Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft
File:                     E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft (raw, json)
Hash identifier:          Cc8JRRIdK5remTi0EAawIMMCK619I6ZGLhUyWcr8Upg=
Subject key identifier:   C8:7E:C2:53:87:19:4E:8C:F8:FE:D3:00:72:D2:67:5A:1F:08:1B:6E
Authority key identifier: E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13
Certificate issuer:       /CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313
Certificate serial:       6BF571E2AB2C99D4233353E8C45DBCD0BA2E9A8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 23:18:17 +0000
Manifest this update:     Thu 23 Jul 2026 23:13:17 +0000
Manifest next update:     Sat 25 Jul 2026 02:38:17 +0000
Files and hashes:         1: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: +kRo7LiXN7GRQQL/5vawAMwmjkMc/A/ZykmCvCb8Chs=)
                          2: E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl (hash: pc+GCp2p1LBrz8lH92pHc9NZmQBxylYJrIs2Avfbf5s=)
                          3: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: /1MgccGZfskMTbGr8xqejz+aa0C1YMlfgjpiT2WdsBo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl
                          rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f5:71:e2:ab:2c:99:d4:23:33:53:e8:c4:5d:bc:d0:ba:2e:9a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313
        Validity
            Not Before: Jul 23 23:13:17 2026 GMT
            Not After : Jul 25 02:38:17 2026 GMT
        Subject: CN=C87EC25387194E8CF8FED30072D2675A1F081B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:3f:3a:a8:6a:93:53:19:bb:8a:06:51:7d:
                    b2:91:c0:25:b3:6b:c3:bc:d7:c8:2b:55:cf:99:cf:
                    e8:2b:78:94:44:c2:ad:02:62:52:bc:fd:d0:d1:7a:
                    b5:be:4c:46:7c:cc:b8:51:4f:82:1e:01:b1:04:48:
                    c1:1f:a1:0e:37:8f:27:08:3c:d9:aa:3b:d4:81:6e:
                    b0:a0:6d:46:4c:46:2f:33:2c:5d:83:2a:8f:ae:92:
                    e5:b2:52:df:49:17:0f:b9:0d:d9:0e:30:d5:c2:87:
                    ad:95:3a:92:4e:16:1c:fb:a6:e8:3a:93:32:d6:d5:
                    cd:b9:3b:26:25:6a:6b:e8:e7:1a:5e:14:a3:5d:81:
                    e2:c8:b5:b7:1d:f4:3e:6d:7d:87:12:0c:63:4c:16:
                    35:3b:05:e5:fe:a1:d5:8e:71:5b:83:a2:09:af:9c:
                    b8:27:fa:2a:2d:89:c2:9f:81:a4:92:bb:57:aa:ca:
                    b1:b6:90:db:6b:b4:50:b0:d4:11:dc:db:0c:c4:20:
                    79:1f:5b:14:f4:96:74:97:d4:23:d7:84:fb:99:ba:
                    00:d9:3b:47:33:6d:7b:29:da:b3:a6:e0:04:1a:04:
                    73:b5:79:49:c1:15:c2:04:a3:99:a9:66:40:af:b0:
                    d5:66:e6:30:af:27:67:f3:58:b6:b1:43:82:69:fc:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7E:C2:53:87:19:4E:8C:F8:FE:D3:00:72:D2:67:5A:1F:08:1B:6E
