Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
File:                     A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft (raw, json)
Hash identifier:          Jkee0IZ2LxlvoUKTPTViuysEGjo1cV87s89FblhvviU=
Subject key identifier:   E0:89:A1:9A:A0:25:15:C2:88:DF:91:E8:D0:E2:4E:A7:0B:86:07:93
Authority key identifier: A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3
Certificate issuer:       /CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3
Certificate serial:       716955DC7C075891352A5D246C179F35C75BAC9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 18:39:35 +0000
Manifest this update:     Mon 20 Jul 2026 18:34:35 +0000
Manifest next update:     Tue 21 Jul 2026 22:10:35 +0000
Files and hashes:         1: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: YWJzGjODoThVoKPyccsDqAnY6JX/6P8ILYIH216SRNI=)
                          2: A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl (hash: cFfrhIo08EIag8E8oLkMOtweGoXK9k2f2hqwpUqtoTs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl
                          rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 22:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:69:55:dc:7c:07:58:91:35:2a:5d:24:6c:17:9f:35:c7:5b:ac:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43C610C15262AF1F9933E160A30AE3D9859DDA3
        Validity
            Not Before: Jul 20 18:34:35 2026 GMT
            Not After : Jul 21 22:10:35 2026 GMT
        Subject: CN=E089A19AA02515C288DF91E8D0E24EA70B860793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:5b:a3:dd:17:ba:1b:2c:a3:6c:b3:fd:90:
                    31:93:11:5f:3a:18:3f:7f:48:be:60:4e:98:11:aa:
                    fc:36:a7:4c:b2:24:49:71:aa:57:f9:7d:b9:7a:d9:
                    fe:6e:31:76:0f:2f:57:29:ed:02:23:d6:ef:28:90:
                    5b:e8:bb:73:22:d7:07:be:04:e9:0c:f3:4d:39:af:
                    3e:69:28:72:2d:f0:af:84:e8:72:59:90:92:27:86:
                    85:c2:33:90:08:67:f0:82:0d:fb:ee:1f:f5:c3:ed:
                    d6:b3:02:39:9f:2f:8f:d5:5a:ea:a1:37:90:c7:c0:
                    6e:da:b8:40:53:3c:0b:eb:d3:86:20:ae:29:1d:96:
                    8d:49:e8:dd:22:cd:0a:a2:56:37:5d:65:b0:8c:c3:
                    ca:82:04:21:bc:ae:a6:1c:eb:20:ad:ed:82:a3:58:
                    27:ce:3b:2b:c7:93:62:8c:67:49:c6:54:0a:30:89:
                    4b:00:3a:b9:50:49:db:e7:b6:af:1e:1d:9f:84:fc:
                    ac:49:3e:73:4c:74:b3:ed:95:42:7d:9e:2f:ad:4b:
                    80:cd:20:05:9c:63:d9:fa:24:3c:da:ba:53:9e:b6:
                    ab:c9:8c:da:83:f7:0a:f3:19:56:ea:4c:e8:99:c3:
                    5d:26:e8:c6:5c:b3:09:92:4b:80:94:8f:62:dd:15:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:89:A1:9A:A0:25:15:C2:88:DF:91:E8:D0:E2:4E:A7:0B:86:07:93
            X509v3 Authority Key Identifier:
                keyid:A4:3C:61:0C:15:26:2A:F1:F9:93:3E:16:0A:30:AE:3D:98:59:DD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A43C610C15262AF1F9933E160A30AE3D9859DDA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/A43C610C15262AF1F9933E160A30AE3D9859DDA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:77:7e:5f:a5:9d:f8:b6:78:6f:36:00:bf:cb:40:d3:8b:f1:
         e6:79:89:09:f9:bf:99:3a:84:7b:58:54:0f:b4:a2:f0:f0:a1:
         f2:c8:d3:13:bf:4b:b9:82:f6:48:83:f3:7a:92:60:20:f5:5f:
         b8:24:ba:e2:ca:44:bd:71:79:1b:f6:08:11:77:a0:47:85:e1:
         5c:ba:81:c7:60:10:42:24:20:56:78:86:08:24:9d:e8:99:8c:
         df:59:f0:52:35:87:89:35:5b:7a:7d:db:10:c6:f0:5b:50:26:
         b0:86:f3:65:12:de:32:bb:f2:69:b8:e9:a6:96:f0:2e:c3:e0:
         fe:bc:7c:f7:87:14:26:db:09:ff:7a:e7:1f:b0:f7:9d:10:f5:
         b7:1a:f5:0e:19:1f:27:f4:df:04:3a:ea:e6:4a:04:5e:2e:a7:
         40:74:58:4a:e8:1d:80:e2:94:f3:93:ab:7e:39:ed:13:7f:19:
         a0:1a:0f:79:12:3b:98:6c:6b:5d:45:2f:46:bf:60:38:1b:94:
         63:6e:26:43:a2:7c:2c:88:d3:a0:6d:1f:a0:10:9f:3f:0b:03:
         cf:c0:3b:0e:3b:fb:e2:ec:01:7f:4d:7e:0d:74:ac:68:b1:38:
         16:14:1b:23:29:ba:2c:d5:e7:24:e4:58:39:ce:ff:61:07:c8:
         87:53:05:90
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcWlV3HwHWJE1Kl0kbBefNcdbrJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzQzYxMEMxNTI2MkFGMUY5OTMzRTE2MEEzMEFFM0Q5
ODU5RERBMzAeFw0yNjA3MjAxODM0MzVaFw0yNjA3MjEyMjEwMzVaMDMxMTAvBgNV
BAMTKEUwODlBMTlBQTAyNTE1QzI4OERGOTFFOEQwRTI0RUE3MEI4NjA3OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNFuj3Re6GyyjbLP9kDGTEV86
GD9/SL5gTpgRqvw2p0yyJElxqlf5fbl62f5uMXYPL1cp7QIj1u8okFvou3Mi1we+
BOkM8005rz5pKHIt8K+E6HJZkJInhoXCM5AIZ/CCDfvuH/XD7dazAjmfL4/VWuqh
N5DHwG7auEBTPAvr04Ygrikdlo1J6N0izQqiVjddZbCMw8qCBCG8rqYc6yCt7YKj
WCfOOyvHk2KMZ0nGVAowiUsAOrlQSdvntq8eHZ+E/KxJPnNMdLPtlUJ9ni+tS4DN
IAWcY9n6JDzaulOetqvJjNqD9wrzGVbqTOiZw10m6MZcswmSS4CUj2LdFQZ7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4ImhmqAlFcKI35Ho0OJOpwuGB5MwHwYDVR0j
BBgwFoAUpDxhDBUmKvH5kz4WCjCuPZhZ3aMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGFiY2U3MWUtNGVlNC00NTkwLTk0ZmItMzdmZmQ5ZjBkNmI3LzAvQTQzQzYxMEMx
NTI2MkFGMUY5OTMzRTE2MEEzMEFFM0Q5ODU5RERBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNDNDNjEwQzE1MjYyQUYxRjk5MzNFMTYwQTMwQUUzRDk4NTlE
REEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0
ZmItMzdmZmQ5ZjBkNmI3LzAvQTQzQzYxMEMxNTI2MkFGMUY5OTMzRTE2MEEzMEFF
M0Q5ODU5RERBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFt3fl+lnfi2eG82AL/LQNOL8eZ5iQn5v5k6
hHtYVA+0ovDwofLI0xO/S7mC9kiD83qSYCD1X7gkuuLKRL1xeRv2CBF3oEeF4Vy6
gcdgEEIkIFZ4hggkneiZjN9Z8FI1h4k1W3p92xDG8FtQJrCG82US3jK78mm46aaW
8C7D4P68fPeHFCbbCf965x+w950Q9bca9Q4ZHyf03wQ66uZKBF4up0B0WEroHYDi
lPOTq3457RN/GaAaD3kSO5hsa11FL0a/YDgblGNuJkOifCyI06BtH6AQnz8LA8/A
Ow47++LsAX9Nfg10rGixOBYUGyMpuizV5yTkWDnO/2EHyIdTBZA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:05 2026 by rpki-client