Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
File:                     163FCF7902CF93C079C25A5BB950177736E3A53E.mft (raw, json)
Hash identifier:          6tm6xqNgVpowAqsre+294XWq5Tve8OiuyZqEVfP8ybM=
Subject key identifier:   40:17:83:89:6C:2F:61:DD:42:BD:51:AC:18:31:93:4B:D7:53:48:48
Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
Certificate issuer:       /CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Certificate serial:       0EDA7EDF7DB4EBB355487F004CEF1BDE43B0437E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 14:54:59 +0000
Manifest this update:     Mon 20 Jul 2026 14:49:59 +0000
Manifest next update:     Tue 21 Jul 2026 16:05:59 +0000
Files and hashes:         1: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=)
                          2: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: 6RKcmzfjeDH4g7wyr++N6VgeRBt/pDFie/Fnes4qIjU=)
                          3: 163FCF7902CF93C079C25A5BB950177736E3A53E.crl (hash: USVj7CugKHk1UeOYFAkt9hK2Y5PaEEFtaUdr5iyzjr0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
                          rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 16:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:da:7e:df:7d:b4:eb:b3:55:48:7f:00:4c:ef:1b:de:43:b0:43:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E
        Validity
            Not Before: Jul 20 14:49:59 2026 GMT
            Not After : Jul 21 16:05:59 2026 GMT
        Subject: CN=401783896C2F61DD42BD51AC1831934BD7534848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:df:e0:f8:b6:b9:4a:79:0f:83:ac:4c:40:91:
                    97:a6:e8:c7:74:1b:09:e0:80:ba:60:00:d8:54:0e:
                    e1:26:25:54:31:de:82:0f:eb:09:f5:7c:25:3b:4b:
                    27:36:6e:c7:7b:11:f5:26:28:cc:45:d3:72:51:14:
                    ec:f0:9c:44:9f:4e:4e:4a:3c:73:81:76:aa:7f:ad:
                    f0:26:35:4d:03:8e:2e:f5:b8:6a:75:1b:88:15:79:
                    73:7f:68:b5:7f:46:d3:0e:f1:ca:ad:26:7f:87:f9:
                    52:bc:57:a5:3c:2e:c2:0e:62:7a:65:c4:53:a3:ce:
                    a8:72:4f:de:16:95:30:9f:09:08:1b:fc:88:4b:f7:
                    0f:77:b6:4d:b5:e4:cc:4b:d9:2d:9c:1b:3f:c5:d0:
                    66:16:2d:70:82:85:f4:08:4b:e5:1a:54:df:7c:9a:
                    1a:a6:f4:4b:42:54:97:92:46:ff:60:d0:83:29:0b:
                    e4:91:6a:66:b8:d5:6f:33:71:8e:1d:c7:dc:e2:99:
                    0e:cf:ac:a9:e1:45:8c:9a:d0:33:97:38:52:f1:e5:
                    6b:d8:1b:32:f9:3a:e2:ed:78:77:04:02:9b:de:19:
                    f2:74:6e:2e:be:6a:c3:cb:f3:bb:8a:54:6e:1b:41:
                    66:e9:0b:16:74:37:8a:71:12:d9:a7:a1:88:ff:69:
                    47:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:17:83:89:6C:2F:61:DD:42:BD:51:AC:18:31:93:4B:D7:53:48:48