            X509v3 Authority Key Identifier:
                keyid:E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:09:78:37:47:77:20:a9:51:f5:43:48:5b:e6:7a:48:3f:33:
         54:d5:63:21:d2:a6:bf:ba:63:f9:03:af:64:79:44:04:40:ec:
         fd:0d:5e:3d:c2:bf:ac:36:57:97:45:49:3a:87:de:6b:fa:35:
         0d:52:df:5c:bb:32:c7:de:10:1b:74:67:b7:53:b4:bc:b6:cd:
         ae:4f:19:1c:2e:14:02:47:91:90:c5:29:61:9a:b7:f7:99:02:
         f9:b9:e9:97:ac:a5:27:cb:3e:6e:51:44:eb:63:06:5a:6a:99:
         4b:c8:f9:58:4a:f9:c5:af:4b:3f:5c:62:4f:e8:fa:95:7a:07:
         19:b1:b0:11:48:58:ce:b1:73:fa:aa:34:3f:2f:9a:91:eb:b6:
         56:e8:dc:11:c7:86:ac:14:66:70:fe:f1:47:b6:69:7a:04:e3:
         94:6b:da:88:3e:6d:d5:9d:8b:6c:91:af:f4:0a:ca:80:70:87:
         b1:1a:f2:75:3d:88:c6:c2:2f:0b:c9:be:f3:c6:79:36:2a:81:
         ef:80:1d:b0:3f:c4:49:bb:6f:70:54:8b:1b:e2:1a:35:3b:61:
         c1:ad:11:77:3e:77:e9:4c:c7:a7:05:b7:80:12:21:58:fb:df:
         00:02:29:dd:c4:05:68:d2:a2:ca:0e:35:b6:b9:ac:c8:c4:40:
         af:0e:d9:51
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUa/Vx4qssmdQjM1PoxF280LoumoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNF
MTExRjMxMzAeFw0yNjA3MjMyMzEzMTdaFw0yNjA3MjUwMjM4MTdaMDMxMTAvBgNV
BAMTKEM4N0VDMjUzODcxOTRFOENGOEZFRDMwMDcyRDI2NzVBMUYwODFCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylj86qGqTUxm7igZRfbKRwCWz
a8O818grVc+Zz+greJREwq0CYlK8/dDRerW+TEZ8zLhRT4IeAbEESMEfoQ43jycI
PNmqO9SBbrCgbUZMRi8zLF2DKo+ukuWyUt9JFw+5DdkOMNXCh62VOpJOFhz7pug6
kzLW1c25OyYlamvo5xpeFKNdgeLItbcd9D5tfYcSDGNMFjU7BeX+odWOcVuDogmv
nLgn+ioticKfgaSSu1eqyrG2kNtrtFCw1BHc2wzEIHkfWxT0lnSX1CPXhPuZugDZ
O0czbXsp2rOm4AQaBHO1eUnBFcIEo5mpZkCvsNVm5jCvJ2fzWLaxQ4Jp/CSXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyH7CU4cZToz4/tMActJnWh8IG24wHwYDVR0j
BBgwFoAU4Udvx+QJWjCV5H+8SDTX7OER8xMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDcwZDYyOWEtOTZlZC00NTFhLTg3ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdF
NDA5NUEzMDk1RTQ3RkJDNDgzNEQ3RUNFMTExRjMxMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMTQ3NkZDN0U0MDk1QTMwOTVFNDdGQkM0ODM0RDdFQ0UxMTFG
MzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3
ODctMzQxMjIyODJhNzA2LzAvRTE0NzZGQzdFNDA5NUEzMDk1RTQ3RkJDNDgzNEQ3
RUNFMTExRjMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIAJeDdHdyCpUfVDSFvmekg/M1TVYyHSpr+6
Y/kDr2R5RARA7P0NXj3Cv6w2V5dFSTqH3mv6NQ1S31y7MsfeEBt0Z7dTtLy2za5P
GRwuFAJHkZDFKWGat/eZAvm56ZespSfLPm5RROtjBlpqmUvI+VhK+cWvSz9cYk/o
+pV6BxmxsBFIWM6xc/qqND8vmpHrtlbo3BHHhqwUZnD+8Ue2aXoE45Rr2og+bdWd
i2yRr/QKyoBwh7Ea8nU9iMbCLwvJvvPGeTYqge+AHbA/xEm7b3BUixviGjU7YcGt
EXc+d+lMx6cFt4ASIVj73wACKd3EBWjSosoONba5rMjEQK8O2VE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:38:06 2026 by rpki-client