Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft
File:                     D931809BED9AF438E358376B71B803D5CE61B2F5.mft (raw, json)
Hash identifier:          sEngNyPD84OldRvB4VDUncLbyj/frMRxJR9bvODifLA=
Subject key identifier:   89:57:8D:EE:77:D5:67:78:96:88:C1:10:F0:16:28:09:B7:A4:C8:E1
Authority key identifier: D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5
Certificate issuer:       /CN=D931809BED9AF438E358376B71B803D5CE61B2F5
Certificate serial:       189D822788A5A4100577252659DABAD9D1F93C0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 23:13:12 +0000
Manifest this update:     Thu 23 Jul 2026 23:08:12 +0000
Manifest next update:     Sat 25 Jul 2026 01:36:12 +0000
Files and hashes:         1: D931809BED9AF438E358376B71B803D5CE61B2F5.crl (hash: ApcSwhXDGy+lJZH0MdY+KzZsQSO/J64TkZ3pu1n4XcE=)
                          2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: RKwP+mZy2zIyOi9W+fTg2udU4bmegNaF/ZtZIeSMp7c=)
                          3: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: JqEBH5YvRn5xbIFqmvyQg68HK5OM9z3ELY7zjQkgJLI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl
                          rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9d:82:27:88:a5:a4:10:05:77:25:26:59:da:ba:d9:d1:f9:3c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D931809BED9AF438E358376B71B803D5CE61B2F5
        Validity
            Not Before: Jul 23 23:08:12 2026 GMT
            Not After : Jul 25 01:36:12 2026 GMT
        Subject: CN=89578DEE77D567789688C110F0162809B7A4C8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:21:8c:8f:ef:a3:b1:0c:11:69:d5:3d:d0:
                    12:8c:cd:2a:76:44:4c:07:80:d0:a9:da:c4:a0:51:
                    32:9f:71:90:99:90:ba:e2:a4:97:d9:da:98:85:bb:
                    29:69:69:48:19:23:d1:c2:ba:6c:95:63:85:4c:69:
                    83:41:27:e4:b4:eb:ea:c9:61:93:33:c9:76:cc:76:
                    0c:5d:06:87:87:ef:c6:70:9a:9a:80:15:4e:1a:1a:
                    62:b3:07:19:00:66:c9:5e:93:10:5d:dc:2f:b6:d8:
                    38:ae:81:f8:52:ef:42:b8:f7:9c:c8:e5:20:0a:b2:
                    98:f8:21:22:55:14:42:58:ff:55:6a:78:f6:fa:9b:
                    1d:4e:87:c6:29:d2:82:ed:d3:26:ae:7d:e8:ce:c7:
                    56:41:96:3c:a5:95:58:03:18:da:9b:a4:46:ec:cc:
                    20:b4:47:75:16:cb:08:bb:e0:a9:a4:28:87:d3:37:
                    09:5f:98:78:b7:06:d5:0b:01:6b:65:3d:f1:fa:c4:
                    92:c7:49:58:e2:20:92:61:dd:b0:ef:4b:52:e0:64:
                    86:ab:87:51:8f:fd:c1:b3:6d:dd:1b:3e:f6:eb:68:
                    67:0d:80:2f:6b:aa:88:4e:d6:1e:e8:b7:d7:6d:54:
                    ba:eb:93:81:6d:aa:80:61:5d:3b:cd:47:c3:71:c8:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:8D:EE:77:D5:67:78:96:88:C1:10:F0:16:28:09:B7:A4:C8:E1
