Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft
File:                     8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json)
Hash identifier:          C8WJElPsYQMv6lzTkcUeENeYEEtDSL3/pZSY0GR+j5Y=
Subject key identifier:   B2:0F:8B:94:C3:47:F6:07:3E:F1:87:E3:28:37:65:E2:BE:3C:65:0D
Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F
Certificate issuer:       /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F
Certificate serial:       02596FC1F1F969A2B7854B28EE5519E2434EE7BF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 10:57:54 +0000
Manifest this update:     Fri 24 Jul 2026 10:52:54 +0000
Manifest next update:     Sat 25 Jul 2026 11:14:54 +0000
Files and hashes:         1: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=)
                          2: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: GuS45xqKnN84dyEt5U9qPwzGf/E44xO/j7sOhfIhejc=)
                          3: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=)
                          4: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=)
                          5: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=)
                          6: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=)
                          7: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=)
                          8: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=)
                          9: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl
                          rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:59:6f:c1:f1:f9:69:a2:b7:85:4b:28:ee:55:19:e2:43:4e:e7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F
        Validity
            Not Before: Jul 24 10:52:54 2026 GMT
            Not After : Jul 25 11:14:54 2026 GMT
        Subject: CN=B20F8B94C347F6073EF187E3283765E2BE3C650D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:b9:d4:d1:ad:a2:cf:fa:be:83:39:76:e8:
                    ef:ac:4d:75:6e:43:5f:4e:b9:fe:d3:aa:95:27:b1:
                    3e:da:61:9f:91:9e:b7:f2:73:4e:68:37:2d:74:af:
                    08:36:7c:1a:de:e6:72:81:68:6c:a0:40:2c:81:a9:
                    f8:25:e0:fa:04:12:ff:ae:37:05:28:0e:25:25:01:
                    3e:6a:71:53:a3:ba:7e:1c:11:59:aa:ea:91:1f:d8:
                    73:8f:e8:83:76:79:29:7a:44:93:11:ae:03:53:8a:
                    8f:55:7a:13:a8:30:ee:38:ad:79:01:23:10:26:53:
                    64:24:e8:83:7b:b0:74:75:00:c5:ca:d1:d4:a3:8e:
                    a4:f2:33:98:c3:dd:be:00:48:b0:99:0d:d8:50:52:
                    a5:ab:ee:98:e8:0c:bf:64:c6:dc:d5:5f:16:80:05:
                    fe:05:78:54:d1:5e:ef:39:df:6a:41:91:a1:91:bc:
                    b6:6c:90:09:ed:69:f9:b8:3b:46:58:bc:b2:ac:56:
                    6c:06:a4:2b:15:d5:a2:42:5a:b2:c9:93:64:7f:b1:
                    18:5c:c0:8a:db:bd:ab:2e:1a:4a:f9:14:db:ea:57:
                    f2:84:8f:84:74:1b:1e:37:bc:aa:4b:00:fa:a7:7e:
                    8d:09:33:e0:b6:96:bd:28:9f:5c:46:e3:87:58:65:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0F:8B:94:C3:47:F6:07:3E:F1:87:E3:28:37:65:E2:BE:3C:65:0D
            X509v3 Authority Key Identifier:
                keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:58:16:c7:bf:80:58:9f:21:bb:21:17:c4:4c:42:af:66:
         88:5f:99:87:a9:6d:e9:d0:f1:db:ef:c5:78:af:29:b1:9b:56:
         03:45:f6:80:28:69:3d:42:f7:bc:c7:11:9a:7b:3c:e9:e8:af:
         de:1d:b4:bb:50:79:09:cd:0b:ca:ef:d1:bd:21:19:d5:c2:64:
         f3:b3:e2:01:03:9c:35:0c:7b:74:1f:b6:13:17:be:94:36:08:
         13:90:a8:7c:6e:d7:e8:b9:51:f8:e8:48:de:b4:19:64:96:06:
         6c:03:d4:e2:82:79:f6:1f:19:ca:bb:b4:af:5d:6e:af:b9:7c:
         c6:ed:ce:d4:b0:3d:d0:67:28:38:3e:c8:f7:48:60:f4:e8:e2:
         5e:d5:53:81:9f:d7:6b:1d:3a:1b:c0:c5:dc:ac:60:e7:9f:9e:
         99:f0:ff:d9:60:36:80:d3:7b:77:d4:15:72:1f:16:5e:4d:50:
         e9:7a:9b:2f:5c:4e:9e:ba:79:ad:1a:a4:13:ad:1d:6c:ca:9e:
         3a:dd:bf:59:cb:fe:03:70:97:b0:6c:37:63:fa:88:7d:9d:b7:
         17:17:8c:86:aa:82:88:ae:75:8c:02:42:82:89:3c:12:82:bf:
         80:3a:cb:14:85:6c:fd:f8:ad:40:f0:b2:94:38:1a:fe:cb:10:
         d9:68:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:30 2026 by rpki-client