Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft
File:                     C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json)
Hash identifier:          I6IhhB2DtlL9AIhSgNFWE8i8wl4kM/IpSMlhvsWzFNU=
Subject key identifier:   84:5A:F2:C6:FC:7A:9B:D3:C1:C2:18:62:FB:31:A6:D6:50:DA:1B:6C
Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37
Certificate issuer:       /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37
Certificate serial:       2E43B486E468FCFE68CB4DF53F992F5B5BB97CF2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft
Manifest number:          6C
Signing time:             Tue 21 Jul 2026 02:49:13 +0000
Manifest this update:     Tue 21 Jul 2026 02:44:13 +0000
Manifest next update:     Wed 22 Jul 2026 04:15:13 +0000
Files and hashes:         1: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: cxh+QRj7a1bsR8BuwCbXaZYFh1gX0kaWmU1F5jyUC9k=)
                          2: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=)
                          3: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl
                          rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:43:b4:86:e4:68:fc:fe:68:cb:4d:f5:3f:99:2f:5b:5b:b9:7c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37
        Validity
            Not Before: Jul 21 02:44:13 2026 GMT
            Not After : Jul 22 04:15:13 2026 GMT
        Subject: CN=845AF2C6FC7A9BD3C1C21862FB31A6D650DA1B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:5d:12:79:5e:7d:d0:15:6c:13:5f:c7:b8:
                    75:5c:b2:53:26:b7:12:dc:67:c1:39:0f:9d:ce:4e:
                    61:dc:77:92:a7:b3:5c:7d:f3:75:ad:f1:e6:8b:33:
                    69:81:a3:79:9f:74:0c:23:48:41:2f:1a:71:7e:19:
                    40:3f:33:c9:bd:0f:f8:f2:8c:13:2b:5a:0c:f7:82:
                    f0:bb:53:a2:f7:4a:ea:a2:64:78:11:66:a0:49:35:
                    eb:aa:a8:23:0e:65:5c:1b:5f:0b:3b:90:e7:90:37:
                    1d:2a:ba:89:6a:de:5c:1d:90:c9:07:25:af:79:65:
                    ca:1f:0a:47:b1:f0:07:c2:fd:7e:e5:0e:79:0b:34:
                    e2:33:17:99:85:f3:3b:23:62:e7:34:6e:4c:65:e2:
                    63:77:63:54:ca:95:80:88:f7:04:04:0b:13:73:c0:
                    00:1c:e2:37:c5:f6:55:d5:e6:c9:04:c9:23:ff:4a:
                    96:27:b4:9e:54:3d:75:69:01:f9:05:08:4d:66:a5:
                    e3:0f:1d:ae:04:65:75:9b:d7:23:4e:13:3b:99:26:
                    06:0c:43:1f:55:75:95:96:3a:51:45:c2:6b:80:9e:
                    84:7a:d6:83:51:0c:67:d5:8c:a3:ad:6d:33:93:d6:
                    ae:76:45:4b:07:31:d6:69:fd:3d:e3:f0:5f:65:f2:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5A:F2:C6:FC:7A:9B:D3:C1:C2:18:62:FB:31:A6:D6:50:DA:1B:6C
            X509v3 Authority Key Identifier:
                keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:0d:7d:48:81:0e:e7:2f:ae:5c:a9:d0:d5:f0:40:77:60:
         ce:cc:d2:a9:7d:42:1f:6a:80:ed:46:c1:ec:74:b5:82:81:71:
         f5:73:9e:dc:11:59:c3:88:b6:1a:88:56:8b:5d:01:de:c6:32:
         16:92:4b:9b:72:7e:08:83:c2:d0:40:87:49:23:99:73:90:9d:
         7f:07:a1:af:1c:00:9b:a0:ed:2a:3a:42:04:0e:06:76:11:51:
         18:99:ba:30:31:ed:77:75:62:17:2f:4c:fa:e3:b4:84:00:8e:
         80:9b:f8:06:f8:4e:c2:5b:58:3a:af:a4:eb:55:5d:fd:10:a7:
         cb:9d:d4:32:87:9d:92:70:1e:a4:54:23:4a:98:67:6c:ab:aa:
         74:82:69:09:e3:b1:ea:88:bf:81:92:70:65:47:15:8e:db:5c:
         4c:9a:8b:94:c5:c3:fb:d5:02:74:3d:72:c9:bd:03:1e:d0:ec:
         81:71:01:3a:0d:80:98:c9:d6:89:4f:7c:ce:ed:1b:37:53:f4:
         7a:18:b4:ff:12:50:5c:6d:01:a3:81:b9:ae:24:d9:72:3d:d4:
         c8:0f:53:48:f2:8b:12:97:8f:19:4a:e5:7f:7e:e1:e1:88:93:
         af:88:e5:aa:8a:96:41:e3:b3:9f:cc:72:8f:37:fa:c2:08:57:
         c9:42:ee:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULkO0huRo/P5oy031P5kvW1u5fPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0
MjhDNEQzNzAeFw0yNjA3MjEwMjQ0MTNaFw0yNjA3MjIwNDE1MTNaMDMxMTAvBgNV
BAMTKDg0NUFGMkM2RkM3QTlCRDNDMUMyMTg2MkZCMzFBNkQ2NTBEQTFCNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/l0SeV590BVsE1/HuHVcslMm
txLcZ8E5D53OTmHcd5Kns1x983Wt8eaLM2mBo3mfdAwjSEEvGnF+GUA/M8m9D/jy
jBMrWgz3gvC7U6L3SuqiZHgRZqBJNeuqqCMOZVwbXws7kOeQNx0quolq3lwdkMkH
Ja95ZcofCkex8AfC/X7lDnkLNOIzF5mF8zsjYuc0bkxl4mN3Y1TKlYCI9wQECxNz
wAAc4jfF9lXV5skEySP/SpYntJ5UPXVpAfkFCE1mpeMPHa4EZXWb1yNOEzuZJgYM
Qx9VdZWWOlFFwmuAnoR61oNRDGfVjKOtbTOT1q52RUsHMdZp/T3j8F9l8tjfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhFryxvx6m9PBwhhi+zGm1lDaG2wwHwYDVR0j
BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz
MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0
RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3
ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC
NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEuyDX1IgQ7nL65cqdDV8EB3YM7M0ql9Qh9q
gO1Gwex0tYKBcfVzntwRWcOIthqIVotdAd7GMhaSS5tyfgiDwtBAh0kjmXOQnX8H
oa8cAJug7So6QgQOBnYRURiZujAx7Xd1YhcvTPrjtIQAjoCb+Ab4TsJbWDqvpOtV
Xf0Qp8ud1DKHnZJwHqRUI0qYZ2yrqnSCaQnjseqIv4GScGVHFY7bXEyai5TFw/vV
AnQ9csm9Ax7Q7IFxAToNgJjJ1olPfM7tGzdT9HoYtP8SUFxtAaOBua4k2XI91MgP
U0jyixKXjxlK5X9+4eGIk6+I5aqKlkHjs5/Mco83+sIIV8lC7iI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:41:39 2026 by rpki-client