Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
File:                     95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft (raw, json)
Hash identifier:          gmjPkZByZc3aX5DD4d7GNjTxDejIyvz9sYRCPge36II=
Subject key identifier:   86:72:75:B2:91:29:F2:00:F9:0B:8F:7A:CB:F1:FF:01:F8:C7:19:3F
Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36
Certificate issuer:       /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
Certificate serial:       3BA0119AE5916DDDF023E236D0D9FD912E349A9D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 18:58:18 +0000
Manifest this update:     Thu 23 Jul 2026 18:53:18 +0000
Manifest next update:     Fri 24 Jul 2026 21:10:18 +0000
Files and hashes:         1: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl (hash: etp7ScMqDBe3jaOvpJwsrh1dJrtM0whWu3n0SeWjCiE=)
                          2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl
                          rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a0:11:9a:e5:91:6d:dd:f0:23:e2:36:d0:d9:fd:91:2e:34:9a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36
        Validity
            Not Before: Jul 23 18:53:18 2026 GMT
            Not After : Jul 24 21:10:18 2026 GMT
        Subject: CN=867275B29129F200F90B8F7ACBF1FF01F8C7193F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1c:b2:b9:e6:57:76:46:36:98:99:8c:9d:bd:
                    6e:90:99:ba:3d:1d:e3:02:fd:91:b8:07:14:80:1b:
                    bd:75:05:e4:40:59:03:1f:22:98:93:c6:70:00:1e:
                    ae:04:df:6d:23:1e:b7:49:08:17:0d:74:a1:1d:f0:
                    23:25:20:4a:0b:a0:45:e7:f0:fe:68:e7:0a:4a:a7:
                    07:c8:21:7d:af:23:51:ad:6c:a8:81:31:4b:24:d5:
                    cc:39:e6:c5:66:6e:92:dd:88:d9:a1:c6:c4:d0:a8:
                    85:af:7f:1f:4e:f9:57:98:5f:93:a9:1a:57:d4:9e:
                    0c:19:3c:e6:84:1b:ba:9a:65:16:51:e9:0b:d1:a7:
                    80:b1:ff:97:17:14:6e:db:27:4a:dd:ea:76:72:de:
                    b1:ee:02:01:02:5b:2f:f4:54:70:12:cf:e4:1f:5c:
                    6f:ed:49:55:b7:31:d2:6c:b6:0f:20:a1:57:be:0e:
                    3b:04:7f:03:b9:0c:15:84:70:d1:ca:79:2a:ce:ba:
                    bc:10:c1:88:17:ce:e1:fb:ff:28:a0:cd:01:8b:79:
                    f9:40:2d:ed:18:50:b1:a2:95:15:6e:bf:be:10:e4:
                    f7:50:4f:9d:62:f8:9d:c7:b6:56:8b:8f:91:76:53:
                    7f:cb:14:2e:6c:38:af:bf:d6:3e:bb:a6:33:2b:33:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:72:75:B2:91:29:F2:00:F9:0B:8F:7A:CB:F1:FF:01:F8:C7:19:3F
            X509v3 Authority Key Identifier:
                keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1a:20:10:64:04:8b:1d:d1:83:36:c8:45:7a:d5:34:29:d6:
         6b:bb:27:a9:d2:09:1d:b0:ba:44:fb:1a:5f:f7:72:57:ce:ea:
         70:50:2d:1b:a4:76:1c:ab:b6:7a:48:c4:56:09:e7:57:9a:a4:
         8b:46:88:bd:0d:18:57:5e:9d:a9:8b:95:24:1a:cc:d2:f6:d1:
         20:19:d6:33:64:9a:34:2e:1c:02:40:50:4d:ba:ff:c9:d4:c9:
         c5:91:69:10:19:5b:90:fa:d1:55:b0:20:f8:b3:38:62:40:e5:
         5b:fe:c0:21:6c:55:26:80:47:75:3e:a1:6c:a5:62:9f:dd:ec:
         93:8c:6d:1a:fe:13:60:08:0c:21:f2:5f:7b:37:a0:a8:01:87:
         1e:70:c0:23:ae:14:15:53:4e:de:63:15:6e:f4:45:f5:c2:a5:
         94:21:80:43:ac:62:66:bb:65:a4:05:0a:14:bf:b5:e2:91:9a:
         2e:8e:70:36:4c:94:d3:72:b0:9c:90:e9:48:52:34:e3:04:56:
         8f:a1:e3:9f:2c:7a:78:ee:ca:3c:7b:e0:04:fe:d0:6e:47:60:
         66:f6:dc:03:45:b0:3d:64:e4:38:6f:88:22:7f:1c:16:a9:4f:
         9c:8a:53:be:57:f0:04:36:08:eb:6d:fc:ec:35:3a:76:6a:43:
         d6:71:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:43 2026 by rpki-client