Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
File:                     0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft (raw, json)
Hash identifier:          wToj1nb5NG3eB+cjmUOB0dKZ/byc2pYcxP9A4A0udj4=
Subject key identifier:   70:AD:B5:06:14:93:3F:71:CC:01:4D:CE:AC:CF:BA:BB:4E:36:75:88
Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
Certificate issuer:       /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Certificate serial:       79A6B99EDE7229C81BA2267360FC549B1C6D0B21
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
Manifest number:          55
Signing time:             Sat 04 Jul 2026 17:23:19 +0000
Manifest this update:     Sat 04 Jul 2026 17:18:19 +0000
Manifest next update:     Sun 05 Jul 2026 17:33:19 +0000
Files and hashes:         1: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: dDbCFuKbC0+1oibgHS1pBLUQZLf12v2I7Ivqihl/WFA=)
                          2: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: aop1U/z5XKpBzcRvoj7W7+/ffJTbEvTMlvj03extEio=)
                          3: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: F62HpzCPf0jVzJzqHRtqYgkpCr6Z0Ln+rY5et4Po02Y=)
                          4: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: j/oR6MYId1xXKHb1Z5SsBRuqUKKVLnH73F7eTR7zcCg=)
                          5: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: jpiOTHzKh1vGnb3tSE/Xoje7GEL1N7x9x1Df56pKagM=)
                          6: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: 5tf246IHwaj7s4oEu9nu0sb2z4yR2BLV01+7PT3/O1c=)
                          7: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: p4ukH1H84E2OXHZ0f+4rfYiVhbuRJ3ak7nrQukeOEIw=)
                          8: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: zvwgezfW86SlRC31YjwJ71lKNs9pTZisRey08uUZDrw=)
                          9: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl (hash: xyrla3Q5FOzbh/+c6QwHM+PV2oaqd8TASOfe4kxbxfQ=)
                          10: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: t0sQe3wy1nx7fCaoG1vw4eb+2MVxEa2LAolsSj9bAGg=)
                          11: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: fb53zmVp3ZEKD6KlMvVv2uQVwzv7wo/XFESLY4RW+fc=)
                          12: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: iKmDknm+sz9G+4ieO2jOHSbGQz1z9iCG43k/bYAHB3k=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
                          rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Jul 2026 17:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a6:b9:9e:de:72:29:c8:1b:a2:26:73:60:fc:54:9b:1c:6d:0b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
        Validity
            Not Before: Jul  4 17:18:19 2026 GMT
            Not After : Jul  5 17:33:19 2026 GMT
        Subject: CN=70ADB50614933F71CC014DCEACCFBABB4E367588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:00:e6:10:d6:3d:df:46:25:6f:aa:8a:ef:
                    0a:24:a4:41:e2:78:90:91:e2:33:7d:86:62:f3:32:
                    b7:ad:46:f6:23:0f:cd:be:25:17:91:d2:dd:2a:62:
                    ce:5a:d6:3e:08:f3:09:11:d1:e6:75:a8:8b:ef:ac:
                    da:43:7c:31:c5:21:00:1c:10:65:fc:dc:b6:7e:0a:
                    ab:dc:46:de:da:cb:bc:60:ee:29:81:04:63:4f:31:
                    e1:36:03:94:8e:27:c4:0b:9a:80:2b:17:d9:67:42:
                    b9:84:41:8a:71:75:e9:e3:56:b3:a3:b8:67:73:5d:
                    27:30:5e:8a:53:61:c3:8f:40:bb:f0:39:28:b5:ab:
