Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
File:                     9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft (raw, json)
Hash identifier:          hBEtCLminJ/eSEkAq4fdhiicRfbSYn6BpSLgJyHcbqk=
Subject key identifier:   26:61:FA:C3:76:E1:E3:D8:25:76:22:60:35:CB:0E:56:90:A7:70:ED
Authority key identifier: 9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC
Certificate issuer:       /CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
Certificate serial:       44071DFE4C229D8877B9135CD14669B1788F450A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
Manifest number:          69
Signing time:             Sun 19 Jul 2026 19:46:16 +0000
Manifest this update:     Sun 19 Jul 2026 19:41:16 +0000
Manifest next update:     Mon 20 Jul 2026 22:18:16 +0000
Files and hashes:         1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: lqSxCFv5WmyrxicOkawzjV/AVzQFgoIxemd6g7X5MqQ=)
                          2: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 8HBG0p89815vWKkauI6Wn4NeMLGP4fCVAgDc4tDqrGk=)
                          3: 9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl (hash: FMrIziWLVNPNbwBZk4R8b6ErgfgZc2dj6OiIsVcffq0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl
                          rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 22:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:07:1d:fe:4c:22:9d:88:77:b9:13:5c:d1:46:69:b1:78:8f:45:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4283F96B701EC60EA45F124F88819D76D7E8FC
        Validity
            Not Before: Jul 19 19:41:16 2026 GMT
            Not After : Jul 20 22:18:16 2026 GMT
        Subject: CN=2661FAC376E1E3D82576226035CB0E5690A770ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:59:ca:1a:12:1a:1c:3c:7c:73:ad:0d:09:fe:
                    16:e0:77:e5:68:7b:8f:dc:f2:c2:7f:56:d3:88:f4:
                    b4:18:95:df:7b:a8:62:a3:37:2c:0d:ca:c4:47:b5:
                    96:97:78:1b:6a:44:14:04:d9:d2:62:f5:da:e5:ae:
                    3d:07:8d:c8:75:cb:2c:42:b5:fe:9b:42:23:47:be:
                    ae:f0:9f:18:45:70:2d:5d:5a:da:a5:0a:8a:2e:8b:
                    53:fc:df:2d:c8:94:da:d8:2c:dc:06:5e:cd:17:9d:
                    39:ee:ce:7c:55:b9:17:63:c7:51:c7:ae:6c:ab:d2:
                    af:56:8f:82:cb:10:f3:72:76:66:76:77:05:00:40:
                    99:95:fd:7f:21:3d:d1:6f:a4:4f:84:cd:4b:ae:55:
                    09:a8:6a:18:29:db:10:64:d9:a8:29:89:d2:11:b6:
                    ea:1d:eb:e1:ae:8c:58:9e:cc:4c:b7:50:24:a1:b2:
                    9a:ae:36:86:64:52:33:88:a6:bb:ba:d8:32:15:60:
                    4f:1b:6b:b9:7e:9f:02:dd:fe:10:3b:39:70:9d:ff:
                    fb:d8:e9:a7:67:22:6e:bb:9d:fe:34:34:2c:1f:92:
                    86:4a:cd:a7:7e:f9:32:45:b4:b4:ff:28:f7:5a:4f:
                    69:50:65:ae:c3:0f:2e:1f:0e:b9:1f:24:bd:cc:1e:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:FA:C3:76:E1:E3:D8:25:76:22:60:35:CB:0E:56:90:A7:70:ED
            X509v3 Authority Key Identifier:
                keyid:9A:42:83:F9:6B:70:1E:C6:0E:A4:5F:12:4F:88:81:9D:76:D7:E8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A4283F96B701EC60EA45F124F88819D76D7E8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9A4283F96B701EC60EA45F124F88819D76D7E8FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:34:7d:87:c9:e6:c2:09:b9:39:96:bc:57:ee:cb:57:18:c5:
         3b:52:a8:77:e7:f0:0c:57:f5:1b:46:98:6e:40:cc:e9:54:10:
         83:44:4f:37:24:a7:7a:a1:44:ec:40:65:00:82:c7:47:9c:d1:
         1b:f5:38:03:fb:be:17:15:36:4f:1d:e4:34:09:0d:63:4f:d0:
         63:13:17:91:c1:ca:84:28:16:80:89:d6:e8:b4:b1:27:61:01:
         28:28:19:6c:b9:13:c9:a6:af:48:f6:22:8f:19:ea:3c:b4:05:
         2b:b2:91:53:b9:94:db:3c:af:f1:64:46:d4:6d:1e:bd:01:36:
         0d:8a:87:47:89:61:07:69:3c:a1:a7:0a:61:ed:73:6d:11:70:
         d4:45:cc:f4:fe:50:87:59:7e:86:8b:db:88:96:d5:1d:ba:b4:
         0e:81:4c:00:7a:46:a1:f9:f1:9e:d5:45:ac:52:1d:79:d7:5a:
         01:0e:cd:a2:5a:90:e5:94:e8:3b:f3:0b:76:6f:b9:78:a1:30:
         01:f9:4a:a5:7f:19:6b:ea:cc:fb:1d:5f:aa:35:d7:43:3f:e8:
         1c:9b:60:77:65:fd:77:70:7b:6b:66:91:d8:a8:f1:3d:6a:6c:
         95:9d:c4:37:3b:7c:7e:90:43:2f:93:6f:b7:57:79:e0:bc:f6:
         3d:9d:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 04:48:54 2026 by rpki-client