            X509v3 Authority Key Identifier:
                keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:3c:b5:5f:35:e6:74:7e:eb:ad:0e:7c:e0:5b:f6:f9:28:
         4d:ce:0e:51:96:f0:52:8e:6a:44:28:53:d9:c3:7e:d8:f5:c0:
         6d:dd:4a:0b:b7:d0:60:f8:a5:a0:a8:51:ec:9a:ff:88:1c:07:
         aa:da:73:ef:50:d2:41:c5:77:87:50:b9:81:d1:e8:28:ea:86:
         79:e1:50:d6:a6:49:a9:92:a1:24:ef:77:59:a0:0f:1f:b4:88:
         bb:cb:49:50:06:05:6e:0a:3a:1d:4f:c7:0b:07:4f:a1:af:e2:
         7a:b2:e2:06:73:9b:57:d3:96:d4:09:dc:42:34:85:b9:d0:3b:
         0b:bc:11:bf:99:fd:c9:44:68:af:78:0d:fd:e3:6e:94:31:81:
         88:2e:23:40:0d:f3:69:85:41:82:9f:82:5f:df:7c:17:81:72:
         03:76:a1:48:28:37:00:1e:74:fe:e4:fa:c1:bc:ff:5b:43:fd:
         35:23:70:2c:2b:4f:90:e0:c6:ea:4d:99:32:39:43:de:2c:a7:
         46:8f:e5:ca:b9:52:f0:75:8a:dc:14:e9:19:03:ea:bf:40:34:
         f3:83:f2:d4:bd:f9:13:9f:eb:80:74:bb:d7:0c:d7:4e:c4:d8:
         80:d1:e2:71:3c:6d:a7:c2:41:cf:58:d8:53:34:06:2e:c7:38:
         46:4c:98:54
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDtp+332067NVSH8ATO8b3kOwQ34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYzRkNGNzkwMkNGOTNDMDc5QzI1QTVCQjk1MDE3Nzcz
NkUzQTUzRTAeFw0yNjA3MjAxNDQ5NTlaFw0yNjA3MjExNjA1NTlaMDMxMTAvBgNV
BAMTKDQwMTc4Mzg5NkMyRjYxREQ0MkJENTFBQzE4MzE5MzRCRDc1MzQ4NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt3+D4trlKeQ+DrExAkZem6Md0
GwnggLpgANhUDuEmJVQx3oIP6wn1fCU7Syc2bsd7EfUmKMxF03JRFOzwnESfTk5K
PHOBdqp/rfAmNU0Dji71uGp1G4gVeXN/aLV/RtMO8cqtJn+H+VK8V6U8LsIOYnpl
xFOjzqhyT94WlTCfCQgb/IhL9w93tk215MxL2S2cGz/F0GYWLXCChfQIS+UaVN98
mhqm9EtCVJeSRv9g0IMpC+SRama41W8zcY4dx9zimQ7PrKnhRYya0DOXOFLx5WvY
GzL5OuLteHcEApveGfJ0bi6+asPL87uKVG4bQWbpCxZ0N4pxEtmnoYj/aUeBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQBeDiWwvYd1CvVGsGDGTS9dTSEgwHwYDVR0j
BBgwFoAUFj/PeQLPk8B5wlpbuVAXdzbjpT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWE1NzYxM2ItOGIwNC00YzQ1LWJlZGYtNGFiMDYxZDRkY2Y5LzAvMTYzRkNGNzkw
MkNGOTNDMDc5QzI1QTVCQjk1MDE3NzczNkUzQTUzRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjNGQ0Y3OTAyQ0Y5M0MwNzlDMjVBNUJCOTUwMTc3NzM2RTNB
NTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl
ZGYtNGFiMDYxZDRkY2Y5LzAvMTYzRkNGNzkwMkNGOTNDMDc5QzI1QTVCQjk1MDE3
NzczNkUzQTUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABOuPLVfNeZ0fuutDnzgW/b5KE3ODlGW8FKO
akQoU9nDftj1wG3dSgu30GD4paCoUeya/4gcB6rac+9Q0kHFd4dQuYHR6Cjqhnnh
UNamSamSoSTvd1mgDx+0iLvLSVAGBW4KOh1PxwsHT6Gv4nqy4gZzm1fTltQJ3EI0
hbnQOwu8Eb+Z/clEaK94Df3jbpQxgYguI0AN82mFQYKfgl/ffBeBcgN2oUgoNwAe
dP7k+sG8/1tD/TUjcCwrT5DgxupNmTI5Q94sp0aP5cq5UvB1itwU6RkD6r9ANPOD
8tS9+ROf64B0u9cM107E2IDR4nE8bafCQc9Y2FM0Bi7HOEZMmFQ=
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:17 2026 by rpki-client