Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
File:                     819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft (raw, json)
Hash identifier:          KhwABfAFZ4c5mrKbh+BdHyznctPJ+r/y/LFofMhCV9k=
Subject key identifier:   62:D9:BB:7F:0A:DC:4D:AB:17:6F:72:CD:3B:88:E8:57:16:EC:40:E6
Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B
Certificate issuer:       /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
Certificate serial:       1854F3E6820328C34D99A8655F0A17748FBC01A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
Manifest number:          6B
Signing time:             Tue 21 Jul 2026 03:30:14 +0000
Manifest this update:     Tue 21 Jul 2026 03:25:14 +0000
Manifest next update:     Wed 22 Jul 2026 05:12:14 +0000
Files and hashes:         1: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=)
                          2: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: +rTucgGLiY8uqL8eF3DTMn/pET3ZcxtiVlAUU6weN/o=)
                          3: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl (hash: tM9fxMqLo866yqmLrDP5en6ImsOvehkTCeIHfDyBLNM=)
                          4: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: 33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=)
                          5: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: C4VhfRzKoT9ksZvdL8CPzP9K+3FYQAaDgMeeFvQaFx4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl
                          rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:54:f3:e6:82:03:28:c3:4d:99:a8:65:5f:0a:17:74:8f:bc:01:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B
        Validity
            Not Before: Jul 21 03:25:14 2026 GMT
            Not After : Jul 22 05:12:14 2026 GMT
        Subject: CN=62D9BB7F0ADC4DAB176F72CD3B88E85716EC40E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:77:e6:f0:21:d3:a8:e0:88:8b:d4:6e:ca:
                    b9:7e:69:12:f1:40:f0:b9:19:3c:85:24:01:13:3d:
                    2f:b4:7c:8d:09:f2:c5:a2:90:96:be:c4:31:46:ce:
                    38:bd:13:96:06:52:b4:57:6d:01:d0:5c:68:ee:5e:
                    14:04:48:06:61:b6:5f:6e:42:75:0f:61:67:8d:e6:
                    2e:23:23:58:51:11:ee:c6:1b:ef:8a:9c:2b:91:30:
                    31:60:bd:31:ba:a8:fa:fc:2f:72:79:af:50:8d:85:
                    d7:1e:b7:f0:c1:53:1d:9d:d7:06:b9:52:ef:b4:7b:
                    a9:82:c9:52:75:87:15:4a:41:c5:21:ea:1c:bb:9e:
                    82:70:ca:f8:18:80:09:43:bd:b6:9f:ff:9c:d7:8f:
                    42:48:58:cf:ca:30:3d:08:68:1c:f9:c0:19:07:bb:
                    e2:7d:5f:91:38:d1:89:d3:10:48:29:8e:74:f6:47:
                    41:15:51:66:75:dd:b6:4d:54:54:9f:d3:50:cd:16:
                    a8:cc:bf:95:15:13:d2:3c:b0:86:b1:74:10:c8:41:
                    6e:a2:f1:17:6e:26:2e:a5:3f:1a:a7:65:f7:a2:71:
                    d0:b6:96:bf:60:05:48:fa:f3:29:76:9b:87:b1:0a:
                    1c:06:ae:a1:d1:b5:fa:66:52:e1:b5:22:1d:84:9b:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D9:BB:7F:0A:DC:4D:AB:17:6F:72:CD:3B:88:E8:57:16:EC:40:E6
            X509v3 Authority Key Identifier:
                keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cb:06:0f:54:dc:36:d5:ee:f6:95:a0:a0:b4:bc:e6:77:5c:
         b1:1c:a2:d8:a4:3d:02:6f:31:7f:53:14:5d:b3:ff:c2:e4:9e:
         53:08:49:fa:5d:d6:93:c3:cd:34:05:d4:1a:12:65:3a:4d:40:
         5c:61:f2:3c:b7:c9:4d:92:22:9f:1e:db:1a:80:15:2d:e8:58:
         90:07:01:b2:0f:84:dc:57:d5:cc:34:90:d8:7c:b7:98:0e:e3:
         44:de:4e:11:ec:86:ef:76:30:d3:9c:3d:90:a3:bf:70:b4:cf:
         c6:4f:a5:b9:e2:8e:2a:ed:c0:78:b3:7e:ef:72:14:18:b4:a1:
         94:f9:34:a5:45:86:b8:02:c6:21:ab:6f:b9:e3:15:d0:ff:44:
         a9:eb:94:f8:cf:1f:1d:22:ed:96:3c:90:c9:79:90:42:8f:42:
         e9:5b:29:51:e4:08:f5:30:c7:bc:a7:5b:ed:3d:f7:68:e6:84:
         be:83:22:03:5f:e9:f3:d5:d6:ac:c0:91:95:16:e9:8d:0a:60:
         d9:c8:24:10:6f:b5:f2:6f:7c:ef:4b:af:a4:85:2c:cf:36:67:
         c3:93:34:92:ff:55:94:e9:2b:c9:5e:54:82:37:6e:df:8b:b2:
         ac:ae:15:68:30:84:68:1c:57:b1:f2:aa:e1:74:fb:93:34:c6:
         3b:10:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:33 2026 by rpki-client