                    fd:19:b8:3c:c2:54:4a:6a:dd:12:ed:65:77:96:29:
                    5e:88:f7:a5:67:b9:df:fc:1f:32:11:34:3f:ec:61:
                    60:6a:f3:8b:24:f8:ba:d0:81:0b:35:82:7a:ef:12:
                    47:d5:cb:e2:51:03:02:e1:f6:60:07:37:ac:97:3a:
                    ff:70:e8:5e:55:07:e4:3d:34:de:31:4c:eb:d6:b0:
                    25:04:81:98:c8:c4:d3:24:8c:02:dc:7c:45:93:bb:
                    e1:c0:89:a7:0c:9d:44:fe:c8:ae:6a:04:f8:7f:86:
                    bd:a0:fd:02:65:03:51:5c:70:5b:d0:21:5f:4d:ea:
                    7b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:B5:06:14:93:3F:71:CC:01:4D:CE:AC:CF:BA:BB:4E:36:75:88
            X509v3 Authority Key Identifier:
                keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:93:56:a0:d7:76:d9:78:82:ef:4c:e5:bc:69:5a:bd:fe:
         f0:fb:a7:b9:29:a1:11:37:1f:1f:ef:fc:d6:c0:5f:01:19:c6:
         06:6b:82:89:f9:dd:8b:11:a6:3a:0b:1d:a2:24:2e:cd:80:41:
         82:34:5b:2f:ef:3d:2b:fa:17:ae:3a:17:a2:ff:d7:6f:15:3d:
         69:88:b0:32:c9:45:55:b1:2d:ed:3d:9e:45:82:41:86:23:23:
         c9:59:c9:05:7c:96:ec:7f:52:aa:93:81:da:46:af:cf:d2:37:
         d2:47:92:2f:23:50:f7:ce:6e:8c:51:76:62:d5:bd:99:92:c2:
         b6:98:65:83:0d:60:09:1a:42:26:cd:51:dd:77:56:86:39:73:
         52:61:80:ac:96:69:fa:33:82:9a:ad:06:1a:f1:04:bb:26:62:
         ac:e5:3a:81:f1:1d:fd:6a:5c:13:5b:2a:bc:d5:a8:41:17:7f:
         51:23:bf:c2:ed:91:37:98:83:0c:1f:da:51:cc:9b:b5:c7:56:
         f3:a5:f1:80:5c:34:80:5c:84:c8:67:ea:97:ff:35:50:12:cc:
         11:aa:fb:f7:ca:30:d6:1b:ff:05:a6:af:29:44:56:8d:15:42:
         b6:f6:53:e3:58:0a:53:aa:d7:19:a9:7c:fc:1b:8d:d4:74:af:
         e2:cf:99:e2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeaa5nt5yKcgboiZzYPxUmxxtCyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJC
REE5OUNCMDAeFw0yNjA3MDQxNzE4MTlaFw0yNjA3MDUxNzMzMTlaMDMxMTAvBgNV
BAMTKDcwQURCNTA2MTQ5MzNGNzFDQzAxNERDRUFDQ0ZCQUJCNEUzNjc1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdigDmENY930Ylb6qK7wokpEHi
eJCR4jN9hmLzMretRvYjD82+JReR0t0qYs5a1j4I8wkR0eZ1qIvvrNpDfDHFIQAc
EGX83LZ+CqvcRt7ay7xg7imBBGNPMeE2A5SOJ8QLmoArF9lnQrmEQYpxdenjVrOj
uGdzXScwXopTYcOPQLvwOSi1q/0ZuDzCVEpq3RLtZXeWKV6I96Vnud/8HzIRND/s
YWBq84sk+LrQgQs1gnrvEkfVy+JRAwLh9mAHN6yXOv9w6F5VB+Q9NN4xTOvWsCUE
gZjIxNMkjALcfEWTu+HAiacMnUT+yK5qBPh/hr2g/QJlA1FccFvQIV9N6nvNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcK21BhSTP3HMAU3OrM+6u042dYgwHwYDVR0j
BBgwFoAUD7Qksg1qRYDm0yM/zy658r2pnLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzM4ZDI3NTUtMzgwZC00NzdlLWJmMjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIw
RDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJCREE5OUNCMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wRkI0MjRCMjBENkE0NTgwRTZEMzIzM0ZDRjJFQjlGMkJEQTk5
Q0IwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm
MjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5
RjJCREE5OUNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACLWk1ag13bZeILvTOW8aVq9/vD7p7kpoRE3
Hx/v/NbAXwEZxgZrgon53YsRpjoLHaIkLs2AQYI0Wy/vPSv6F646F6L/128VPWmI
sDLJRVWxLe09nkWCQYYjI8lZyQV8lux/UqqTgdpGr8/SN9JHki8jUPfOboxRdmLV
vZmSwraYZYMNYAkaQibNUd13VoY5c1JhgKyWafozgpqtBhrxBLsmYqzlOoHxHf1q
XBNbKrzVqEEXf1Ejv8LtkTeYgwwf2lHMm7XHVvOl8YBcNIBchMhn6pf/NVASzBGq
+/fKMNYb/wWmrylEVo0VQrb2U+NYClOq1xmpfPwbjdR0r+LPmeI=
-----END CERTIFICATE-----
Generated at Sun Jul 5 03:54:21 2026 by rpki-client