N0M5QTk3MjVEQzk4MzhDRkZBNjBFMzAyRjk0RTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALIm24jXKl+K+7HF+/Mb0g+23qzd
Ml24+ekq25iuJ9bOw2bDvvc/flacFsGDvFlLzeBiYWoLyyZncsxrH82iy26kWDEV
VkGJm2ytZsRkHZjQaGIdBwMzIJdI18nJHLH4GN+aYstEDpRdwZC5OaR3O9ENLJiS
gmRhoT2K9QnOGZcjxS3vhzcLIdx2G+fjEak9DOVuNIdSSdORleET+1pFKiZLbrdw
lPuYPmbrFmRrzcTssdDlrldaCVLhJmFaTIvJO58HSXT6kx/fb8Km1tyX1/j0KIXS
SEkiyiDDn6u4XZAcRhtDkHLP4oscR+/3luZSzs0mT1OQS4bULE0z63ZJC/cCAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBSwrMs7i5h8mpcl3Jg4z/pg4wL5TjAfBgNVHSME
GDAWgBTJQMLGbHle+J3leqggYW7YIliQvDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud
HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9j
ZTRlMTAzZS0zZDc4LTRhZTAtOWJhNC1kMTc5MmZmYTA0YWMvMC9DOTQwQzJDNjZD
Nzk1RUY4OURFNTdBQTgyMDYxNkVEODIyNTg5MEJDLmNybDByBggrBgEFBQcBAQRm
MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw
by9JRE5JQy8xL0M5NDBDMkM2NkM3OTVFRjg5REU1N0FBODIwNjE2RUQ4MjI1ODkw
QkMuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZTRlMTAzZS0zZDc4LTRhZTAtOWJh
NC1kMTc5MmZmYTA0YWMvMC9DOTQwQzJDNjZDNzk1RUY4OURFNTdBQTgyMDYxNkVE
ODIyNTg5MEJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAgrZhTHOXtDVEmrH4JloiO1587s/u3cXEXfLc
BYmT5O+QI3g7T1G7jpqbzwPXiKVNTxM8/88VPRHvr9gya11/RxIOeVINgr4N52Ky
IU7x11en+dCdtH9CXu9w4bOgC/Qm97WhpXqqIoUFxKIKmfBud3xe5beGhfEJK1Cp
EHkeWRV5noFet59hXGIvBwvv3mcBFDamhxwJrj4ntScXU0TYDXu2fLRfXBp1Zc8C
ML3ETYyRsZE5WfxskVTP6XzDbGeLqAdEwkruW6c/s5tNMHMdT7kaX/0y+zROOFPu
dD7flYhAVuqIxQVDDDhl+CrCHtB3EXyOw/U3SgwcY9vYe9hqFw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:31 2026 by rpki-client