Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
File:                     C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft (raw, json)
Hash identifier:          6sLMUOJ8Dv26IghGgqmyv5hY/jnsRQ9ZS79ENMID8OE=
Subject key identifier:   3D:34:5B:32:FB:D1:3F:38:61:DF:F9:7F:63:2C:DE:32:47:F9:09:E9
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Certificate issuer:       /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial:       789738BA879823A97DE96AD27CAFC095E0F8EDC5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
Manifest number:          65
Signing time:             Fri 17 Jul 2026 03:57:53 +0000
Manifest this update:     Fri 17 Jul 2026 03:52:53 +0000
Manifest next update:     Sat 18 Jul 2026 05:54:53 +0000
Files and hashes:         1: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: mfv/AKDA5suUtEeKfRpWWbxh8T9aefWVFLYJyZgMkdg=)
                          2: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: jKiTXm/8vDyf2AvrZzGMw86IoRFu/5T1HNGWk6tq1HI=)
                          3: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: 9VPJuQ90qwdehcRd8MO9eyEcwL4yQF5FxdVlD4S3VMs=)
                          4: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: cpOS+owQUlhThnbX4ZpGNAdhNpHzy2pOiSrU5Q5UTVY=)
                          5: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: p4Sr8FlFmUwj/pC6EPbP4Z4DB4YyU4S3h6AHeZD4KSk=)
                          6: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: sJ/pnmphoKExlbrYzPDTgUL5xv4K3amVSnVGmlvFatg=)
                          7: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: Y1EVFuIwP2J3LGEmXO1ADmvKKygK86wXzAkR/y0dT8g=)
                          8: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: YQ+Y8UuZzN2YEC3oofbc4PTFQcZkS+muZOf6DD/xArQ=)
                          9: C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl (hash: XKGVnp95WpWtt8ACNTz94ZIxxlhySwntyTbVhorBbu0=)
                          10: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: N0IJVItqLdGXcfuM1pRtEZUOkPN6U39CHBDp9KbxnvE=)
                          11: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: c03wLpEzYg97ghhueJfI6BXVZd/aJ1GtQxycuxMHJK4=)
                          12: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: VcOXgGCTB4NhXdLkb1b7zn46SySdcXjLhyphDA4ZnsM=)
                          13: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: lIhlMRIZLEBVMJXri3XJA/w3v0WW0NIWvRLNQvPmN24=)
                          14: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: SQDl0NMVHHhQkpG6yxh3VjuT52aZ+ScdAS6b47rIF4Y=)
                          15: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: bJ7AouFb4tIwAc54hXOpuyqA13UTgSDRT2nPRsM2jh0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
                          rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 04:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:97:38:ba:87:98:23:a9:7d:e9:6a:d2:7c:af:c0:95:e0:f8:ed:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
        Validity
            Not Before: Jul 17 03:52:53 2026 GMT
            Not After : Jul 18 05:54:53 2026 GMT
        Subject: CN=3D345B32FBD13F3861DFF97F632CDE3247F909E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:02:67:f6:3e:d9:54:0d:13:c2:55:44:1f:
                    5b:03:c1:b8:27:15:0f:66:48:ac:43:5c:8e:ec:63:
                    86:41:61:71:1e:5e:1a:84:1b:c7:c9:d9:7e:c1:6b:
                    10:c7:3c:b9:a6:37:36:4f:d3:23:7b:14:df:07:8f:
                    42:90:7b:a0:76:bf:a0:b4:e7:38:00:52:55:d8:91:
                    0d:a3:cf:5f:36:ed:4b:29:f3:6e:6d:c8:1b:91:53:
                    27:f5:18:46:ac:3d:7a:cb:3c:31:16:39:bd:d0:fd:
                    af:f3:10:38:fd:cd:43:07:af:4f:56:4f:81:4d:30:
                    23:c4:f0:d1:d4:bf:5f:81:ab:be:f0:1e:4a:56:d0:
                    13:65:f3:b7:a7:c8:e9:04:16:61:42:0d:89:76:4f:
                    dc:bd:a8:ad:d1:26:86:c0:7b:c8:2e:30:4d:83:35:
                    d5:e8:f2:9c:bf:d4:71:29:ed:53:5d:ce:13:1a:80:
                    fe:1b:28:da:32:5d:0b:b6:f2:7d:f6:1f:ed:c7:dd:
                    dc:4e:71:6f:98:17:6d:d2:7c:ed:48:36:79:c0:5d:
                    c6:b4:32:fa:ef:55:16:49:8b:c9:cc:61:00:da:57:
                    d8:df:4e:79:a9:ef:ce:14:ae:f9:b5:da:48:5e:6d:
                    38:42:93:8e:fb:00:83:36:ae:81:90:a3:e7:1d:7d:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:34:5B:32:FB:D1:3F:38:61:DF:F9:7F:63:2C:DE:32:47:F9:09:E9
            X509v3 Authority Key Identifier:
                keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:51:7a:fa:8c:0c:cb:b1:3d:26:fe:b1:8b:d4:80:d1:b6:7a:
         18:21:34:63:54:71:0d:79:d4:15:00:78:5d:51:02:3b:f6:92:
         70:5b:ab:75:93:db:68:2e:85:36:dc:e2:b5:36:da:65:11:8f:
         9e:09:da:f4:22:ed:0f:69:e6:ff:36:b9:f4:04:16:42:d9:59:
         81:66:d5:ef:72:f6:b3:60:36:a7:e2:71:56:80:ff:97:fd:fb:
         c9:9a:66:09:87:ce:8a:b3:c1:8c:b0:3f:8b:2a:bc:19:26:a9:
         78:30:f1:b6:5e:84:aa:27:da:e4:f3:7e:3f:49:b0:82:28:50:
         18:02:04:8b:68:1d:16:71:77:9d:dc:26:7a:60:fb:21:6e:3f:
         64:f5:04:32:02:c3:3e:b9:0e:e6:11:db:9a:b0:36:c0:8a:90:
         fa:70:5c:eb:cf:a4:93:5f:aa:e7:e3:76:ba:56:54:5e:af:25:
         54:d9:dc:72:13:69:60:a2:d4:4b:87:4e:a3:44:05:c9:42:21:
         6d:ce:23:d8:e6:c2:ed:bd:1c:80:9a:0d:5a:1c:5d:0c:bd:41:
         2f:0d:45:61:f7:dd:dd:dd:64:7b:eb:45:8b:88:16:a4:33:b2:
         ed:c7:78:f6:61:04:b1:ea:bf:37:ec:02:4e:d3:3b:72:57:b3:
         31:a2:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:53:14 2026 by rpki-client