Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
File:                     D22CC628B819E164A006F58EA6CF791A3AD66A38.mft (raw, json)
Hash identifier:          W815areW2d2yRYBJuGoyUgtVg8GabNBpZtTNs5ELGBY=
Subject key identifier:   12:A8:4A:5E:4B:83:21:1D:7D:A7:BB:4E:40:E6:AE:DF:33:D5:8F:D6
Authority key identifier: D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38
Certificate issuer:       /CN=D22CC628B819E164A006F58EA6CF791A3AD66A38
Certificate serial:       56E4E9B4A8B0630688548AE6E48AFD2219D022D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
Manifest number:          6D
Signing time:             Thu 23 Jul 2026 06:53:26 +0000
Manifest this update:     Thu 23 Jul 2026 06:48:26 +0000
Manifest next update:     Fri 24 Jul 2026 10:12:26 +0000
Files and hashes:         1: D22CC628B819E164A006F58EA6CF791A3AD66A38.crl (hash: sNA/hB/8nnQyehE0CZGdbkW/pHoyWuYpAYQuy0xCOfo=)
                          2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: dnAkfTvHw17dHWCAlbvcfqCxpaF/acXpN4SJ7+7NKIU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl
                          rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e4:e9:b4:a8:b0:63:06:88:54:8a:e6:e4:8a:fd:22:19:d0:22:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D22CC628B819E164A006F58EA6CF791A3AD66A38
        Validity
            Not Before: Jul 23 06:48:26 2026 GMT
            Not After : Jul 24 10:12:26 2026 GMT
        Subject: CN=12A84A5E4B83211D7DA7BB4E40E6AEDF33D58FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:b1:0b:bd:83:ba:3a:cb:2b:96:47:6f:4d:
                    0b:5b:a7:3a:09:12:d0:0b:47:e3:a5:72:2a:2a:9e:
                    57:2e:72:55:ff:5d:3c:8f:6f:4b:7c:b5:dc:2d:34:
                    32:d1:51:05:98:0a:7c:6b:35:6d:02:6b:b3:76:de:
                    cb:5e:06:97:87:f4:53:6e:30:a0:ef:d9:ed:bb:2c:
                    e4:89:78:c8:80:49:33:51:f8:75:56:81:98:85:0b:
                    f7:53:5b:52:53:3e:78:46:27:e5:91:b9:a9:99:c6:
                    14:0c:85:72:2e:34:14:7a:2d:7e:38:cb:01:a3:a1:
                    51:92:44:62:78:a5:1d:13:4b:0f:6a:08:39:ff:66:
                    80:f5:6c:97:59:86:66:d5:d4:b5:95:34:2f:8b:fa:
                    2a:0b:e6:73:a1:77:83:86:a0:0d:a5:f8:5c:3c:0f:
                    45:db:a4:5b:41:85:5c:07:f5:64:d6:27:55:14:8f:
                    76:70:eb:18:85:2d:19:a7:0f:7c:13:99:fe:35:42:
                    24:98:d9:32:7a:bd:1f:ff:89:64:01:84:35:75:03:
                    75:fc:50:7f:84:60:6e:b4:67:b6:92:ba:9e:ae:80:
                    ba:30:fe:99:94:07:43:c4:15:21:99:73:04:42:29:
                    6e:92:54:92:85:f1:9d:55:e8:04:a0:40:be:b5:cc:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A8:4A:5E:4B:83:21:1D:7D:A7:BB:4E:40:E6:AE:DF:33:D5:8F:D6
            X509v3 Authority Key Identifier:
                keyid:D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d3:38:a6:2d:2e:14:1e:c6:f9:9e:8c:47:4b:46:5b:8a:5e:
         2d:e2:f2:94:bf:72:24:46:25:d7:f4:df:67:01:dc:c6:3a:6f:
         47:28:93:c6:4f:4d:a1:3d:de:63:2b:b5:c0:00:21:d3:7c:34:
         63:6e:e3:10:ff:d9:c9:fd:19:70:33:19:2b:f6:87:9a:45:32:
         bd:cc:58:22:fd:18:5b:30:95:ac:2a:bc:91:8f:ef:f1:61:de:
         67:9e:ed:23:85:7f:c9:da:b7:69:68:69:9a:69:a8:c5:9d:f7:
         d6:ed:69:92:01:4c:aa:b7:11:21:d3:09:41:59:6f:f6:e1:f9:
         54:8c:fa:62:b1:c5:5b:cb:ed:e6:ee:f2:b3:b6:15:08:1c:f4:
         7f:c6:b3:ef:5c:59:7d:b0:67:81:e5:de:fd:b1:61:31:40:32:
         2c:18:94:b4:80:df:99:e3:fe:5a:e2:d1:ee:15:10:a5:01:2a:
         92:5a:68:15:c8:ef:66:f6:8b:4a:80:0b:8d:4d:ca:ce:a2:15:
         57:3f:a2:55:4b:36:5d:ac:a9:ef:99:ff:27:5b:d5:c4:f8:2d:
         c7:a0:39:40:8c:c3:34:c0:c4:f2:6d:fb:2c:dc:78:ba:88:4f:
         fb:f9:bb:fd:a9:34:0a:d7:53:f6:5d:80:7b:8e:64:74:88:97:
         79:5d:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:55 2026 by rpki-client