            X509v3 Authority Key Identifier:
                keyid:D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:d1:2e:20:de:ce:16:bc:62:22:2a:1a:e0:99:50:53:6d:
         3a:b3:1f:d3:4b:9b:da:68:41:99:27:a2:33:cf:8d:8f:39:90:
         ba:8b:23:58:c4:ed:54:56:9d:3c:a8:46:b3:00:6f:9e:04:61:
         e2:8f:bd:06:3e:b3:fb:4e:9f:41:82:8b:ec:ee:f6:c4:42:2e:
         df:5c:c5:29:82:38:f4:e5:19:11:80:da:e2:c7:ef:91:71:82:
         00:89:06:24:69:74:bf:3f:06:8a:39:c0:61:1d:4d:04:1d:03:
         a0:f2:04:4e:f6:83:79:b6:9f:88:40:f4:14:4d:bc:8b:24:47:
         bf:92:96:e0:97:33:f7:33:ba:fc:21:5a:93:6f:cf:75:88:49:
         f0:58:74:bc:bb:c5:d4:7e:69:e9:06:80:6e:2d:6a:11:fa:04:
         d3:25:96:52:8e:a5:0d:2a:c2:22:1f:6c:07:5e:57:bf:6e:3f:
         9f:66:02:2a:da:18:1e:70:3c:80:18:52:73:c7:ca:1b:f9:f7:
         2e:52:d4:7c:d5:58:45:1f:2e:f8:18:98:a4:38:9c:e0:fc:d4:
         43:13:bc:6b:4a:f1:7f:72:72:0e:25:a3:59:f0:e7:1d:2a:cf:
         95:55:dd:7f:3b:0a:f0:68:be:14:52:cb:32:9a:3b:82:f9:2e:
         91:0c:06:f5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGJ2CJ4ilpBAFdyUmWdq62dH5PA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAzRDVD
RTYxQjJGNTAeFw0yNjA3MjMyMzA4MTJaFw0yNjA3MjUwMTM2MTJaMDMxMTAvBgNV
BAMTKDg5NTc4REVFNzdENTY3Nzg5Njg4QzExMEYwMTYyODA5QjdBNEM4RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTiGMj++jsQwRadU90BKMzSp2
REwHgNCp2sSgUTKfcZCZkLripJfZ2piFuylpaUgZI9HCumyVY4VMaYNBJ+S06+rJ
YZMzyXbMdgxdBoeH78ZwmpqAFU4aGmKzBxkAZslekxBd3C+22DiugfhS70K495zI
5SAKspj4ISJVFEJY/1VqePb6mx1Oh8Yp0oLt0yaufejOx1ZBljyllVgDGNqbpEbs
zCC0R3UWywi74KmkKIfTNwlfmHi3BtULAWtlPfH6xJLHSVjiIJJh3bDvS1LgZIar
h1GP/cGzbd0bPvbraGcNgC9rqohO1h7ot9dtVLrrk4FtqoBhXTvNR8NxyIuJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiVeN7nfVZ3iWiMEQ8BYoCbekyOEwHwYDVR0j
BBgwFoAU2TGAm+2a9DjjWDdrcbgD1c5hsvUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjBlMTFmZmMtZTc1YS00YmY0LTg0NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJF
RDlBRjQzOEUzNTgzNzZCNzFCODAzRDVDRTYxQjJGNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EOTMxODA5QkVEOUFGNDM4RTM1ODM3NkI3MUI4MDNENUNFNjFC
MkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0
NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAz
RDVDRTYxQjJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADzf0S4g3s4WvGIiKhrgmVBTbTqzH9NLm9po
QZknojPPjY85kLqLI1jE7VRWnTyoRrMAb54EYeKPvQY+s/tOn0GCi+zu9sRCLt9c
xSmCOPTlGRGA2uLH75FxggCJBiRpdL8/Boo5wGEdTQQdA6DyBE72g3m2n4hA9BRN
vIskR7+SluCXM/czuvwhWpNvz3WISfBYdLy7xdR+aekGgG4tahH6BNMlllKOpQ0q
wiIfbAdeV79uP59mAiraGB5wPIAYUnPHyhv59y5S1HzVWEUfLvgYmKQ4nOD81EMT
vGtK8X9ycg4lo1nw5x0qz5VV3X87CvBovhRSyzKaO4L5LpEMBvU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:34 2026 by rpki-client