Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft
File:                     07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft (raw, json)
Hash identifier:          LHeb58idjn68TgoGa2NPSX+BubFvbe6vQ98FvZvz0IQ=
Subject key identifier:   8B:4D:D3:77:AC:11:59:A7:B7:82:90:B3:46:B1:77:79:6A:1B:F8:A9
Authority key identifier: 07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D
Certificate issuer:       /CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D
Certificate serial:       075EA6D4770CF481AB6F7BE95C4566F526CEC1FC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft
Manifest number:          69
Signing time:             Sun 19 Jul 2026 15:41:15 +0000
Manifest this update:     Sun 19 Jul 2026 15:36:15 +0000
Manifest next update:     Mon 20 Jul 2026 17:03:15 +0000
Files and hashes:         1: 07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl (hash: +5qRU8AMPxS/uC1Z40vvZQ0MhIuOpREJv4Zw3TUqE3g=)
                          2: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: rVSTBgAcxMjiphBfXsUD1/ITkO/ZRhpcgBHWKyAe9do=)
                          3: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: ZInQWIdIz9yreiElsNwlmLmVmB2tNTPmR2V0a4fG3f8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl
                          rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 17:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5e:a6:d4:77:0c:f4:81:ab:6f:7b:e9:5c:45:66:f5:26:ce:c1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AF34F244C013D393BAED0150A652F2BF9F1A5D
        Validity
            Not Before: Jul 19 15:36:15 2026 GMT
            Not After : Jul 20 17:03:15 2026 GMT
        Subject: CN=8B4DD377AC1159A7B78290B346B177796A1BF8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:33:6d:30:b6:ae:e9:c2:8f:ff:15:d9:4a:
                    33:ab:c9:90:b1:85:95:49:28:58:ef:77:48:6c:07:
                    25:35:fe:23:88:7c:7e:6b:c1:22:23:0d:e3:e8:76:
                    fc:5e:ba:eb:46:72:e9:bc:87:c9:ca:da:18:af:ee:
                    5e:0c:19:3d:23:12:10:4c:2d:9d:b1:46:6a:34:78:
                    e6:e7:d5:09:2d:3d:10:fe:ec:d4:10:0e:83:14:fd:
                    d9:27:0b:8c:71:78:bd:d5:63:cf:7d:a3:f7:01:74:
                    7c:80:f0:21:af:c0:79:e8:52:80:4d:52:33:0f:12:
                    c7:45:6e:6b:6a:0e:db:30:ee:08:7e:0b:cf:86:8d:
                    fa:67:11:df:af:8b:c4:3f:12:ba:d0:71:85:9d:34:
                    6d:1f:d4:ed:6c:6a:7c:4b:cb:c9:da:30:fd:ee:16:
                    c9:ef:d3:30:0d:b7:08:94:9d:91:c7:93:68:d1:75:
                    d4:35:e6:1f:49:c1:ba:a7:0f:fc:4c:2d:f2:0b:9a:
                    5d:e9:df:06:bf:c2:87:a4:c6:a6:82:12:f1:47:2a:
                    42:f3:5d:2e:57:53:ec:f5:33:6b:56:68:a2:ad:2f:
                    d7:0d:f2:57:64:53:2e:d2:f0:85:96:a9:2a:8e:65:
                    fa:c6:4e:97:ee:d4:7a:bf:b6:96:91:59:62:3c:c5:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4D:D3:77:AC:11:59:A7:B7:82:90:B3:46:B1:77:79:6A:1B:F8:A9
            X509v3 Authority Key Identifier:
                keyid:07:AF:34:F2:44:C0:13:D3:93:BA:ED:01:50:A6:52:F2:BF:9F:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07AF34F244C013D393BAED0150A652F2BF9F1A5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/07AF34F244C013D393BAED0150A652F2BF9F1A5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a6:b6:86:16:e3:3c:86:0e:db:d4:15:66:1f:57:9b:d7:03:
         af:2e:64:5d:35:70:94:58:63:de:5f:9c:b4:b5:80:fb:27:4c:
         95:86:00:b6:13:05:36:6f:8f:ea:78:f3:3b:4c:e3:4a:c0:f7:
         dd:aa:59:d8:4a:df:11:20:df:fe:1a:0f:64:99:e6:f3:d4:5c:
         d9:13:2f:f1:f3:06:21:f8:f5:24:df:e0:e5:bc:ae:59:25:df:
         fa:b0:ac:10:5e:7b:c7:0c:b5:82:df:c1:66:49:ce:e9:95:cc:
         23:ea:66:08:fe:00:13:f8:5a:1a:ac:7c:3f:2e:17:1d:83:03:
         46:1c:b2:f6:2d:c1:8e:35:30:3d:86:b4:1d:98:aa:b8:59:94:
         cc:e4:4d:ed:5c:18:4c:78:f7:8e:55:51:37:ba:a2:01:e7:ba:
         63:a7:60:86:09:24:13:7d:68:b2:2c:d7:d8:ca:3a:5c:9c:99:
         02:e3:a5:7c:99:84:a9:ed:37:ad:5b:e3:c0:96:cc:f1:8c:aa:
         60:74:69:95:4d:1a:83:65:39:b6:94:b9:08:fd:ab:e6:9b:91:
         d6:90:68:3b:a5:16:58:26:5e:a1:8e:37:91:76:e3:7e:30:76:
         65:e6:92:82:07:f4:d6:74:cb:54:be:fe:f3:96:3b:59:74:59:
         07:86:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 04:12:15 2026 by rpki-client