Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft
File:                     A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft (raw, json)
Hash identifier:          jE0g863ty/AHjwUPycK+2DFA2ln82jzvFY5R6IBFxos=
Subject key identifier:   4B:9E:3E:D6:09:EC:E0:2D:D2:55:26:1B:7B:94:CD:30:50:C7:39:B9
Authority key identifier: A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47
Certificate issuer:       /CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47
Certificate serial:       6A53DA27BA408EAD751304E47C863B263E9576BA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 01:25:56 +0000
Manifest this update:     Fri 24 Jul 2026 01:20:56 +0000
Manifest next update:     Sat 25 Jul 2026 02:26:56 +0000
Files and hashes:         1: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: gHOFFAMzJX67LZAd50wxnRJO1gH2l+8DoQ6h8IDez6o=)
                          2: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl (hash: a8qR6iLjwxWVV0g1XKIbL9SHH6NrBLsm6qOWcsNo3Io=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl
                          rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:53:da:27:ba:40:8e:ad:75:13:04:e4:7c:86:3b:26:3e:95:76:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47
        Validity
            Not Before: Jul 24 01:20:56 2026 GMT
            Not After : Jul 25 02:26:56 2026 GMT
        Subject: CN=4B9E3ED609ECE02DD255261B7B94CD3050C739B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:e7:5a:04:9b:6c:7d:59:72:29:a6:b1:47:
                    67:4a:92:bd:d9:00:5c:9d:37:0d:1d:d9:14:e1:26:
                    30:fe:04:c1:6d:29:6f:36:39:a3:6d:ac:a5:c1:b7:
                    a7:56:04:c2:7d:6a:92:a9:61:98:e8:21:1e:7f:b0:
                    6d:c9:b7:86:0c:91:bf:3c:10:f8:ab:7a:92:11:fd:
                    ba:db:7b:90:8e:01:50:02:de:f5:86:a0:72:61:4d:
                    81:9a:dc:89:da:f9:be:54:93:a3:ff:ce:88:cf:5a:
                    87:a6:d6:01:4d:fb:fd:ee:6e:7f:bc:75:47:90:94:
                    4e:7e:bc:41:5c:87:94:0e:a4:90:15:b8:67:0c:51:
                    ff:15:bc:77:f2:1b:3e:b1:bd:e4:e2:8f:63:e5:60:
                    be:f0:2d:f2:c9:8f:7c:d1:89:ee:c9:a2:69:a5:03:
                    a5:71:42:82:87:17:78:f1:3f:d7:c1:00:2b:30:b9:
                    8a:e7:41:97:7d:82:38:1f:1c:70:f0:58:57:1e:97:
                    d1:d9:36:0c:83:76:d5:0f:b4:80:73:5f:ff:1e:85:
                    0a:66:aa:a6:42:b8:f1:71:22:f9:49:20:fa:c4:95:
                    79:f3:bf:6d:b2:18:ec:41:d8:4b:85:29:d5:46:72:
                    37:1a:a6:55:8e:14:fe:cb:39:07:0d:e0:20:a5:5c:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9E:3E:D6:09:EC:E0:2D:D2:55:26:1B:7B:94:CD:30:50:C7:39:B9
            X509v3 Authority Key Identifier:
                keyid:A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:f0:f0:57:e6:18:b3:d7:ea:6c:a1:18:9f:15:70:6b:4a:
         0a:55:d1:cb:95:6f:d3:40:54:96:7b:5a:fc:de:75:57:49:0a:
         e9:a8:05:c1:81:fe:b3:68:fb:95:03:46:b4:e4:d3:4d:11:d4:
         92:b5:12:74:00:e8:0f:67:1d:b4:ea:8e:a9:c1:50:88:a6:0f:
         ad:be:1f:03:4a:5c:5f:89:ce:a2:50:bb:42:87:ce:ee:ff:a2:
         22:97:49:1d:f2:a0:e2:0b:6e:a7:0a:af:2b:e8:e0:76:b0:13:
         ea:47:24:6e:e0:d0:36:be:e6:19:58:89:df:79:7a:aa:9d:c7:
         89:84:3f:a7:62:3b:bb:f3:77:88:04:71:e0:2a:c6:52:a3:2c:
         03:80:85:89:24:34:e0:72:31:20:42:b3:68:0b:bb:60:52:20:
         ca:41:db:67:4f:ef:8b:8b:3e:c5:01:80:4b:00:f5:34:05:b0:
         c8:b2:5c:72:9b:7f:7b:bd:dc:29:1a:03:f0:84:33:a2:cf:34:
         2f:ac:0e:8c:99:c3:e6:b7:67:63:cb:41:33:86:8a:c1:bb:11:
         af:79:b1:04:a4:ea:d7:8e:07:95:8b:92:08:7b:97:44:65:e2:
         e7:df:c7:af:82:bd:d2:aa:23:bf:f0:f6:d7:2a:c2:83:96:c3:
         31:18:4f:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUalPaJ7pAjq11EwTkfIY7Jj6VdrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5
MjhDNUM0NzAeFw0yNjA3MjQwMTIwNTZaFw0yNjA3MjUwMjI2NTZaMDMxMTAvBgNV
BAMTKDRCOUUzRUQ2MDlFQ0UwMkREMjU1MjYxQjdCOTRDRDMwNTBDNzM5QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7+daBJtsfVlyKaaxR2dKkr3Z
AFydNw0d2RThJjD+BMFtKW82OaNtrKXBt6dWBMJ9apKpYZjoIR5/sG3Jt4YMkb88
EPirepIR/brbe5COAVAC3vWGoHJhTYGa3Ina+b5Uk6P/zojPWoem1gFN+/3ubn+8
dUeQlE5+vEFch5QOpJAVuGcMUf8VvHfyGz6xveTij2PlYL7wLfLJj3zRie7Jomml
A6VxQoKHF3jxP9fBACswuYrnQZd9gjgfHHDwWFcel9HZNgyDdtUPtIBzX/8ehQpm
qqZCuPFxIvlJIPrElXnzv22yGOxB2EuFKdVGcjcaplWOFP7LOQcN4CClXAaRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUS54+1gns4C3SVSYbe5TNMFDHObkwHwYDVR0j
BBgwFoAUpxxvOeu/zA3xDE1tu3JV5pKMXEcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjA0ZTk3ZDMtNzFjMy00ZDBhLThiMDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlF
QkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5MjhDNUM0Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNzFDNkYzOUVCQkZDQzBERjEwQzRENkRCQjcyNTVFNjkyOEM1
QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi
MDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1
RTY5MjhDNUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAQ/8PBX5hiz1+psoRifFXBrSgpV0cuVb9NA
VJZ7WvzedVdJCumoBcGB/rNo+5UDRrTk000R1JK1EnQA6A9nHbTqjqnBUIimD62+
HwNKXF+JzqJQu0KHzu7/oiKXSR3yoOILbqcKryvo4HawE+pHJG7g0Da+5hlYid95
eqqdx4mEP6diO7vzd4gEceAqxlKjLAOAhYkkNOByMSBCs2gLu2BSIMpB22dP74uL
PsUBgEsA9TQFsMiyXHKbf3u93CkaA/CEM6LPNC+sDoyZw+a3Z2PLQTOGisG7Ea95
sQSk6teOB5WLkgh7l0Rl4uffx6+CvdKqI7/w9tcqwoOWwzEYT/E=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:12 2026 by rpki-client