Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
File:                     90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft (raw, json)
Hash identifier:          V5Tqshoy+zO2f6ihbGzc0CGidQoex/OpkOiBB5cHBTE=
Subject key identifier:   BA:AE:6D:7D:1D:D5:57:67:64:1C:C0:20:32:60:29:62:BB:42:23:80
Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D
Certificate issuer:       /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
Certificate serial:       6BFCD2F5C66B08BB95352C9A364FAA402FC73661
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 02:11:57 +0000
Manifest this update:     Fri 24 Jul 2026 02:06:57 +0000
Manifest next update:     Sat 25 Jul 2026 03:35:57 +0000
Files and hashes:         1: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: KvOleZIfcn6EoZkKf6ZdFcLhmThnSWrW2/dXX/n7URA=)
                          2: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: FSyjqZtd8XDVrxqAKcbaFrMIwjpkZU6OHpA9ABCfhcY=)
                          3: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: k5tpWx2NqoJhL6Gv4Q6AOH3uxzUVB7/CghrllRzLLUQ=)
                          4: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=)
                          5: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl (hash: FNjyCa1j+7S5OIcxpUBWYlKDRPQ1y7QXYD1VyvPrEtE=)
                          6: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: dXDKfmvmczU9aYgLQYslTHLZ6G4+e/q+u9H8ndaerLU=)
                          7: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: BNrW0eQU53nT/ba5DR3gG5VeToq8WtIzwdZt0XrzHK8=)
                          8: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: ytetHbaOFcdooikcS2dP3RfK75XM1xqRpP+fXSjDKG0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl
                          rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fc:d2:f5:c6:6b:08:bb:95:35:2c:9a:36:4f:aa:40:2f:c7:36:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
        Validity
            Not Before: Jul 24 02:06:57 2026 GMT
            Not After : Jul 25 03:35:57 2026 GMT
        Subject: CN=BAAE6D7D1DD55767641CC02032602962BB422380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:e6:83:6b:7e:44:98:32:37:1b:da:cd:b5:
                    da:98:5e:25:cb:ad:db:ed:cb:1a:a9:4d:4a:83:06:
                    d4:65:c3:d7:51:52:fe:28:34:a5:ca:e4:80:b5:db:
                    58:c8:bb:a9:17:58:5d:c9:66:12:2a:48:94:ad:eb:
                    81:f8:23:e8:3b:96:4d:9a:c4:53:cc:c1:63:7f:b2:
                    79:1e:a4:40:57:cc:ac:19:1d:9c:02:ee:77:9d:9e:
                    9e:ab:7a:c0:dd:64:f3:06:c9:67:fd:ab:bf:ce:4a:
                    02:8e:ae:3a:f6:d6:4b:a4:1a:64:4f:7d:da:13:c7:
                    b1:fc:db:2e:25:bb:44:65:6b:28:a6:a8:55:48:a2:
                    b3:d0:0d:e2:b8:a1:64:c5:fc:c6:49:53:a1:96:f2:
                    2f:d4:9a:af:07:68:51:c8:f5:e3:e6:6b:c3:90:32:
                    a6:68:8f:bb:72:df:86:a5:e8:60:16:79:fe:3f:df:
                    71:7f:ba:9d:7a:fc:c6:1d:a9:08:79:12:a9:24:b0:
                    cb:36:dc:31:9a:28:cf:1d:d7:2e:f5:66:15:21:7d:
                    25:68:3b:8c:14:af:98:c4:0d:2b:5c:dd:6e:de:45:
                    91:44:8a:80:54:3a:e7:7f:f4:b0:ea:f9:f6:67:bd:
                    24:8f:9e:c7:72:d8:42:67:30:46:01:2c:b8:61:80:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AE:6D:7D:1D:D5:57:67:64:1C:C0:20:32:60:29:62:BB:42:23:80
            X509v3 Authority Key Identifier:
                keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c9:c8:91:68:82:0e:ca:77:d6:2b:49:41:74:de:39:59:26:
         e1:d1:31:65:fe:fb:19:64:7d:c0:ba:aa:98:bc:e4:7f:c1:93:
         70:ad:f4:e7:78:e0:38:eb:7b:12:2b:7a:04:a2:c7:19:d3:9e:
         24:46:58:c9:d2:64:e1:53:48:73:fd:c3:0e:90:f5:64:1c:a2:
         aa:86:30:64:a3:0e:58:08:5b:42:fe:11:cc:8a:44:3a:dd:dd:
         a5:5e:35:be:f7:7a:8a:9e:71:15:fb:a9:21:a7:ea:84:2c:5d:
         29:76:b9:e2:51:bd:12:1b:a7:18:73:95:70:69:44:4b:12:d7:
         1d:0d:10:e6:2b:0f:b1:b3:76:e1:85:82:71:df:d4:fb:bc:53:
         96:f1:d3:67:e9:4e:24:96:97:44:0d:60:4b:b7:9c:b5:b6:5b:
         72:61:3f:36:98:57:06:00:09:fe:f3:95:d6:e8:11:69:07:79:
         d5:bf:64:af:ec:30:7d:84:28:f2:d5:17:ec:34:0a:45:36:44:
         08:61:8b:63:f7:38:e9:14:98:62:b1:ea:52:43:d9:6d:ac:00:
         06:61:75:b1:c3:f8:f4:0c:e1:79:f1:bf:1b:c4:7d:d5:6c:32:
         fc:9a:67:93:b2:2d:e8:89:40:63:dc:77:fb:0e:8c:0f:d0:b8:
         7e:9d:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:40 2026 by rpki-client