Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft
File:                     1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft (raw, json)
Hash identifier:          i8SxeVBeYaac6nRyTps2wTnnDSS0Qc0hhjq46rja0js=
Subject key identifier:   22:08:64:29:48:54:6C:60:CD:07:32:02:87:C7:D8:C8:48:85:98:C0
Authority key identifier: 1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0
Certificate issuer:       /CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0
Certificate serial:       3F89337F825F224DD92D791258CA0E895C23B291
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft
Manifest number:          69
Signing time:             Sun 19 Jul 2026 10:50:10 +0000
Manifest this update:     Sun 19 Jul 2026 10:45:10 +0000
Manifest next update:     Mon 20 Jul 2026 12:20:10 +0000
Files and hashes:         1: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: u/1jDxUqM/7ncceawRPeB2DW2rEBNRQs2Nl3FA3lKkg=)
                          2: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl (hash: dwldgdVYh9hhSYlDiGXhnFWLwtCBNwliVwhuh8M+zyA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl
                          rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:89:33:7f:82:5f:22:4d:d9:2d:79:12:58:ca:0e:89:5c:23:b2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0
        Validity
            Not Before: Jul 19 10:45:10 2026 GMT
            Not After : Jul 20 12:20:10 2026 GMT
        Subject: CN=2208642948546C60CD07320287C7D8C8488598C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:67:56:63:29:66:c1:6e:3f:bc:38:58:d9:
                    48:e0:b3:5b:22:d2:ec:51:26:15:c9:18:18:58:0f:
                    ce:32:b4:e7:ac:87:55:fa:c9:86:95:3d:f5:6e:fe:
                    14:b3:0f:e2:36:9a:7b:cc:fa:0e:60:4c:5d:fd:c3:
                    17:32:54:68:77:e7:6f:c1:23:31:bc:3a:6a:86:38:
                    c5:a0:5b:0e:61:2e:87:70:39:35:48:1a:5a:a0:ef:
                    0c:46:51:b5:35:00:7a:ad:c4:86:99:79:74:7f:f7:
                    15:b7:1b:04:c0:10:13:7a:f6:95:f7:5e:8d:d8:96:
                    22:76:59:11:6c:79:d7:fb:8a:4e:de:e1:37:8f:97:
                    11:f6:58:69:d2:fe:fc:d3:25:4d:80:23:33:83:f4:
                    c4:81:e4:39:bb:fe:67:28:96:c7:5b:de:8d:db:2c:
                    ed:59:4e:c0:9f:dc:1b:f3:06:e9:a0:29:c4:9d:fc:
                    63:fb:0a:0c:2d:a8:17:c2:c8:64:70:1f:83:c0:3b:
                    4d:6f:1b:64:82:ca:88:fb:fc:5f:c8:7b:a9:06:dc:
                    ca:a9:9a:68:fa:3a:85:6d:00:7a:17:0d:8e:7a:cf:
                    f8:d8:f3:67:4f:b5:65:57:2a:8d:d2:6a:58:35:eb:
                    4b:d3:4b:21:e7:8b:78:aa:7b:4b:c3:a3:51:f6:30:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:08:64:29:48:54:6C:60:CD:07:32:02:87:C7:D8:C8:48:85:98:C0
            X509v3 Authority Key Identifier:
                keyid:1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:26:1e:0d:c5:5b:12:44:fa:15:40:f0:c2:41:58:a9:9b:d0:
         cb:c2:86:40:35:de:90:69:52:8c:f9:27:85:ef:27:9b:5e:ee:
         d3:40:47:79:10:af:04:b0:9e:76:ed:8a:73:bb:9a:5f:6a:66:
         8d:ed:20:60:f5:c0:c8:75:2e:56:cb:35:75:9b:54:6a:c6:dc:
         bc:7a:21:71:9c:18:47:b1:1c:1c:79:bf:fb:43:6b:6b:13:60:
         a1:35:8e:b6:0f:55:4f:9d:b9:9c:21:1f:97:b4:60:a6:22:de:
         bf:d4:23:73:0d:47:86:03:eb:5e:f3:d0:b8:37:69:fc:96:6b:
         75:19:24:28:77:b4:58:13:7c:c9:0b:ab:df:57:02:13:a5:14:
         c6:67:63:51:10:11:24:4b:bc:88:1a:00:3c:e8:fc:6c:5b:5f:
         74:9c:a7:79:33:d5:d9:47:d4:f3:f7:fc:e1:e0:f1:9f:7d:4b:
         28:85:16:ea:36:67:74:80:35:30:54:e8:07:8f:40:33:57:37:
         19:e6:2a:d9:89:91:a4:83:7d:36:3d:ec:87:49:34:13:a7:66:
         df:3a:83:bb:91:24:c0:24:cf:a5:2e:67:59:d0:38:3d:5a:14:
         bf:33:92:cf:e3:c9:9e:2e:31:f9:94:99:01:3f:b4:6b:b2:74:
         d8:e6:4c:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP4kzf4JfIk3ZLXkSWMoOiVwjspEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1
OTJDOUFGMDAeFw0yNjA3MTkxMDQ1MTBaFw0yNjA3MjAxMjIwMTBaMDMxMTAvBgNV
BAMTKDIyMDg2NDI5NDg1NDZDNjBDRDA3MzIwMjg3QzdEOEM4NDg4NTk4QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQGdWYylmwW4/vDhY2Ujgs1si
0uxRJhXJGBhYD84ytOesh1X6yYaVPfVu/hSzD+I2mnvM+g5gTF39wxcyVGh352/B
IzG8OmqGOMWgWw5hLodwOTVIGlqg7wxGUbU1AHqtxIaZeXR/9xW3GwTAEBN69pX3
Xo3YliJ2WRFsedf7ik7e4TePlxH2WGnS/vzTJU2AIzOD9MSB5Dm7/mcolsdb3o3b
LO1ZTsCf3BvzBumgKcSd/GP7CgwtqBfCyGRwH4PAO01vG2SCyoj7/F/Ie6kG3Mqp
mmj6OoVtAHoXDY56z/jY82dPtWVXKo3Salg160vTSyHni3iqe0vDo1H2MF63AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIghkKUhUbGDNBzICh8fYyEiFmMAwHwYDVR0j
BBgwFoAUHE/UJzGjBp6xHrsaHQjW5FksmvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTAxZGJhZmMtYzBjYy00OTZhLWI1ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0Mjcz
MUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1OTJDOUFGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xQzRGRDQyNzMxQTMwNjlFQjExRUJCMUExRDA4RDZFNDU5MkM5
QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1
ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2
RTQ1OTJDOUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK8mHg3FWxJE+hVA8MJBWKmb0MvChkA13pBp
Uoz5J4XvJ5te7tNAR3kQrwSwnnbtinO7ml9qZo3tIGD1wMh1LlbLNXWbVGrG3Lx6
IXGcGEexHBx5v/tDa2sTYKE1jrYPVU+duZwhH5e0YKYi3r/UI3MNR4YD617z0Lg3
afyWa3UZJCh3tFgTfMkLq99XAhOlFMZnY1EQESRLvIgaADzo/GxbX3Scp3kz1dlH
1PP3/OHg8Z99SyiFFuo2Z3SANTBU6AePQDNXNxnmKtmJkaSDfTY97IdJNBOnZt86
g7uRJMAkz6UuZ1nQOD1aFL8zks/jyZ4uMfmUmQE/tGuydNjmTJg=
-----END CERTIFICATE-----
Generated at Sun Jul 19 23:30:13 2026 by rpki-client