Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
File:                     5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft (raw, json)
Hash identifier:          WpOjKkCKoMZ1u3z/od8J22QfGoYoTTs3Vxu9EORQDMQ=
Subject key identifier:   01:A8:65:24:03:29:76:7D:DB:3F:CC:76:EB:70:DA:2E:2F:75:71:51
Authority key identifier: 5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58
Certificate issuer:       /CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
Certificate serial:       05F0C9797AC5A7AD5C60EBA26402576CAD87FCAE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 22:33:59 +0000
Manifest this update:     Mon 20 Jul 2026 22:28:59 +0000
Manifest next update:     Tue 21 Jul 2026 23:08:59 +0000
Files and hashes:         1: 5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl (hash: 4MdG/qFVwWDjX2od8YxpGvEJZiuqgH7UcGJkhazKrfk=)
                          2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: 7jJh3/VcK6Y+8JbMHzIyFhICT0ZmzdRr0l5g6HYzQ4U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl
                          rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 23:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f0:c9:79:7a:c5:a7:ad:5c:60:eb:a2:64:02:57:6c:ad:87:fc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
        Validity
            Not Before: Jul 20 22:28:59 2026 GMT
            Not After : Jul 21 23:08:59 2026 GMT
        Subject: CN=01A865240329767DDB3FCC76EB70DA2E2F757151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:10:c2:86:43:45:f1:34:06:a6:b3:39:68:
                    eb:b3:8a:c5:c9:2f:e4:eb:14:51:79:91:f6:c9:08:
                    e8:71:e1:43:2f:fe:3b:b5:8d:0c:37:88:49:3d:31:
                    d4:be:7f:ef:d8:39:b2:48:a4:a0:56:bd:48:50:47:
                    a2:e4:4e:5e:fe:06:57:11:8f:38:2a:8b:df:53:1d:
                    d0:21:cd:d5:71:4c:6f:64:10:8a:fe:8e:45:e4:a5:
                    d1:39:f7:07:51:75:87:6e:fe:83:f0:21:9c:e7:08:
                    7c:89:2c:71:9c:8c:6a:dd:ac:fa:97:ce:d9:d5:aa:
                    69:91:af:74:f5:f0:4b:82:5b:34:ec:64:e3:46:1b:
                    f9:dd:7e:2d:58:2b:e6:0d:8c:29:b9:82:f7:3a:d9:
                    da:84:79:71:88:9d:98:4d:9a:0b:ce:9d:3b:47:aa:
                    6b:ed:75:2f:73:0f:50:e3:c6:79:5e:0d:65:4f:fe:
                    33:c0:3c:db:8f:00:c0:a7:a9:36:e5:64:77:76:35:
                    e6:e2:63:a8:02:e1:62:9d:66:11:7a:c7:d5:23:6d:
                    43:7e:97:5e:91:18:14:09:80:ac:46:4e:d0:3e:1b:
                    cb:34:f4:9f:63:8a:69:9d:39:a7:e5:81:63:b9:4f:
                    ad:59:36:34:d6:d6:4b:7f:ac:cb:31:ff:c1:52:ae:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A8:65:24:03:29:76:7D:DB:3F:CC:76:EB:70:DA:2E:2F:75:71:51
