Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
File:                     AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft (raw, json)
Hash identifier:          +FDbm9S3W0EMm0366WKjhau3LIgQn5MEOErPYFKV6TA=
Subject key identifier:   D0:4C:92:EB:3A:1B:41:29:B7:34:8A:5A:D5:38:2D:C7:07:5A:39:4B
Authority key identifier: AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B
Certificate issuer:       /CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
Certificate serial:       40BE5CE3EF8D4E3F7CC570415C60BADF026F78DD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 20:40:11 +0000
Manifest this update:     Thu 23 Jul 2026 20:35:11 +0000
Manifest next update:     Fri 24 Jul 2026 21:09:11 +0000
Files and hashes:         1: AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl (hash: 7AWCdkv139zHUrzy5eTtyolRvEh6rqpcM3Qwl+75Z6I=)
                          2: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: mIxFRHOE8DmYRrXlDisTfwK6lb1/0VKqM0Rpgtaxvto=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl
                          rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:be:5c:e3:ef:8d:4e:3f:7c:c5:70:41:5c:60:ba:df:02:6f:78:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
        Validity
            Not Before: Jul 23 20:35:11 2026 GMT
            Not After : Jul 24 21:09:11 2026 GMT
        Subject: CN=D04C92EB3A1B4129B7348A5AD5382DC7075A394B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:3b:6f:fa:14:9f:8d:7a:d5:b0:07:ce:42:
                    72:ca:b1:fe:d8:ea:9b:06:ef:0e:63:c4:89:f7:f9:
                    18:e5:19:e9:3b:01:38:6a:a4:e1:af:b4:a8:71:34:
                    3f:3b:7a:69:c5:45:04:bb:c8:49:ca:9a:b6:a1:dc:
                    66:1f:0d:81:30:93:db:61:12:67:79:18:25:4b:bc:
                    ae:cc:e3:ae:58:aa:b3:c3:b0:19:fc:24:e4:76:5e:
                    97:7d:33:45:f7:d2:14:ea:4b:80:a3:54:04:15:db:
                    8f:d3:3f:b3:ca:f3:0f:35:f2:44:16:1b:8d:0a:88:
                    10:44:c3:fd:dc:9b:07:04:ab:fa:c3:45:f8:43:4f:
                    95:78:55:b1:9e:df:d2:00:1c:ac:55:93:55:8e:6d:
                    9d:69:70:d2:1f:77:1d:5e:54:ce:07:91:4c:16:a3:
                    4c:1d:37:11:71:07:66:46:32:69:91:dd:f2:85:4a:
                    57:c1:2a:09:f5:f1:37:41:d7:40:e2:8f:8a:c7:8d:
                    92:a4:16:6b:c8:db:3b:ef:13:e3:de:89:d1:04:43:
                    8e:49:aa:45:4b:fc:bc:37:52:8a:b1:87:3f:91:21:
                    da:14:f6:45:b8:9b:e5:5a:64:e7:45:df:1e:0a:3c:
                    3a:b3:c9:43:2b:c7:3f:f2:d6:c3:78:f7:77:3e:93:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4C:92:EB:3A:1B:41:29:B7:34:8A:5A:D5:38:2D:C7:07:5A:39:4B
