Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
File:                     0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft (raw, json)
Hash identifier:          IWklDWQgqqLOZXghj4xYQigg6EFZrZ8tV7wOnmnD3TU=
Subject key identifier:   24:93:20:E5:56:F3:C3:82:7E:0A:DC:8D:56:5B:4F:EF:73:56:0C:F4
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       7FE56474ED731ABB79FADD4CFEE152E52DDC1DE6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
Manifest number:          69
Signing time:             Mon 20 Jul 2026 16:32:00 +0000
Manifest this update:     Mon 20 Jul 2026 16:27:00 +0000
Manifest next update:     Tue 21 Jul 2026 18:49:00 +0000
Files and hashes:         1: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=)
                          2: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: 7m1lsj+R46fwy5EhA0AVTVR6lA5VWMrVBvJWrnKZtRo=)
                          3: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (hash: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=)
                          4: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 2xEncKZB7XKpCLMYg2xigci5uudnJs/KRQjGyEQoyfA=)
                          5: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: wL/pHkWZYlSpOpNVjgz7YgIvq4xTapnBHJvFGC824+g=)
                          6: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: 2FalOm0wymIUOR6b6eMABH/GePb1gQsHB2PkapVhslQ=)
                          7: 3230322e35322e31352e302f32342d3234203d3e203535363533.roa (hash: VHZA3TuBf4nLKV2pTnmQZgiFCXveS7LsJ0nVeKIEvQQ=)
                          8: 34332e3234392e3134332e302f32342d3234203d3e203535363533.roa (hash: qdZ5s/RPKJd1zWpn0OA8oOkj/7C1tf+45M/HrbWmTwI=)
                          9: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=)
                          10: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: t0eDmBySGGi3M6vpcaHWuK77uuciFXZsi3Bv2CvN2vw=)
                          11: 34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (hash: Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=)
                          12: 3230322e35322e31342e302f32342d3234203d3e203535363533.roa (hash: +X2AKDLUi7EEV0pZEa+LT88OPryzNndvmpim+oMxEjk=)
                          13: 34332e3234392e3134322e302f32342d3234203d3e203535363533.roa (hash: nVmldivYscT9yIlUPfak+eYDC8xGQfjxxTwl5kvmf58=)
                          14: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=)
                          15: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: 4TVT+M+1OynDiPmgdYeocC5p7/VKvqBlsqaUMV+uRAs=)
                          16: 34332e3234392e3134302e302f32342d3234203d3e203535363533.roa (hash: 2k2h/lLJh4y28GreNoFDXEw9j2lKUZ4eXzUUiII60sQ=)
                          17: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: M9ZVVTNiZw+8g7eKubBdE5bO++zVmlUills7R3bh+8E=)
                          18: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl (hash: F77FfyLa7xZ7oNdIynQBIUnAZ79A3h+w5vZIVNLZ1Fk=)
                          19: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=)
                          20: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=)
                          21: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: 1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=)
                          22: 3230322e35322e31332e302f32342d3234203d3e203535363533.roa (hash: RTunN5WvZPwzhuRDaOCGYBctUeKdomE1xa5xw2crzZk=)
                          23: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=)
                          24: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 18:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e5:64:74:ed:73:1a:bb:79:fa:dd:4c:fe:e1:52:e5:2d:dc:1d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: Jul 20 16:27:00 2026 GMT
            Not After : Jul 21 18:49:00 2026 GMT
        Subject: CN=249320E556F3C3827E0ADC8D565B4FEF73560CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:f8:ba:7a:50:43:73:b9:db:50:75:50:4c:
                    7a:73:58:95:0c:ff:00:83:0d:d9:4d:ba:d4:a7:21:
                    86:59:84:bc:d3:c1:65:1a:50:87:49:92:fa:96:fb:
                    fb:0e:62:d7:65:33:51:92:8a:8d:f8:f4:f6:51:77:
                    29:2a:fa:3a:79:67:d1:86:9a:f4:6c:b6:13:4a:b6:
                    26:16:e4:e9:0b:4b:ff:b3:a9:ab:30:74:d2:77:3d:
                    97:37:2b:a9:64:6f:bc:2a:1b:3f:fa:2d:23:6f:eb:
                    71:18:1a:01:30:33:5d:6e:9f:76:3b:42:1d:fb:27:
                    6c:06:dd:11:62:9e:48:2f:21:64:18:0a:15:ec:82:
                    3e:7f:c1:aa:97:7f:3b:96:51:21:5a:dc:88:77:58:
                    dd:5c:75:ef:74:a8:08:29:bd:a8:33:09:6d:40:a3:
                    09:46:33:97:17:26:2b:35:cf:b8:27:b5:c5:2c:98:
                    d3:cc:cc:9d:65:35:28:19:32:e2:27:20:4e:49:ee:
                    f8:19:e3:1f:72:fd:d0:24:84:22:5b:42:e2:0e:e5:
                    56:94:52:42:84:8f:dd:e4:ef:87:b9:0e:f9:a7:1b:
                    45:86:87:ee:5c:7a:6f:73:ca:32:71:5c:ae:38:8e:
                    f9:d7:cc:37:9c:03:f6:ca:99:71:c9:89:91:86:9e:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:93:20:E5:56:F3:C3:82:7E:0A:DC:8D:56:5B:4F:EF:73:56:0C:F4
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0e:2c:da:9b:f5:98:f3:a7:aa:a1:aa:a7:10:84:81:0f:18:
         f0:b7:a8:93:ca:19:eb:0d:a0:33:f0:0c:11:a6:72:0e:68:5c:
         18:01:2c:84:7d:53:01:86:97:dc:c9:29:16:6b:0b:a0:7a:47:
         a9:2e:e5:bb:7f:37:85:90:f3:a2:a4:e3:0b:f9:01:e6:99:15:
         ad:06:bc:eb:1e:9f:17:8c:bd:48:58:64:1e:84:5e:c8:0a:21:
         7f:c4:76:14:58:60:34:08:45:8a:b7:d0:79:50:9a:7a:f8:8d:
         2a:e7:bc:13:5f:62:ed:66:59:53:47:8d:26:34:79:68:a1:40:
         ec:07:c7:8e:03:58:77:e1:20:f9:d0:69:eb:cf:02:d4:3f:79:
         ef:69:48:f9:cb:c9:82:85:dc:03:78:9f:80:5e:41:79:6b:ef:
         33:7a:e4:52:f0:3d:98:f6:55:7e:d5:a7:91:ff:c6:c5:ae:85:
         b7:c1:85:28:40:1b:91:fd:43:30:cc:05:3e:85:e2:7e:58:2e:
         67:f2:84:f2:e6:61:25:7b:51:3e:4b:26:eb:38:c4:aa:55:3b:
         22:1b:e5:de:69:44:8a:07:5c:08:49:97:60:8c:17:08:f8:3f:
         d9:7a:de:e0:5d:5e:b0:f2:57:bd:1f:96:a0:0f:d5:08:c9:0d:
         de:a8:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:03 2026 by rpki-client