Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
File:                     5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft (raw, json)
Hash identifier:          7lKW5xSx7Fd+iukrJzIlzM46HtfmowEsNBZnZyhGXpo=
Subject key identifier:   BC:73:99:6D:8C:59:6E:67:F1:01:45:E1:77:D2:89:FF:BA:68:34:1D
Authority key identifier: 5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1
Certificate issuer:       /CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1
Certificate serial:       2D08631E5738260C50C7B316EEE3CFB1784C9C53
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 17:33:06 +0000
Manifest this update:     Mon 20 Jul 2026 17:28:06 +0000
Manifest next update:     Tue 21 Jul 2026 19:25:06 +0000
Files and hashes:         1: 5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl (hash: Mkw6Js1CGoGq/2sg1jBmHOPBrC/TLwsHbYBFvPvpLP8=)
                          2: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: ht3wys3Y4NKbvssKz7Sxlx9g755vgJKTzTjwYqhy56E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl
                          rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 19:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:08:63:1e:57:38:26:0c:50:c7:b3:16:ee:e3:cf:b1:78:4c:9c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1
        Validity
            Not Before: Jul 20 17:28:06 2026 GMT
            Not After : Jul 21 19:25:06 2026 GMT
        Subject: CN=BC73996D8C596E67F10145E177D289FFBA68341D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:77:f7:da:3e:f9:1a:ad:c2:67:5e:f4:0d:
                    77:14:ed:27:cd:3a:37:9d:f5:01:93:b2:74:1f:09:
                    78:e4:87:69:07:b2:94:a8:5c:ed:d2:df:08:1f:11:
                    26:e2:53:e7:f0:73:b4:df:4f:a7:48:f5:63:61:a5:
                    27:09:47:20:3a:95:c4:bb:46:75:c5:47:3a:86:3d:
                    cd:7d:7b:5d:86:6a:34:93:b4:b4:38:2e:08:7c:d3:
                    b1:d2:55:48:0b:6f:75:37:d7:68:42:cc:4e:41:e2:
                    05:70:2a:3e:13:a2:3e:56:73:21:46:4c:64:26:e1:
                    4d:e0:26:6f:7d:3b:72:be:df:cb:9a:51:39:c3:44:
                    80:e0:4b:e1:53:ac:d4:1b:68:25:13:b0:89:21:df:
                    a8:0b:9e:70:23:1d:8a:cb:c9:e5:36:03:5f:6a:16:
                    20:8a:43:98:63:8e:c8:aa:62:38:c2:70:8c:0e:60:
                    4c:16:d8:a4:9d:49:85:0b:4e:15:11:59:43:27:86:
                    7b:8c:fb:e4:b2:2f:45:45:df:31:e5:a3:77:86:9e:
                    29:d5:1e:ba:b1:94:3e:38:f2:31:eb:05:ef:83:60:
                    c4:c8:a4:01:83:81:3b:18:f8:02:de:9e:8d:83:3b:
                    94:9f:85:ac:05:d9:2c:e7:f5:bd:2c:bb:f7:41:1c:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:73:99:6D:8C:59:6E:67:F1:01:45:E1:77:D2:89:FF:BA:68:34:1D
            X509v3 Authority Key Identifier:
                keyid:5B:B1:2C:31:D3:6E:55:CF:D6:AF:94:4C:A4:E7:67:E0:B9:DB:9B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/5BB12C31D36E55CFD6AF944CA4E767E0B9DB9BF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:1a:ef:41:c8:98:c2:88:50:58:e2:bc:5b:01:a9:93:16:c3:
         6b:f2:9d:85:16:32:42:a2:5c:b9:bb:d0:eb:60:80:e0:b4:c0:
         d6:03:84:8c:34:dd:b0:0e:82:ea:7a:44:05:03:33:ea:df:b8:
         48:23:9a:22:be:9c:fe:4e:b2:88:a3:90:3b:1b:6e:2f:ac:90:
         83:c0:c5:b0:14:8f:09:1e:c6:88:4f:64:c8:fd:a5:96:b7:f4:
         e6:9c:51:a2:0d:61:03:ba:5c:62:96:b1:d3:e4:26:68:87:68:
         bf:07:1a:e2:fa:a6:a0:a8:57:f1:ac:78:37:52:ca:50:83:32:
         84:9d:bb:d1:77:72:c0:fe:de:01:5d:7e:63:01:f0:ab:dc:51:
         98:2e:28:58:49:bf:cf:d4:60:0f:23:8c:f8:10:4e:17:e1:04:
         e2:4e:ea:f2:85:f2:9d:08:d2:24:f9:e8:36:55:ab:d3:30:43:
         d6:39:ae:52:fd:66:7e:3c:0a:44:d3:4e:86:d1:8d:22:03:73:
         54:9e:dc:9c:00:27:92:2a:2b:8a:0f:d9:22:00:a2:14:13:ba:
         e3:71:38:d7:e0:0b:72:bb:9c:5c:53:e5:ec:24:8b:61:05:07:
         22:60:54:82:5b:41:af:d4:67:c7:68:7f:9a:4e:df:bf:85:5b:
         5c:96:3f:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULQhjHlc4JgxQx7MW7uPPsXhMnFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBC
OURCOUJGMTAeFw0yNjA3MjAxNzI4MDZaFw0yNjA3MjExOTI1MDZaMDMxMTAvBgNV
BAMTKEJDNzM5OTZEOEM1OTZFNjdGMTAxNDVFMTc3RDI4OUZGQkE2ODM0MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Lnf32j75Gq3CZ170DXcU7SfN
Ojed9QGTsnQfCXjkh2kHspSoXO3S3wgfESbiU+fwc7TfT6dI9WNhpScJRyA6lcS7
RnXFRzqGPc19e12GajSTtLQ4Lgh807HSVUgLb3U312hCzE5B4gVwKj4Toj5WcyFG
TGQm4U3gJm99O3K+38uaUTnDRIDgS+FTrNQbaCUTsIkh36gLnnAjHYrLyeU2A19q
FiCKQ5hjjsiqYjjCcIwOYEwW2KSdSYULThURWUMnhnuM++SyL0VF3zHlo3eGninV
HrqxlD448jHrBe+DYMTIpAGDgTsY+ALeno2DO5SfhawF2Szn9b0su/dBHDy9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvHOZbYxZbmfxAUXhd9KJ/7poNB0wHwYDVR0j
BBgwFoAUW7EsMdNuVc/Wr5RMpOdn4Lnbm/EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTliOTNlMWMtNWYyYS00M2E5LTk5ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFE
MzZFNTVDRkQ2QUY5NDRDQTRFNzY3RTBCOURCOUJGMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81QkIxMkMzMUQzNkU1NUNGRDZBRjk0NENBNEU3NjdFMEI5REI5
QkYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5
ZjEtZmRkMDQwMmY5NDZlLzAvNUJCMTJDMzFEMzZFNTVDRkQ2QUY5NDRDQTRFNzY3
RTBCOURCOUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALUa70HImMKIUFjivFsBqZMWw2vynYUWMkKi
XLm70OtggOC0wNYDhIw03bAOgup6RAUDM+rfuEgjmiK+nP5OsoijkDsbbi+skIPA
xbAUjwkexohPZMj9pZa39OacUaINYQO6XGKWsdPkJmiHaL8HGuL6pqCoV/GseDdS
ylCDMoSdu9F3csD+3gFdfmMB8KvcUZguKFhJv8/UYA8jjPgQThfhBOJO6vKF8p0I
0iT56DZVq9MwQ9Y5rlL9Zn48CkTTTobRjSIDc1Se3JwAJ5IqK4oP2SIAohQTuuNx
ONfgC3K7nFxT5ewki2EFByJgVIJbQa/UZ8dof5pO37+FW1yWP1g=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:51:18 2026 by rpki-client