Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
File:                     90A149FB759A6A176FE4D47F5082FA60C9767022.mft (raw, json)
Hash identifier:          orDuVJxHeuLaS3PkgEScGFpneExEbFqea/WaD7+jRuw=
Subject key identifier:   32:02:3E:5E:B1:28:F1:8D:30:D0:3E:64:4D:19:22:78:D0:77:FF:AE
Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22
Certificate issuer:       /CN=90A149FB759A6A176FE4D47F5082FA60C9767022
Certificate serial:       02E883FD1189BA38627501C9FAFD56128B2BC807
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 15:20:30 +0000
Manifest this update:     Mon 20 Jul 2026 15:15:30 +0000
Manifest next update:     Tue 21 Jul 2026 15:59:30 +0000
Files and hashes:         1: 90A149FB759A6A176FE4D47F5082FA60C9767022.crl (hash: hCHOthU+E24QxAFzY9zRTTFiRM01PNXrHFSmnYP0iwc=)
                          2: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: ckYh7W2IVtz0AntnQ+PueP5/KAoXf5rAosyZM59PhNk=)
                          3: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: G5X9t8nXB1mRf0UKItbT4yn3eidWxB2oSMgKDMVRVbE=)
                          4: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: /bFeq3oJ+j4yhcHhIfucgcl6Z3OfaEag9GMIa9agARs=)
                          5: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: X5HsBE1ewqrCbWqrNdoiRxUV2ywDPMva+dNQ4cS5oB4=)
                          6: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: /6rKJIPdCG5UyO3XHODZZ3EDU0CTpBfu4ou77AX6cek=)
                          7: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: MYxtWKdKnWygaDzucgDa2e53LN0HkZn96bp2EuKqQIc=)
                          8: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: dcQ3Sb65sjjLX49tVMmjaQB6c8zJqXUEiFfQJc1R5QA=)
                          9: 3132302e32392e3232352e302f32342d3234203d3e203139393035.roa (hash: WJbMrhYWH52zN+15Q0lEM0yHGULJofqinsPUUc3DEoM=)
                          10: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: fEHjHjujgkqVA1apLtwPlgVoJB63v2RTVUpYlDyn+3c=)
                          11: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: wR1gyIq5cKfCTApo9vqdO2nlAEKOlwrS+SEI5BtyjVc=)
                          12: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: PkQgWHfFkFDdD7JqzWkftJuZG03TTvKBUbVrhzww6Q4=)
                          13: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: ZyVnCGfpVMbL3rPs3FU6HbGvjwN2cgfbIIbFeRp+eSg=)
                          14: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: hcuXQrxnDSCR9sGH8AKpCLGAnxBa8Jctci8rHhKNuLM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl
                          rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 15:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e8:83:fd:11:89:ba:38:62:75:01:c9:fa:fd:56:12:8b:2b:c8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022
        Validity
            Not Before: Jul 20 15:15:30 2026 GMT
            Not After : Jul 21 15:59:30 2026 GMT
        Subject: CN=32023E5EB128F18D30D03E644D192278D077FFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:05:07:a8:32:88:71:68:8a:80:a8:5f:01:
                    43:35:c0:64:63:2e:4c:ad:6b:2d:43:6b:84:c6:9f:
                    4b:7a:bd:ef:c0:32:e6:a6:ab:93:30:db:ac:c1:72:
                    7a:83:c6:b7:fd:18:7f:14:02:9e:54:0a:2f:96:d3:
                    5e:d7:f5:bd:e0:35:7c:62:5f:e4:28:bd:aa:4b:ec:
                    95:78:98:c1:89:72:cf:24:7d:a7:a2:59:28:1a:05:
                    71:95:54:2b:3a:cb:10:26:30:9b:b9:95:c6:6e:63:
                    42:22:a0:ef:dd:81:52:7f:20:9d:69:53:8d:64:37:
                    a1:21:e6:b9:80:5f:19:8a:c5:c8:ee:72:d9:c3:a3:
                    0c:5b:0d:50:7d:3a:18:92:d9:3d:d1:1d:73:cd:7a:
                    1f:f2:a1:0f:3c:87:1d:17:37:df:4c:cd:2f:40:cc:
                    41:b3:8d:64:19:64:11:e4:9a:a5:6d:a2:09:f7:f8:
                    a6:9b:1a:6d:26:5d:e7:bf:b2:7b:8e:0f:07:54:b9:
                    88:1a:51:f2:c5:ec:36:57:cc:9e:95:42:3c:7b:57:
                    d3:44:1c:43:0d:7b:fb:a0:71:00:b5:85:d2:9f:a2:
                    58:7e:93:ff:d6:c4:55:c5:b0:41:21:94:6c:9c:1e:
                    bb:0d:40:89:55:fc:76:25:ce:ec:c5:25:26:bb:58:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:02:3E:5E:B1:28:F1:8D:30:D0:3E:64:4D:19:22:78:D0:77:FF:AE
            X509v3 Authority Key Identifier:
                keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a8:7b:17:7a:bc:76:51:3d:f1:f0:ef:69:20:9f:de:5b:d4:
         55:6b:00:93:4f:8e:67:83:94:55:86:9f:49:ce:36:db:c6:ca:
         6e:0b:17:1f:5a:3d:a4:1a:03:36:38:7b:cb:de:43:8b:23:da:
         0a:00:14:17:ad:b7:d5:d3:bb:2f:a2:b1:aa:c6:42:ba:2f:a4:
         cc:ec:52:32:a7:25:fa:aa:a3:c6:40:44:57:64:46:78:a1:f9:
         26:9d:14:36:3d:56:94:56:d5:07:7e:71:61:54:ab:97:1e:85:
         ba:95:5e:43:1d:32:f8:76:20:be:a0:00:1a:39:6c:23:ba:05:
         dd:76:c3:eb:cf:9c:d0:03:49:3f:cb:b5:72:bf:9b:9c:20:41:
         6f:61:fc:7e:4e:f2:ee:0a:40:96:fb:e3:6f:85:a4:3f:46:4c:
         e1:7e:92:79:0c:94:c2:d2:2a:38:39:c4:99:b9:77:8e:f9:8b:
         b4:1f:71:2c:66:11:1a:eb:fb:66:87:c8:d7:e8:19:4f:03:3e:
         73:a4:0f:f5:02:1d:b3:a6:dc:5f:c2:b0:aa:fd:3c:65:d3:ed:
         6e:ff:19:7f:c9:5f:59:9e:0b:3c:95:29:55:0e:0d:62:fa:71:
         49:67:3e:39:2b:c0:57:80:a0:5f:cc:2f:a0:55:40:fe:69:f1:
         b3:c2:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:55 2026 by rpki-client