Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
File:                     3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft (raw, json)
Hash identifier:          ARnqjySKvfNV6uu15WnVZ4caxPT7h5YkvHptIeNXvfw=
Subject key identifier:   5C:FF:0A:B4:8E:57:37:BB:FE:ED:9A:20:CA:2D:40:F0:69:51:F2:FF
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Certificate issuer:       /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial:       45CA16FA73EE0D4177A44297835DA021C9CFB875
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 21:12:27 +0000
Manifest this update:     Mon 20 Jul 2026 21:07:27 +0000
Manifest next update:     Wed 22 Jul 2026 00:08:27 +0000
Files and hashes:         1: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: Y9dwS9JvSaOl4mADQu18dqt11q2d+GtfYQ7OjGf2xvk=)
                          2: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: dVzU+GqvAS7Wn+MjXVPbLdaACaAzf5gsplbVnIYe7RI=)
                          3: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: FGw2BZbAPXB424pj8gkt+KyDf13NBMafjHJz1qqtroA=)
                          4: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: 5bkG3r6aOam2UYiAyDRHJLOMYGtAoc4TWZuSkWY6DW8=)
                          5: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: FPgfsxknLRU1LHc9BebuH01+tHe4lP7NUuhwY6WPhmk=)
                          6: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: QO5w5W9cp8cI6poTkpuXpM9F3mhiRyQeqAdZ2Rfgw6w=)
                          7: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: SZ3yY2r9mzkD9TfHT8RxuOv5AwUhsGvKGPEF8U53ZKI=)
                          8: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: 8kncCReHuUftWwxEVQGeXIdZhJBx7PmiqOaqTEDqEqo=)
                          9: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: S43umrQnayZCpSzQYIAmH2LGDnCAWJ6VcBOOrq/ns7Y=)
                          10: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: tc07x6I5GlIGtQm74mFDwkPY7veOT+58YPaMpLFuMP8=)
                          11: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: ZJYJND6cBL2XfAoUPgiKsDkKfS/wfCExUcg8XPfgBm0=)
                          12: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: furgG1WGsI/SaHbEkYDIDFe9YchJUqhB/+OGElUaiP4=)
                          13: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: P12FJNsFFyWSsRexfHM3kWn+2VKYuVhwIEq6slsbCcg=)
                          14: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: Fncw6ejzrq4zIDml7sJv0ARYNNSdP3usP81sr9K6idM=)
                          15: 3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl (hash: Bdf5hSmLRfK84N2H3tDZs9lpa0wgOCJuEYklDWgItkI=)
                          16: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: 9Uh4g+j84Dsp+SQG55jiqFV/GXapMzCJHzdMQ8QVMIs=)
                          17: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: mUUIB+/mtgQYA4ZJFgHA5FD7YbXkeVVQm5wqTm9otqY=)
                          18: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: J+zYKwZ+SXdC6vvuqB/51PHxQKuHMJSM0Dgp8PV/GWI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
                          rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ca:16:fa:73:ee:0d:41:77:a4:42:97:83:5d:a0:21:c9:cf:b8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
        Validity
            Not Before: Jul 20 21:07:27 2026 GMT
            Not After : Jul 22 00:08:27 2026 GMT
        Subject: CN=5CFF0AB48E5737BBFEED9A20CA2D40F06951F2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:13:8a:e6:42:48:c3:89:c3:03:6a:f0:90:
                    98:79:2e:08:1f:96:94:53:57:29:15:63:79:c7:1e:
                    11:24:0e:64:55:01:e0:89:09:53:1e:b6:7d:5b:8b:
                    20:67:be:e1:b3:c8:ad:b3:e4:57:85:f7:43:ca:9f:
                    e2:ca:6f:41:3e:23:53:b7:39:65:58:60:07:ed:b5:
                    50:cf:5a:52:00:46:b4:fb:46:17:1a:75:27:ac:24:
                    c2:07:b3:2c:a5:b2:ba:1f:00:bc:7c:79:64:00:ff:
                    d2:7f:99:d5:57:2d:27:9a:f5:81:65:fa:9e:8b:8b:
                    48:19:7f:af:be:a5:e9:4d:6d:4e:89:81:22:cd:74:
                    db:2c:ad:5f:69:b0:0c:65:00:ab:20:24:7d:58:00:
                    2c:76:da:d2:74:75:11:52:da:76:d5:85:e0:5f:4b:
                    cc:8f:58:70:b6:25:26:d2:aa:05:24:5a:26:dc:f2:
                    2c:e2:a6:63:89:00:5e:75:62:b9:a9:77:cd:da:89:
                    53:b1:75:ff:5e:08:ec:8f:a8:ea:cc:9a:42:8e:45:
                    d0:3a:a2:85:61:b2:ca:a2:01:f2:72:0a:2a:ad:61:
                    c7:c2:e2:03:bc:bc:c7:b6:cf:92:82:55:3f:d8:c2:
                    f4:33:de:56:cc:36:ba:d3:e2:96:1c:be:1d:00:4c:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FF:0A:B4:8E:57:37:BB:FE:ED:9A:20:CA:2D:40:F0:69:51:F2:FF
            X509v3 Authority Key Identifier:
                keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:27:9b:d3:a4:b9:c1:4a:96:db:01:f5:b4:db:79:8e:57:a3:
         48:f4:8a:23:2b:35:92:36:94:0b:aa:1b:8b:e2:3f:e3:cc:0a:
         47:84:5d:69:8a:30:0a:c1:b0:de:c3:26:99:cd:39:d1:22:30:
         cb:a4:5b:aa:b6:46:39:18:ad:69:9b:1b:aa:31:64:67:79:b9:
         6b:da:85:68:bb:ce:88:81:67:4d:17:f6:16:e9:c9:94:cf:d0:
         a7:e8:b5:b3:64:e8:2a:96:95:ce:a9:18:bb:2d:67:c5:7a:e3:
         e8:d2:86:bb:82:05:c8:e0:d6:32:64:8d:1e:b1:47:25:7a:f2:
         68:7e:19:08:9b:99:4d:d9:e0:93:ce:30:9a:91:c9:b8:35:2f:
         4b:89:43:cd:77:85:70:77:21:49:61:98:a8:fc:a7:9e:fe:c9:
         41:bd:b8:7c:63:a2:b7:1c:ae:d8:db:0c:fc:4a:a1:74:7c:d8:
         af:5e:09:39:fc:6f:97:73:ca:4c:13:9f:e5:7b:5f:b1:a2:97:
         49:81:c1:09:80:f0:17:e5:d4:5f:04:8d:3c:83:16:86:d3:e8:
         e1:c0:c0:f2:f8:77:a7:fa:f7:ad:4d:16:eb:38:7f:82:28:c7:
         b2:4f:1a:ee:54:47:b9:e3:4b:05:d4:73:11:b6:c0:59:b3:04:
         98:3c:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:51:17 2026 by rpki-client