            X509v3 Authority Key Identifier:
                keyid:5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0a:db:02:b4:98:4d:07:31:04:c4:99:63:11:c8:a8:3f:3b:
         ce:af:e9:35:a5:e3:10:c9:22:89:15:c0:f0:c8:ad:b8:70:c7:
         47:7b:5c:b9:86:57:6d:ec:b4:67:13:77:d9:37:db:79:55:62:
         18:af:ee:6f:53:04:3a:c0:35:73:02:c6:f5:9f:e7:79:c1:cb:
         46:e1:a6:57:98:44:dd:31:d2:92:42:e6:0d:96:13:33:1c:ea:
         a7:61:e9:ac:6c:54:23:7e:b2:05:49:ed:e8:a2:a2:09:ba:1a:
         9d:53:f9:6f:72:4a:43:d8:01:d1:f0:d7:eb:9e:c6:1b:5c:3d:
         b7:7b:66:de:73:4b:cf:cb:76:08:0d:8c:60:ac:82:38:06:4e:
         ed:f1:0c:e4:64:64:e2:ca:05:bc:32:6e:e3:fb:89:64:f6:79:
         ba:b0:7b:7d:1d:30:a9:b1:4f:28:50:c9:03:43:0e:6e:35:6e:
         e3:df:28:28:39:57:ac:bb:aa:03:df:84:cb:cd:d1:b5:72:98:
         47:41:98:5f:b7:d4:1d:d9:5f:6e:4f:d4:12:18:55:62:3d:fa:
         41:63:9d:38:0e:92:3d:99:3b:d9:91:bc:c1:63:95:5d:fc:5c:
         9f:ae:a0:06:31:42:6f:96:fc:b7:11:61:4e:0b:70:dc:89:56:
         2c:53:98:32
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBfDJeXrFp61cYOuiZAJXbK2H/K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY2NEJEQkYxRjVFRjQ2NEVFREFEQzBDN0VFN0YyNTM3
N0U3OUQ1ODAeFw0yNjA3MjAyMjI4NTlaFw0yNjA3MjEyMzA4NTlaMDMxMTAvBgNV
BAMTKDAxQTg2NTI0MDMyOTc2N0REQjNGQ0M3NkVCNzBEQTJFMkY3NTcxNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUBDChkNF8TQGprM5aOuzisXJ
L+TrFFF5kfbJCOhx4UMv/ju1jQw3iEk9MdS+f+/YObJIpKBWvUhQR6LkTl7+BlcR
jzgqi99THdAhzdVxTG9kEIr+jkXkpdE59wdRdYdu/oPwIZznCHyJLHGcjGrdrPqX
ztnVqmmRr3T18EuCWzTsZONGG/ndfi1YK+YNjCm5gvc62dqEeXGInZhNmgvOnTtH
qmvtdS9zD1DjxnleDWVP/jPAPNuPAMCnqTblZHd2NebiY6gC4WKdZhF6x9UjbUN+
l16RGBQJgKxGTtA+G8s09J9jimmdOaflgWO5T61ZNjTW1kt/rMsx/8FSrsRhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAahlJAMpdn3bP8x263DaLi91cVEwHwYDVR0j
BBgwFoAUX2S9vx9e9GTu2twMfufyU3fnnVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDlhZTk4MjgtMGU4Mi00NDM0LWI4ZjItMmQ4YWQ1OWNlYTg4LzAvNUY2NEJEQkYx
RjVFRjQ2NEVFREFEQzBDN0VFN0YyNTM3N0U3OUQ1OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RjY0QkRCRjFGNUVGNDY0RUVEQURDMEM3RUU3RjI1Mzc3RTc5
RDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4
ZjItMmQ4YWQ1OWNlYTg4LzAvNUY2NEJEQkYxRjVFRjQ2NEVFREFEQzBDN0VFN0Yy
NTM3N0U3OUQ1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAgK2wK0mE0HMQTEmWMRyKg/O86v6TWl4xDJ
IokVwPDIrbhwx0d7XLmGV23stGcTd9k323lVYhiv7m9TBDrANXMCxvWf53nBy0bh
pleYRN0x0pJC5g2WEzMc6qdh6axsVCN+sgVJ7eiiogm6Gp1T+W9ySkPYAdHw1+ue
xhtcPbd7Zt5zS8/LdggNjGCsgjgGTu3xDORkZOLKBbwybuP7iWT2ebqwe30dMKmx
TyhQyQNDDm41buPfKCg5V6y7qgPfhMvN0bVymEdBmF+31B3ZX25P1BIYVWI9+kFj
nTgOkj2ZO9mRvMFjlV38XJ+uoAYxQm+W/LcRYU4LcNyJVixTmDI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:22:37 2026 by rpki-client