Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
File:                     2702EC259515C0960B0BFF36647679F0CA781E52.mft (raw, json)
Hash identifier:          d11xZm9lSrL1F2DvSC5IVml+zJlWDpsHtoPZt0FBPaE=
Subject key identifier:   3D:ED:40:45:FE:48:1A:D7:B2:E1:0A:66:F2:0A:89:61:1B:1A:1F:21
Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
Certificate issuer:       /CN=2702EC259515C0960B0BFF36647679F0CA781E52
Certificate serial:       0A8BD913A1BAF02854B9390FDCA81FEDF7C03238
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 21:17:30 +0000
Manifest this update:     Mon 20 Jul 2026 21:12:30 +0000
Manifest next update:     Tue 21 Jul 2026 23:25:30 +0000
Files and hashes:         1: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: /lklKRwQXzQQDya+GH3WUkfxs3Rw/gHVRuuz1tcXoUE=)
                          2: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: MvYURtqKvXgJtHDe+bGVN+qQ+GvO+Bbw/63OedWxccg=)
                          3: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: g1km73POKKg69MSbDnEF0CkpP2rF3ZrF65BD2T6WTQc=)
                          4: 2702EC259515C0960B0BFF36647679F0CA781E52.crl (hash: cavA2iXqow6C187bFd7KuiolKSKgHHMjC/69fEhqoJA=)
                          5: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: vNMbKB+jjAGCqgxCSWzjKIMOhXwlS0DnqcWYtGqskho=)
                          6: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
                          rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 23:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8b:d9:13:a1:ba:f0:28:54:b9:39:0f:dc:a8:1f:ed:f7:c0:32:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52
        Validity
            Not Before: Jul 20 21:12:30 2026 GMT
            Not After : Jul 21 23:25:30 2026 GMT
        Subject: CN=3DED4045FE481AD7B2E10A66F20A89611B1A1F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:2e:fc:ea:fb:80:5e:c4:d1:37:f3:f8:93:
                    a0:6a:32:ce:72:76:a3:c2:56:a9:e3:d1:bb:f6:82:
                    47:24:82:7c:d6:1c:93:4c:5c:ed:04:5e:c9:78:a8:
                    04:b7:4c:73:71:11:e4:0d:3e:a9:0d:5b:38:b2:d1:
                    2d:41:66:0a:26:a8:a9:47:43:c5:ea:92:be:79:02:
                    94:a4:ec:a3:47:3b:be:79:bb:91:93:cd:c7:46:90:
                    7a:e5:67:ad:76:e6:a2:8c:9c:19:68:1f:df:23:f5:
                    94:3a:68:e4:1b:69:96:da:3b:53:a8:43:a9:84:66:
                    0a:84:96:b1:b8:e9:fe:fb:86:54:93:7b:c6:46:08:
                    84:9f:43:ff:c8:ce:34:f0:1d:6a:e6:e6:2d:1a:df:
                    6e:28:b7:94:47:4e:a4:ed:a7:eb:eb:94:a8:44:97:
                    bf:4f:dc:3b:27:7b:2c:28:97:a2:af:a3:50:12:b9:
                    68:8d:86:61:a1:a0:8d:fb:53:8c:38:38:82:34:18:
                    67:03:5b:27:55:6e:05:7b:88:d2:23:84:37:1f:69:
                    42:31:ce:67:2c:67:f0:e6:ab:06:6a:43:56:fe:da:
                    76:e3:b1:ad:cb:c7:c2:24:ba:bc:c8:42:88:9d:ed:
                    1b:bc:f6:38:90:0c:6d:45:19:6b:58:18:3b:8d:ca:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:40:45:FE:48:1A:D7:B2:E1:0A:66:F2:0A:89:61:1B:1A:1F:21
            X509v3 Authority Key Identifier:
                keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:72:28:22:d7:44:b1:bd:b8:87:c2:d2:b1:29:c9:f1:d3:81:
         0b:f7:cb:e6:35:41:08:f5:0b:e0:f3:70:2c:ca:49:7e:fa:e2:
         c6:3e:03:ed:50:07:f2:0c:7e:c1:52:7d:03:a0:1c:e9:2b:01:
         d9:df:36:df:90:6f:dc:42:27:c4:1a:5d:10:b8:95:7c:57:b9:
         39:9e:96:07:b2:fd:32:e9:48:c9:28:8c:0d:a3:0e:b6:aa:8c:
         c4:14:93:8e:d2:05:ee:4e:01:94:41:8c:07:c1:69:af:51:1a:
         6b:63:7f:68:88:fe:9f:61:9b:22:a1:27:38:16:dd:ec:ed:fa:
         4b:69:6a:7a:a4:32:75:64:13:ab:b7:30:73:11:50:42:69:5c:
         97:08:a2:f7:6c:bc:64:1f:68:eb:04:26:fa:3b:3d:8f:c3:eb:
         ef:5b:08:33:3d:01:0c:d9:8e:90:22:e8:01:5a:3f:11:50:99:
         3e:b2:e3:55:37:50:81:92:42:45:12:98:3f:0d:89:d3:2f:a3:
         b9:fc:22:24:d2:bc:e8:ad:26:c1:25:49:a3:b8:6c:d8:c2:93:
         e3:11:86:52:fe:db:45:9f:ba:07:60:d0:80:8a:50:e4:65:2a:
         9c:fe:72:ad:be:a6:e7:19:92:4d:c3:9d:d2:3f:04:ec:66:a5:
         6c:c5:7d:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCovZE6G68ChUuTkP3Kgf7ffAMjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcwMkVDMjU5NTE1QzA5NjBCMEJGRjM2NjQ3Njc5RjBD
QTc4MUU1MjAeFw0yNjA3MjAyMTEyMzBaFw0yNjA3MjEyMzI1MzBaMDMxMTAvBgNV
BAMTKDNERUQ0MDQ1RkU0ODFBRDdCMkUxMEE2NkYyMEE4OTYxMUIxQTFGMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQdi786vuAXsTRN/P4k6BqMs5y
dqPCVqnj0bv2gkckgnzWHJNMXO0EXsl4qAS3THNxEeQNPqkNWziy0S1BZgomqKlH
Q8Xqkr55ApSk7KNHO755u5GTzcdGkHrlZ6125qKMnBloH98j9ZQ6aOQbaZbaO1Oo
Q6mEZgqElrG46f77hlSTe8ZGCISfQ//IzjTwHWrm5i0a324ot5RHTqTtp+vrlKhE
l79P3Dsneywol6Kvo1ASuWiNhmGhoI37U4w4OII0GGcDWydVbgV7iNIjhDcfaUIx
zmcsZ/DmqwZqQ1b+2nbjsa3Lx8IkurzIQoid7Ru89jiQDG1FGWtYGDuNytEvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPe1ARf5IGtey4Qpm8gqJYRsaHyEwHwYDVR0j
BBgwFoAUJwLsJZUVwJYLC/82ZHZ58Mp4HlIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmM1ODY3ZDgtM2Q2Zi00ODE2LWI4NGYtZmRkNWM1MDJiNjM0LzAvMjcwMkVDMjU5
NTE1QzA5NjBCMEJGRjM2NjQ3Njc5RjBDQTc4MUU1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNzAyRUMyNTk1MTVDMDk2MEIwQkZGMzY2NDc2NzlGMENBNzgx
RTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4
NGYtZmRkNWM1MDJiNjM0LzAvMjcwMkVDMjU5NTE1QzA5NjBCMEJGRjM2NjQ3Njc5
RjBDQTc4MUU1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJByKCLXRLG9uIfC0rEpyfHTgQv3y+Y1QQj1
C+DzcCzKSX764sY+A+1QB/IMfsFSfQOgHOkrAdnfNt+Qb9xCJ8QaXRC4lXxXuTme
lgey/TLpSMkojA2jDraqjMQUk47SBe5OAZRBjAfBaa9RGmtjf2iI/p9hmyKhJzgW
3ezt+ktpanqkMnVkE6u3MHMRUEJpXJcIovdsvGQfaOsEJvo7PY/D6+9bCDM9AQzZ
jpAi6AFaPxFQmT6y41U3UIGSQkUSmD8NidMvo7n8IiTSvOitJsElSaO4bNjCk+MR
hlL+20Wfugdg0ICKUORlKpz+cq2+pucZkk3DndI/BOxmpWzFfd4=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:56:02 2026 by rpki-client