Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
File:                     90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft (raw, json)
Hash identifier:          LR9XWWME+EcBxjitVI7fDYU0mJbNRTMBDNWMjCOhb5U=
Subject key identifier:   81:C7:E7:BE:19:FA:0E:28:D5:5A:48:14:FB:0A:2C:A0:9A:91:2D:25
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Certificate issuer:       /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial:       51AAC450821C32BF65076BD652B8DFC8BE4A30FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 18:02:05 +0000
Manifest this update:     Thu 23 Jul 2026 17:57:05 +0000
Manifest next update:     Fri 24 Jul 2026 18:54:05 +0000
Files and hashes:         1: 3130332e32342e31322e302f32332d3233203d3e20313332363434.roa (hash: XA49llIDJReIFYpde7BLF2WOb/sWo1hTC8oVNheJ18c=)
                          2: 90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl (hash: 1txBS368kNCb+r1AmF9ZVPyokiWGMRN2AI5AGZQBfMs=)
                          3: 3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa (hash: cdYCODbpzOPcSEGOyln69IWngFwXNw8457vXW43CyIQ=)
                          4: 3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa (hash: YrsTK2Y9639gKpZZNuXe3bw5wGTnhWGGPOil0c8e8wM=)
                          5: 34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa (hash: LSiSWeahGCiGQr2oAGZdxTD7aS5l5Mx3rTY5xcHY1Cs=)
                          6: 3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa (hash: 8AEGQtXK/Xs1e1cVuxnjNRKg/MkAzKUk0OckBlGEiL4=)
                          7: 3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa (hash: ZplGjQm5AJToWkOfjaun30sMJtYUPIBMV0JqNXb3aqs=)
                          8: 3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa (hash: 97HEq762ggjb36ObJvOB+0O4UVTOw9S1KAUH3wNcpO4=)
                          9: 3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa (hash: PViwWNE+NG9X47qSPjKfZGqholiuXSr1ZOEfMgtcqX0=)
                          10: 3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa (hash: RBFdUHZpMD/gDIa6CRB91FevIsYdigIpmwwSIwzhi98=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
                          rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:aa:c4:50:82:1c:32:bf:65:07:6b:d6:52:b8:df:c8:be:4a:30:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
        Validity
            Not Before: Jul 23 17:57:05 2026 GMT
            Not After : Jul 24 18:54:05 2026 GMT
        Subject: CN=81C7E7BE19FA0E28D55A4814FB0A2CA09A912D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:91:12:11:f3:a4:26:72:93:ef:e2:0d:db:
                    c2:ce:c7:10:a6:4f:43:9d:ac:50:98:55:d8:91:43:
                    54:b5:25:8d:54:a3:d3:8b:25:12:83:6d:17:7d:ee:
                    47:ea:50:9e:1a:77:55:9b:53:14:08:a2:f9:10:d6:
                    23:64:76:d7:05:70:85:82:45:0d:56:ea:71:46:d9:
                    4f:94:7f:77:7b:5e:74:4c:e1:31:99:86:9f:7b:b4:
                    4d:55:8e:f3:15:70:f9:47:d7:24:24:75:e8:98:db:
                    0c:3a:e6:bf:94:be:a8:1a:95:69:f5:28:5b:90:ff:
                    f9:90:a8:1d:b5:2c:17:4f:8e:82:a8:74:70:90:a7:
                    68:d1:7f:47:98:d1:e1:c9:f6:55:5c:bc:bc:26:47:
                    d7:28:fa:25:05:25:22:4d:f9:22:f9:0f:ca:cb:37:
                    48:ce:5b:a7:57:0c:a4:30:ed:4a:7f:f4:b0:75:3b:
                    5c:5b:de:20:9d:a3:f6:82:67:2e:7e:97:08:2e:a4:
                    8b:46:87:b6:dd:64:00:33:fd:76:81:70:95:7d:9e:
                    a8:ea:d3:b5:06:18:c6:33:53:e1:fe:80:86:3a:e5:
                    e3:3a:34:c4:5d:bd:32:e0:31:60:d3:87:17:a5:6d:
                    c8:88:ef:32:93:db:87:1b:c0:a2:12:ac:c2:6f:84:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C7:E7:BE:19:FA:0E:28:D5:5A:48:14:FB:0A:2C:A0:9A:91:2D:25
            X509v3 Authority Key Identifier:
                keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:74:da:1e:34:01:2b:50:63:7b:31:ad:50:08:84:c2:1b:87:
         c0:3c:59:e8:a1:e0:3d:92:f7:60:c7:c8:1c:ce:cf:7e:c9:b9:
         d7:14:1c:13:a5:85:09:95:ca:5c:dc:27:4e:af:64:39:78:99:
         cb:d6:1b:bd:d5:6d:df:19:22:28:21:c5:d2:7f:0a:00:29:c7:
         99:bb:2e:4f:df:03:df:17:3e:6a:1d:f2:c2:19:74:d8:a6:67:
         39:e8:eb:e0:13:5b:47:20:7f:37:31:f7:17:f7:9c:4c:66:f8:
         27:ac:ff:72:60:4b:8c:66:7d:9d:dc:00:8e:22:a1:16:c9:a6:
         c4:95:f2:a2:26:d3:6c:46:1a:84:64:d9:37:e9:d4:63:79:c7:
         49:e3:4e:ce:7b:7b:a9:f5:58:22:a9:0e:91:c3:73:df:16:4e:
         f1:58:28:be:32:e6:85:58:9a:1c:bf:25:57:45:11:bf:d5:01:
         ce:88:f9:05:0e:a5:8c:18:2c:fe:d7:3f:47:f7:39:7d:9e:5b:
         d9:3d:2e:de:6b:c1:ab:37:83:51:58:1b:c6:ba:3f:10:7a:80:
         8e:78:ef:6c:f8:61:f0:ff:5e:a8:e9:64:7e:b0:60:60:f4:1c:
         7b:63:b1:9e:cd:78:94:c1:67:59:1b:ab:8b:d2:7f:5f:90:96:
         81:af:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:12 2026 by rpki-client