            X509v3 Authority Key Identifier:
                keyid:AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ca:8f:22:e7:ee:a3:6a:68:48:8d:4b:3e:db:55:34:8e:07:
         20:4e:29:4e:01:95:c0:e6:4a:3e:7e:e6:9d:a5:b1:0e:f4:2e:
         07:82:6f:32:d7:fd:d3:42:c8:c2:68:dd:61:52:ba:45:fa:45:
         b8:fd:03:19:e5:66:45:16:00:be:3a:91:db:8b:a9:6f:55:69:
         a3:31:7c:2f:ba:5f:fb:f8:50:bf:5d:a8:00:19:36:c7:2e:cc:
         87:68:ea:65:fc:14:2a:b5:25:12:97:34:c4:48:85:7f:97:0c:
         d5:8c:ef:ae:4f:24:bd:df:6b:83:1c:b4:9b:22:ba:e2:d4:6a:
         68:fe:85:84:b9:a5:8b:d5:cf:0b:19:7e:45:0e:5d:b4:ff:52:
         1e:05:35:a9:53:4f:7b:3b:99:2d:1a:f4:ad:38:23:ad:81:e5:
         69:0e:33:1b:4b:bc:f0:a8:25:1a:00:2d:7b:39:32:08:80:16:
         73:88:f4:06:eb:58:ff:47:5e:c9:04:69:47:09:35:88:3f:10:
         1c:55:88:32:a8:a5:7d:42:82:bd:84:2b:26:66:30:7b:a0:f9:
         fd:e2:85:72:dc:da:4d:90:b0:83:cf:b4:13:6a:2f:b0:91:2e:
         ad:72:a1:02:ce:ae:02:fe:f0:17:b8:b2:e1:aa:64:04:d3:7a:
         b1:3c:cb:6c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQL5c4++NTj98xXBBXGC63wJveN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2MjRB
QTIxMDI4QjAeFw0yNjA3MjMyMDM1MTFaFw0yNjA3MjQyMTA5MTFaMDMxMTAvBgNV
BAMTKEQwNEM5MkVCM0ExQjQxMjlCNzM0OEE1QUQ1MzgyREM3MDc1QTM5NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oztv+hSfjXrVsAfOQnLKsf7Y
6psG7w5jxIn3+RjlGek7AThqpOGvtKhxND87emnFRQS7yEnKmrah3GYfDYEwk9th
Emd5GCVLvK7M465YqrPDsBn8JOR2Xpd9M0X30hTqS4CjVAQV24/TP7PK8w818kQW
G40KiBBEw/3cmwcEq/rDRfhDT5V4VbGe39IAHKxVk1WObZ1pcNIfdx1eVM4HkUwW
o0wdNxFxB2ZGMmmR3fKFSlfBKgn18TdB10Dij4rHjZKkFmvI2zvvE+PeidEEQ45J
qkVL/Lw3Uoqxhz+RIdoU9kW4m+VaZOdF3x4KPDqzyUMrxz/y1sN493c+k+kbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0EyS6zobQSm3NIpa1TgtxwdaOUswHwYDVR0j
BBgwFoAUrYzOZBLkdk+1yb34MfgGJKohAoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmFlNGNkOTYtY2ZjMS00NTc3LWFkM2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQx
MkU0NzY0RkI1QzlCREY4MzFGODA2MjRBQTIxMDI4Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRDhDQ0U2NDEyRTQ3NjRGQjVDOUJERjgzMUY4MDYyNEFBMjEw
MjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk
M2YtNzk4M2MwNTIzYzEwLzAvQUQ4Q0NFNjQxMkU0NzY0RkI1QzlCREY4MzFGODA2
MjRBQTIxMDI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE/KjyLn7qNqaEiNSz7bVTSOByBOKU4BlcDm
Sj5+5p2lsQ70LgeCbzLX/dNCyMJo3WFSukX6Rbj9AxnlZkUWAL46kduLqW9VaaMx
fC+6X/v4UL9dqAAZNscuzIdo6mX8FCq1JRKXNMRIhX+XDNWM765PJL3fa4MctJsi
uuLUamj+hYS5pYvVzwsZfkUOXbT/Uh4FNalTT3s7mS0a9K04I62B5WkOMxtLvPCo
JRoALXs5MgiAFnOI9AbrWP9HXskEaUcJNYg/EBxViDKopX1Cgr2EKyZmMHug+f3i
hXLc2k2QsIPPtBNqL7CRLq1yoQLOrgL+8Be4suGqZATTerE8y2w=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:02 2026 by rpki-client