Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
File:                     B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json)
Hash identifier:          zn7ZUJZatwnK9AsAdZxI9ljH3PW2Ywaj7a/aCXnDzJY=
Subject key identifier:   1F:38:13:41:BA:85:24:3A:87:A1:7A:68:C8:0B:CA:01:C7:0A:A9:50
Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
Certificate issuer:       /CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Certificate serial:       4EAD61BD7C3E6867EC60894874BABCE197E0ED7B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
Manifest number:          69
Signing time:             Mon 20 Jul 2026 00:32:06 +0000
Manifest this update:     Mon 20 Jul 2026 00:27:06 +0000
Manifest next update:     Tue 21 Jul 2026 02:57:06 +0000
Files and hashes:         1: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: UBVZ8OE9fk1A8cwlJoaKk/W3cJ8PiU/cVC3yPOdprBA=)
                          2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
                          rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 02:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ad:61:bd:7c:3e:68:67:ec:60:89:48:74:ba:bc:e1:97:e0:ed:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3
        Validity
            Not Before: Jul 20 00:27:06 2026 GMT
            Not After : Jul 21 02:57:06 2026 GMT
        Subject: CN=1F381341BA85243A87A17A68C80BCA01C70AA950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:36:49:c8:c7:3c:a3:ce:ea:f3:c2:ff:ac:
                    d3:94:f6:1b:4a:02:fb:ad:fe:11:24:61:0d:89:26:
                    db:c4:d1:54:2f:61:64:2a:8b:42:c9:8e:3f:24:d9:
                    63:1c:15:51:06:fe:5a:66:c6:72:fd:c6:a5:3b:44:
                    5e:57:a7:a8:59:c7:39:9f:2d:80:ef:03:3e:26:13:
                    7c:e9:09:e3:ad:d2:51:89:9e:f4:9f:0b:35:f1:c7:
                    c1:46:ad:d0:b2:ab:66:87:1c:c2:49:e3:7e:0d:11:
                    f5:df:d4:46:b4:ad:67:0a:a8:dc:04:be:0b:63:bc:
                    aa:3f:b9:96:e4:3d:d4:3c:07:d5:42:3a:77:f0:e5:
                    be:3e:ce:e3:6f:0b:b9:59:6d:6c:a2:62:53:a3:17:
                    66:d7:d6:9a:80:71:76:e1:9c:16:39:8f:ae:d7:bf:
                    9a:7a:18:ff:1c:46:fa:a4:7c:f2:0d:c6:a2:72:37:
                    4f:82:bb:d0:03:6b:ff:7a:3b:6f:58:e5:18:2b:cd:
                    83:bc:27:e2:e3:a9:e2:39:0a:3b:c1:7b:63:4c:bf:
                    f8:4b:c8:cf:87:01:41:a4:88:32:1b:9f:d3:97:f6:
                    e7:a1:d1:36:ac:22:42:0d:1c:f7:6f:45:84:4e:57:
                    56:82:80:36:eb:bf:7c:fb:35:c2:63:2f:df:58:fa:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:38:13:41:BA:85:24:3A:87:A1:7A:68:C8:0B:CA:01:C7:0A:A9:50
            X509v3 Authority Key Identifier:
                keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:99:f5:7e:67:60:70:b6:77:b6:71:c3:6e:ce:e4:5e:30:22:
         70:d3:41:8c:41:55:ec:85:7b:e6:a3:69:40:ac:a2:de:77:1e:
         8b:21:d5:65:99:ac:88:7d:c7:9e:f0:5c:1b:da:7e:5c:a4:f9:
         64:3c:46:ed:74:35:fd:54:b8:aa:5e:49:61:bf:59:ae:2e:8b:
         61:5e:34:3a:b7:06:55:67:45:71:c1:b3:20:ac:a0:f8:62:3a:
         df:ab:cf:6d:cc:08:67:96:9a:4d:2b:e2:17:80:64:b9:fe:22:
         a8:23:20:c0:dd:95:d1:68:7a:75:af:06:ce:46:f7:1f:3d:85:
         0d:2e:86:86:01:f5:0c:ff:53:04:58:c6:83:c0:f7:1a:31:81:
         1f:e0:e2:bd:88:37:ab:c5:38:c6:34:2d:cb:2e:3e:e2:c4:27:
         6c:2a:7a:0b:26:61:2e:a9:bf:fb:60:1e:3a:e3:21:60:ef:b3:
         af:e1:14:01:e1:d6:3e:f6:58:20:d8:27:20:3c:7d:73:32:ce:
         83:5d:98:60:2b:5f:f8:50:58:1c:06:5e:17:21:a3:8c:4c:25:
         80:14:7a:d8:57:6f:8b:20:f9:40:ba:81:3d:d4:05:c5:0c:78:
         e8:31:80:1e:82:8e:72:7d:eb:0b:68:1e:d4:23:a4:a3:92:b9:
         f8:07:da:50
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTq1hvXw+aGfsYIlIdLq84Zfg7XswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2
MzY5MjJBMzAeFw0yNjA3MjAwMDI3MDZaFw0yNjA3MjEwMjU3MDZaMDMxMTAvBgNV
BAMTKDFGMzgxMzQxQkE4NTI0M0E4N0ExN0E2OEM4MEJDQTAxQzcwQUE5NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPzZJyMc8o87q88L/rNOU9htK
Avut/hEkYQ2JJtvE0VQvYWQqi0LJjj8k2WMcFVEG/lpmxnL9xqU7RF5Xp6hZxzmf
LYDvAz4mE3zpCeOt0lGJnvSfCzXxx8FGrdCyq2aHHMJJ434NEfXf1Ea0rWcKqNwE
vgtjvKo/uZbkPdQ8B9VCOnfw5b4+zuNvC7lZbWyiYlOjF2bX1pqAcXbhnBY5j67X
v5p6GP8cRvqkfPINxqJyN0+Cu9ADa/96O29Y5RgrzYO8J+LjqeI5CjvBe2NMv/hL
yM+HAUGkiDIbn9OX9ueh0TasIkINHPdvRYROV1aCgDbrv3z7NcJjL99Y+t2XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHzgTQbqFJDqHoXpoyAvKAccKqVAwHwYDVR0j
BBgwFoAUuTBtZA+Yh0K7HLKxmrnXKWNpIqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzNiMmVlNzQtOGMzYy00YmMzLWI2ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQw
Rjk4ODc0MkJCMUNCMkIxOUFCOUQ3Mjk2MzY5MjJBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COTMwNkQ2NDBGOTg4NzQyQkIxQ0IyQjE5QUI5RDcyOTYzNjky
MkEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2
ZmItZjM1YjIwMGEyMGViLzAvQjkzMDZENjQwRjk4ODc0MkJCMUNCMkIxOUFCOUQ3
Mjk2MzY5MjJBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFuZ9X5nYHC2d7Zxw27O5F4wInDTQYxBVeyF
e+ajaUCsot53Hosh1WWZrIh9x57wXBvaflyk+WQ8Ru10Nf1UuKpeSWG/Wa4ui2Fe
NDq3BlVnRXHBsyCsoPhiOt+rz23MCGeWmk0r4heAZLn+IqgjIMDdldFoenWvBs5G
9x89hQ0uhoYB9Qz/UwRYxoPA9xoxgR/g4r2IN6vFOMY0LcsuPuLEJ2wqegsmYS6p
v/tgHjrjIWDvs6/hFAHh1j72WCDYJyA8fXMyzoNdmGArX/hQWBwGXhcho4xMJYAU
ethXb4sg+UC6gT3UBcUMeOgxgB6CjnJ96wtoHtQjpKOSufgH2lA=
-----END CERTIFICATE-----
Generated at Mon Jul 20 04:33:19 2026 by rpki-client