Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
File:                     9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft (raw, json)
Hash identifier:          8Qds0KJUfedyWBikpgVKjPLoagX/suj4eensxcxEfSA=
Subject key identifier:   22:0E:5C:6A:26:72:28:1A:8D:B6:1D:7D:FA:72:70:94:81:19:BD:1B
Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B
Certificate issuer:       /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
Certificate serial:       7FFDE5DA94F8C9551A4ED9888FDAD9DFD1F912CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
Manifest number:          60
Signing time:             Sun 12 Jul 2026 05:42:11 +0000
Manifest this update:     Sun 12 Jul 2026 05:37:11 +0000
Manifest next update:     Mon 13 Jul 2026 06:06:11 +0000
Files and hashes:         1: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: aOkYTZDHg/L8yWlo8vIxFqsm7+o0K/8UpGxOwkkG7Ss=)
                          2: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: lNPR2Tg6FsNQHU8b29t3TQ5Lu6T1+vm92/GyLs+/lXo=)
                          3: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: B7lLwYyGx/CkKBE8Qhv5JNipvmsoWuu5k92uqzr9wrU=)
                          4: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: oJcDC3gbkkbl6CgR5ozKOicxGaK/b8KkIxtfAPuJSR4=)
                          5: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: v6dOLx0SCwjzqMjQ3ImqjGTnffSPJhWT9kStYUIxMa8=)
                          6: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yzlUlkzhlS0Tkdbt12yLVL6Icb64xveQ3bA5i4msJ2M=)
                          7: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: aDJ/BlhAr3ZuI6P3BU0POvE1//aOF15U+ofqLi0TcqU=)
                          8: 9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl (hash: 7iFy/mf36VYTppeK9aMh2uzEKICxezrsGhiMTsj01gc=)
                          9: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: rtaQaHq+P5lP9auuPcmaB5K4uqxx/eB7GaUrzPNCTXU=)
                          10: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: VOA028A1R3RrEVD4Qi7zXJp992kxYY/J4fv4wuhxPKY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl
                          rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 06:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fd:e5:da:94:f8:c9:55:1a:4e:d9:88:8f:da:d9:df:d1:f9:12:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
        Validity
            Not Before: Jul 12 05:37:11 2026 GMT
            Not After : Jul 13 06:06:11 2026 GMT
        Subject: CN=220E5C6A2672281A8DB61D7DFA7270948119BD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:15:83:de:6b:56:b6:00:71:ac:be:2b:c8:
                    d1:a7:b7:b2:f2:15:8f:d6:6a:a2:3a:e2:c3:d6:38:
                    1f:27:f0:cf:56:92:d0:9e:66:8b:17:5c:d2:94:bd:
                    5c:a7:31:76:a1:f5:c2:f8:ce:fc:40:38:d4:ca:9b:
                    e1:4e:0f:5e:d0:57:e3:41:ce:7e:b4:cd:dd:f4:58:
                    3f:5b:e3:77:ac:e3:0a:20:bb:8e:e1:ea:93:70:58:
                    3e:f3:1f:64:38:e3:ff:05:1c:68:6f:b9:70:fd:56:
                    dc:57:50:9d:c8:d8:80:ee:4b:51:80:61:4c:4c:1a:
                    0d:8e:7b:cb:06:1f:0a:3e:77:5c:a7:a7:45:8c:f3:
                    f5:51:37:62:47:ab:89:d8:b2:e2:d2:a7:db:96:66:
                    a8:9c:ae:53:79:fc:de:8c:1f:68:66:c9:ce:03:ca:
                    c0:b1:c6:e0:ab:27:05:f8:f7:b6:e7:7d:af:79:d8:
                    b1:6d:6e:70:73:10:1b:b9:a0:b2:58:18:6b:e7:30:
                    71:ae:16:10:2e:56:78:1e:a9:44:cc:a6:e9:90:2d:
                    e2:1f:70:b6:82:40:56:34:f3:ba:0b:07:78:ff:5f:
                    6b:4e:f4:78:b7:bf:06:1c:aa:13:e1:52:a1:a2:e7:
                    3e:17:a2:45:51:35:c0:c8:86:1b:76:de:37:9a:86:
                    c7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0E:5C:6A:26:72:28:1A:8D:B6:1D:7D:FA:72:70:94:81:19:BD:1B
            X509v3 Authority Key Identifier:
                keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:55:9d:47:e9:14:67:2b:8f:56:49:ba:57:12:25:cb:20:fa:
         25:1f:9d:bc:df:48:c9:ab:db:97:29:77:67:4a:a5:ac:91:7e:
         eb:b4:7b:95:d7:76:67:f8:8d:35:e7:28:25:3c:d3:02:66:e0:
         58:60:eb:ee:f5:2e:21:b0:0f:51:b8:3e:07:db:04:ab:b7:2d:
         2c:9f:0f:4a:53:63:6d:69:fa:62:dc:27:3d:cd:28:6e:ca:79:
         bf:77:e9:33:8e:10:dd:08:0e:8a:7c:85:77:86:2d:38:c2:13:
         6b:6a:14:78:31:d1:a1:b0:80:3e:93:6b:4d:e0:36:6e:5d:91:
         73:01:59:4e:85:f4:9d:f0:8c:6b:15:88:12:3c:e4:f4:9e:a8:
         b6:38:f7:85:e2:33:63:aa:1a:b6:f2:65:aa:bc:cf:43:65:c2:
         05:07:8f:3e:2a:a3:9c:00:35:63:8f:a2:af:5b:a1:80:b4:f8:
         81:83:d4:24:37:16:55:de:c8:25:f0:a4:d6:ea:fd:54:ca:98:
         c7:b9:4f:aa:37:6c:13:d5:fb:a3:5c:b1:cd:51:d1:b9:9e:b0:
         74:ee:79:e8:5a:1d:44:38:c7:28:e8:a1:79:19:cc:35:b7:02:
         a8:b1:df:7a:73:f7:80:28:bc:35:73:41:e3:28:91:40:f8:5e:
         ce:d8:d6:81
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf/3l2pT4yVUaTtmIj9rZ39H5EsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTczMDZD
Qzg4REEwQjAeFw0yNjA3MTIwNTM3MTFaFw0yNjA3MTMwNjA2MTFaMDMxMTAvBgNV
BAMTKDIyMEU1QzZBMjY3MjI4MUE4REI2MUQ3REZBNzI3MDk0ODExOUJEMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaJRWD3mtWtgBxrL4ryNGnt7Ly
FY/WaqI64sPWOB8n8M9WktCeZosXXNKUvVynMXah9cL4zvxAONTKm+FOD17QV+NB
zn60zd30WD9b43es4wogu47h6pNwWD7zH2Q44/8FHGhvuXD9VtxXUJ3I2IDuS1GA
YUxMGg2Oe8sGHwo+d1ynp0WM8/VRN2JHq4nYsuLSp9uWZqicrlN5/N6MH2hmyc4D
ysCxxuCrJwX497bnfa952LFtbnBzEBu5oLJYGGvnMHGuFhAuVngeqUTMpumQLeIf
cLaCQFY087oLB3j/X2tO9Hi3vwYcqhPhUqGi5z4XokVRNcDIhht23jeahsevAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIg5caiZyKBqNth19+nJwlIEZvRswHwYDVR0j
BBgwFoAUnFjBxq+7W2bGQGlKmFlzBsyI2gswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmUwZjkxNjMtM2U1YS00ZWZhLThiZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZB
RkJCNUI2NkM2NDA2OTRBOTg1OTczMDZDQzg4REEwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QzU4QzFDNkFGQkI1QjY2QzY0MDY5NEE5ODU5NzMwNkNDODhE
QTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi
ZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTcz
MDZDQzg4REEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFlVnUfpFGcrj1ZJulcSJcsg+iUfnbzfSMmr
25cpd2dKpayRfuu0e5XXdmf4jTXnKCU80wJm4Fhg6+71LiGwD1G4PgfbBKu3LSyf
D0pTY21p+mLcJz3NKG7Keb936TOOEN0IDop8hXeGLTjCE2tqFHgx0aGwgD6Ta03g
Nm5dkXMBWU6F9J3wjGsViBI85PSeqLY494XiM2OqGrbyZaq8z0NlwgUHjz4qo5wA
NWOPoq9boYC0+IGD1CQ3FlXeyCXwpNbq/VTKmMe5T6o3bBPV+6Ncsc1R0bmesHTu
eehaHUQ4xyjooXkZzDW3Aqix33pz94AovDVzQeMokUD4Xs7Y1oE=
-----END CERTIFICATE-----
Generated at Sun Jul 12 19:51:22 2026 by rpki-client