Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
File:                     04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft (raw, json)
Hash identifier:          6ckd5eQmdFp/XA+rZKWvis3goXkqzaSm/0amsyP2uZc=
Subject key identifier:   4C:64:22:18:10:E4:F9:F3:68:41:02:59:04:AC:8E:3F:D3:40:D3:5D
Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
Certificate issuer:       /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Certificate serial:       7700E647BE61E04BFFF935EA9ADE2DA6686704AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
Manifest number:          69
Signing time:             Sun 19 Jul 2026 20:27:12 +0000
Manifest this update:     Sun 19 Jul 2026 20:22:12 +0000
Manifest next update:     Mon 20 Jul 2026 23:42:12 +0000
Files and hashes:         1: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU=)
                          2: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: 6BMdJfjQOk6ZMP+r3PWXA1452jn4jTz5h082fXgG9S4=)
                          3: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl (hash: PQ/N+6bZ4A1GQL4C4TrkK8zMXqXM/te5QNK7tsgK1Nk=)
                          4: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw=)
                          5: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0=)
                          6: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=)
                          7: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=)
                          8: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=)
                          9: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: FB0gJNbI9gb2zm9vAMp0QwCkUB/Jt+h+ezAWp0ZQAY4=)
                          10: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: +N9+uIvrbV+jDpFQEoLWVMjE7Tiq4ZoJyUrk8aQRIxU=)
                          11: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: X3p+VR9fHu2hyTBK0FsVrH6VXDfYDH8j4Zpx8G4MzCs=)
                          12: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
                          rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:00:e6:47:be:61:e0:4b:ff:f9:35:ea:9a:de:2d:a6:68:67:04:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
        Validity
            Not Before: Jul 19 20:22:12 2026 GMT
            Not After : Jul 20 23:42:12 2026 GMT
        Subject: CN=4C64221810E4F9F36841025904AC8E3FD340D35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:19:d2:a0:39:1e:87:5d:96:01:ae:2d:38:
                    85:c0:43:e2:31:36:da:37:05:2a:60:61:4e:44:1f:
                    06:02:36:20:af:11:c1:47:cd:aa:1c:2d:c6:6d:0d:
                    ae:71:17:ca:e7:26:4d:f6:28:e9:15:4a:45:b7:81:
                    32:83:5b:4f:47:83:ca:0a:cc:66:3d:29:ec:14:19:
                    a8:af:c2:96:ce:60:d5:f5:eb:5c:de:96:5f:f2:8e:
                    e5:e6:33:88:a0:7c:ae:1d:33:91:d6:ef:0a:cc:f0:
                    8e:8b:fb:ff:a3:16:aa:3a:d1:2c:bc:3b:13:a7:11:
                    bf:6d:15:92:d2:a3:58:4a:e4:c1:90:7e:2a:ed:cc:
                    92:86:3c:dc:ae:de:b0:ef:90:4a:a8:9b:c1:c8:6c:
                    95:f5:5c:43:d5:c9:ae:8f:22:41:e2:14:fe:09:fe:
                    b1:58:40:49:4d:7f:d9:54:56:cf:24:21:40:ed:df:
                    be:6b:42:83:6f:d4:d5:51:8f:bb:36:82:c9:48:e9:
                    0d:47:4b:e9:2d:82:87:70:a8:d5:cf:ca:bb:bd:5c:
                    d1:1d:96:42:f7:f6:07:7c:43:7b:32:46:e2:a9:0c:
                    f5:08:a9:06:01:12:14:a7:90:5a:74:ae:2c:ce:3f:
                    7c:7f:ce:38:e5:b7:89:1c:a8:4e:3c:f9:77:37:22:
                    36:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:22:18:10:E4:F9:F3:68:41:02:59:04:AC:8E:3F:D3:40:D3:5D
            X509v3 Authority Key Identifier:
                keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:20:cc:64:4d:49:5c:8f:cd:8d:14:a3:91:13:8c:19:2a:
         0e:cc:f5:68:13:dd:48:ca:6c:1b:60:a1:7b:a5:d9:e4:07:6b:
         ca:91:58:ba:67:2d:7f:dc:dc:21:2b:f2:cb:89:e9:d3:03:53:
         d5:db:1e:55:97:c7:f5:31:40:86:b6:7e:f0:91:0f:b3:4b:8f:
         00:cb:05:83:fc:f2:9e:d2:5f:b1:d9:9b:83:2e:8e:65:f8:2b:
         75:58:f6:b5:f6:07:8f:00:bf:b5:2b:82:70:ad:be:fe:f2:b2:
         75:4f:17:ee:3b:7a:c6:0f:ae:50:17:d6:f4:51:4f:d8:ec:3e:
         dc:cb:12:58:ee:8a:c1:1c:0e:fa:bc:a1:55:a1:34:4b:f5:9a:
         7c:44:91:40:12:3a:c0:4c:8f:bb:23:7c:56:8e:f6:3e:25:c8:
         b8:19:ff:bc:60:70:b4:be:c4:f2:62:fa:ed:4a:00:70:97:d4:
         e5:e6:de:94:68:f8:50:6a:57:94:86:a0:30:41:0e:d7:72:c7:
         fc:31:73:73:da:f5:b8:87:49:17:fb:e3:6f:1b:fd:a5:4c:2c:
         b0:ac:f9:58:a2:e9:70:1a:36:08:c1:13:5b:29:b9:42:aa:2f:
         95:40:d4:88:d6:21:8e:a5:54:f4:7c:b6:77:59:9e:e9:ab:f7:
         f7:b9:b8:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdwDmR75h4Ev/+TXqmt4tpmhnBKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4
RTdDNDk5MzAeFw0yNjA3MTkyMDIyMTJaFw0yNjA3MjAyMzQyMTJaMDMxMTAvBgNV
BAMTKDRDNjQyMjE4MTBFNEY5RjM2ODQxMDI1OTA0QUM4RTNGRDM0MEQzNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenxnSoDkeh12WAa4tOIXAQ+Ix
Nto3BSpgYU5EHwYCNiCvEcFHzaocLcZtDa5xF8rnJk32KOkVSkW3gTKDW09Hg8oK
zGY9KewUGaivwpbOYNX161zell/yjuXmM4igfK4dM5HW7wrM8I6L+/+jFqo60Sy8
OxOnEb9tFZLSo1hK5MGQfirtzJKGPNyu3rDvkEqom8HIbJX1XEPVya6PIkHiFP4J
/rFYQElNf9lUVs8kIUDt375rQoNv1NVRj7s2gslI6Q1HS+ktgodwqNXPyru9XNEd
lkL39gd8Q3syRuKpDPUIqQYBEhSnkFp0rizOP3x/zjjlt4kcqE48+Xc3IjZDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTGQiGBDk+fNoQQJZBKyOP9NA010wHwYDVR0j
BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1
MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0
OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2
NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3
MkI4RTdDNDk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFHvIMxkTUlcj82NFKORE4wZKg7M9WgT3UjK
bBtgoXul2eQHa8qRWLpnLX/c3CEr8suJ6dMDU9XbHlWXx/UxQIa2fvCRD7NLjwDL
BYP88p7SX7HZm4MujmX4K3VY9rX2B48Av7UrgnCtvv7ysnVPF+47esYPrlAX1vRR
T9jsPtzLEljuisEcDvq8oVWhNEv1mnxEkUASOsBMj7sjfFaO9j4lyLgZ/7xgcLS+
xPJi+u1KAHCX1OXm3pRo+FBqV5SGoDBBDtdyx/wxc3Pa9biHSRf7428b/aVMLLCs
+Vii6XAaNgjBE1spuUKqL5VA1IjWIY6lVPR8tndZnumr9/e5uCI=
-----END CERTIFICATE-----
Generated at Sun Jul 19 23:21:47 2026 by rpki-client