Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
File:                     153D132907038920D30874D8E1EA33161B940EA6.mft (raw, json)
Hash identifier:          fJo6vqPD7z7Psu+b/r/mAzmJonN2oRDq5yRQP4c2Dog=
Subject key identifier:   56:19:F2:98:01:CC:21:5F:E8:0B:FC:05:84:0A:B2:EA:79:BA:F8:0E
Authority key identifier: 15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6
Certificate issuer:       /CN=153D132907038920D30874D8E1EA33161B940EA6
Certificate serial:       4D62673874C8B0625EF38D59679140DB8729EE3B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 21:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 20:55:40 +0000
Manifest next update:     Fri 24 Jul 2026 21:53:40 +0000
Files and hashes:         1: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: pulqmJflTAxdM7jOySuU657i95+QOMozLp6rdyTPI6U=)
                          2: 153D132907038920D30874D8E1EA33161B940EA6.crl (hash: V+I6fYgVYgdh8GPyNsOglLnwcEz7b4yVZaNDbuVNUDM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl
                          rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:62:67:38:74:c8:b0:62:5e:f3:8d:59:67:91:40:db:87:29:ee:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153D132907038920D30874D8E1EA33161B940EA6
        Validity
            Not Before: Jul 23 20:55:40 2026 GMT
            Not After : Jul 24 21:53:40 2026 GMT
        Subject: CN=5619F29801CC215FE80BFC05840AB2EA79BAF80E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:db:6c:62:c8:ee:c9:9d:02:86:c8:82:0d:
                    cb:38:0b:f2:6c:80:7d:ac:2d:4c:c1:ff:c5:91:f4:
                    29:c2:eb:9e:f4:a3:6f:27:25:3e:6e:a0:7c:e7:4b:
                    c6:15:cf:f7:f8:1b:dd:95:c5:03:ba:a4:57:3d:38:
                    49:91:76:b0:41:97:a7:a7:5b:20:96:32:3d:a2:e3:
                    39:5e:c8:a9:62:de:a4:22:70:40:7b:69:d3:95:6e:
                    76:32:15:e4:0a:ea:86:5f:5d:0e:ce:b9:11:d8:1f:
                    29:ba:ab:e6:ae:2f:a2:ef:97:a1:36:69:95:b6:4a:
                    c5:0f:2e:f4:4c:2e:a4:d9:43:7a:ce:d7:73:81:2a:
                    d2:d4:50:d6:58:14:93:d4:65:28:f1:55:17:fe:88:
                    0d:02:c2:28:5d:61:0f:58:45:69:05:b1:52:e2:da:
                    60:d5:74:b5:7d:4d:dd:e5:02:cf:a6:18:84:c4:34:
                    b0:30:27:9d:af:88:d6:44:2e:4b:35:bc:99:0f:ca:
                    25:cb:c9:3b:07:52:5e:82:0a:4b:d7:8a:b6:c1:8f:
                    30:6f:46:9c:12:2a:58:b5:17:5c:4d:ff:57:88:54:
                    f0:1a:f5:78:41:ee:16:0a:f9:57:a4:90:b3:67:19:
                    42:e0:da:b9:5e:c3:d9:0b:17:b8:4b:f9:ae:09:06:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:19:F2:98:01:CC:21:5F:E8:0B:FC:05:84:0A:B2:EA:79:BA:F8:0E
            X509v3 Authority Key Identifier:
                keyid:15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:12:5f:2e:bb:15:88:5a:b4:56:80:86:2e:00:e6:50:70:fb:
         ce:46:a5:09:2e:1d:53:54:25:d3:54:37:04:13:8d:8a:66:d6:
         15:70:bc:0a:a8:82:76:43:17:b5:a6:55:12:7e:9a:05:eb:19:
         62:46:06:cb:70:ce:df:2e:b5:82:f9:6a:0b:32:a9:7d:c9:09:
         32:75:9a:8f:ae:2d:7c:d9:77:fe:60:68:13:a6:57:45:77:36:
         a6:b6:98:fa:20:d6:19:31:d1:e8:0b:fc:62:26:c5:eb:fd:10:
         1e:e4:60:07:fa:6e:28:5b:db:55:7d:c6:fc:09:20:da:8a:cc:
         4b:96:93:6e:82:2d:34:4f:9e:70:04:a4:08:2f:e1:2b:31:3e:
         f0:74:be:7a:19:4f:52:c0:27:86:78:72:ea:40:f7:a5:a4:7d:
         2a:52:73:80:b5:ed:33:7d:e8:d2:a5:4b:a0:b0:9e:82:6d:4c:
         bf:12:e0:ff:96:79:1e:7d:bf:99:f0:e9:d7:62:78:e7:60:c3:
         0d:d1:0e:0c:a7:51:fd:ca:c6:a3:cc:b8:4b:e4:74:fc:33:37:
         45:16:be:54:a4:a1:f5:17:5e:29:93:28:5f:16:55:f5:9f:fa:
         cf:b9:2c:9c:66:18:f2:25:33:91:28:02:45:f8:68:c6:50:bc:
         ff:3f:f4:0a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTWJnOHTIsGJe841ZZ5FA24cp7jswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYx
Qjk0MEVBNjAeFw0yNjA3MjMyMDU1NDBaFw0yNjA3MjQyMTUzNDBaMDMxMTAvBgNV
BAMTKDU2MTlGMjk4MDFDQzIxNUZFODBCRkMwNTg0MEFCMkVBNzlCQUY4MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZNtsYsjuyZ0ChsiCDcs4C/Js
gH2sLUzB/8WR9CnC6570o28nJT5uoHznS8YVz/f4G92VxQO6pFc9OEmRdrBBl6en
WyCWMj2i4zleyKli3qQicEB7adOVbnYyFeQK6oZfXQ7OuRHYHym6q+auL6Lvl6E2
aZW2SsUPLvRMLqTZQ3rO13OBKtLUUNZYFJPUZSjxVRf+iA0CwihdYQ9YRWkFsVLi
2mDVdLV9Td3lAs+mGITENLAwJ52viNZELks1vJkPyiXLyTsHUl6CCkvXirbBjzBv
RpwSKli1F1xN/1eIVPAa9XhB7hYK+VekkLNnGULg2rlew9kLF7hL+a4JBvDLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVhnymAHMIV/oC/wFhAqy6nm6+A4wHwYDVR0j
BBgwFoAUFT0TKQcDiSDTCHTY4eozFhuUDqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGU2YTU3YzUtZGY3My00M2Y1LTg2NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkw
NzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYxQjk0MEVBNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNTNEMTMyOTA3MDM4OTIwRDMwODc0RDhFMUVBMzMxNjFCOTQw
RUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2
NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMz
MTYxQjk0MEVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIsSXy67FYhatFaAhi4A5lBw+85GpQkuHVNU
JdNUNwQTjYpm1hVwvAqognZDF7WmVRJ+mgXrGWJGBstwzt8utYL5agsyqX3JCTJ1
mo+uLXzZd/5gaBOmV0V3Nqa2mPog1hkx0egL/GImxev9EB7kYAf6bihb21V9xvwJ
INqKzEuWk26CLTRPnnAEpAgv4SsxPvB0vnoZT1LAJ4Z4cupA96WkfSpSc4C17TN9
6NKlS6CwnoJtTL8S4P+WeR59v5nw6ddieOdgww3RDgynUf3KxqPMuEvkdPwzN0UW
vlSkofUXXimTKF8WVfWf+s+5LJxmGPIlM5EoAkX4aMZQvP8/9Ao=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:07 2026 by rpki-client