Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft
File:                     D341D8EA81805778BAF0FC25804627AB205A595B.mft (raw, json)
Hash identifier:          qJLicpfDkHsC8YPOl9uRmiXhQuz13yhW5RLtLKlPWQk=
Subject key identifier:   C6:EC:FE:4C:4E:C4:1C:63:A7:44:97:DB:E6:E1:8E:C3:FE:4C:4D:18
Authority key identifier: D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B
Certificate issuer:       /CN=D341D8EA81805778BAF0FC25804627AB205A595B
Certificate serial:       6C7970A47D0099945EDAB52F7DB30DF2F27C14AC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft
Manifest number:          93
Signing time:             Thu 20 Aug 2026 09:13:57 +0000
Manifest this update:     Thu 20 Aug 2026 09:08:57 +0000
Manifest next update:     Fri 21 Aug 2026 12:24:57 +0000
Files and hashes:         1: D341D8EA81805778BAF0FC25804627AB205A595B.crl (hash: Yrf8OfF+/a7TQBSgqxINr6wrzg2AUtPm3fW5R/dh8Mg=)
                          2: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 9bLzC5cJz/hB1T6TsZaVOeXIoTd9norVTABcvOz2X24=)
                          3: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: xc3Q1ltrywVJe3y21qqPN5TWdfqkKkKR0OL3qOrG5oc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl
                          rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 06:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:79:70:a4:7d:00:99:94:5e:da:b5:2f:7d:b3:0d:f2:f2:7c:14:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D341D8EA81805778BAF0FC25804627AB205A595B
        Validity
            Not Before: Aug 20 09:08:57 2026 GMT
            Not After : Aug 21 12:24:57 2026 GMT
        Subject: CN=C6ECFE4C4EC41C63A74497DBE6E18EC3FE4C4D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:6c:07:9e:7d:6f:02:af:ed:30:d5:46:d8:
                    41:95:ef:cd:fe:a1:75:c5:cd:75:94:21:73:6b:3d:
                    3a:11:63:ac:9a:25:4e:e4:08:10:8e:5f:51:b3:9f:
                    d4:b8:59:5c:b9:34:a0:a1:b6:ca:7e:01:c1:c9:ce:
                    c3:7b:96:4c:70:41:55:67:99:45:d6:d5:9d:b7:b6:
                    0c:2f:3e:98:6c:5d:cd:b4:fd:cf:6e:77:76:66:75:
                    c5:ee:2e:df:f4:97:18:3a:b5:3e:79:79:59:f0:34:
                    4e:18:98:6a:45:3a:b1:8e:48:35:18:a0:7d:19:17:
                    80:de:af:f5:52:b2:7a:b6:ab:a4:a8:b7:94:25:23:
                    a0:40:b0:d3:fa:fd:30:0a:3f:f7:e0:71:88:f3:32:
                    71:31:3b:d1:fa:7b:d9:e4:de:40:95:af:f3:4e:08:
                    c5:76:bf:84:ea:4b:34:bf:9c:17:f9:55:5f:7a:4e:
                    53:9f:de:40:cf:27:77:c7:90:a2:5c:93:94:c9:c7:
                    c9:c1:af:c8:66:23:73:96:93:0a:46:64:04:93:ed:
                    83:d4:75:75:6f:a1:d9:be:7c:02:ce:20:88:ac:9b:
                    18:3a:0d:5c:3e:51:11:f8:ec:af:63:b0:4b:f9:62:
                    a3:85:2f:5a:dd:cf:26:75:a5:e3:27:63:3d:81:dd:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:FE:4C:4E:C4:1C:63:A7:44:97:DB:E6:E1:8E:C3:FE:4C:4D:18
            X509v3 Authority Key Identifier:
                keyid:D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:90:3f:87:11:94:01:45:b7:e9:a6:02:6a:ba:59:49:c2:ad:
         de:30:84:48:e9:5f:9d:12:a2:1d:73:24:cf:21:59:21:0b:ab:
         31:b0:b1:5f:08:55:8c:85:b1:cb:52:27:60:ca:0d:a5:94:84:
         f0:0c:7a:25:c5:7f:0a:92:7c:e8:20:a4:55:6e:13:90:44:4b:
         e7:d6:97:d5:4e:05:40:7e:72:51:db:f2:4b:e2:00:c4:28:b2:
         aa:9f:e9:3f:ab:52:d6:7a:88:ee:49:9c:2d:87:3d:9a:e6:df:
         5a:c5:61:41:43:eb:af:90:de:3f:06:f1:44:e6:6a:7c:bd:57:
         a2:15:8f:ac:69:21:8b:19:73:08:c5:af:31:9b:dd:ac:c2:59:
         f2:88:2c:29:8e:38:5d:11:0b:aa:0f:79:a1:6f:f5:a8:51:74:
         96:eb:a9:36:3b:7f:0d:10:4f:4b:a7:cd:b9:ac:69:62:b8:29:
         d3:e5:12:04:c3:99:c1:32:d8:65:95:d8:a5:f8:93:23:ae:cc:
         cb:88:83:55:60:20:a6:2c:17:3b:e5:10:8a:09:4d:f3:05:7b:
         c8:c5:4f:8e:12:c1:19:98:1e:93:66:92:ec:4a:54:86:81:c9:
         1e:a2:77:4a:be:0c:87:33:9f:0c:e3:df:28:7d:44:7b:8e:66:
         f4:c3:ed:cb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbHlwpH0AmZRe2rUvfbMN8vJ8FKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIy
MDVBNTk1QjAeFw0yNjA4MjAwOTA4NTdaFw0yNjA4MjExMjI0NTdaMDMxMTAvBgNV
BAMTKEM2RUNGRTRDNEVDNDFDNjNBNzQ0OTdEQkU2RTE4RUMzRkU0QzREMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLGwHnn1vAq/tMNVG2EGV783+
oXXFzXWUIXNrPToRY6yaJU7kCBCOX1Gzn9S4WVy5NKChtsp+AcHJzsN7lkxwQVVn
mUXW1Z23tgwvPphsXc20/c9ud3ZmdcXuLt/0lxg6tT55eVnwNE4YmGpFOrGOSDUY
oH0ZF4Der/VSsnq2q6Sot5QlI6BAsNP6/TAKP/fgcYjzMnExO9H6e9nk3kCVr/NO
CMV2v4TqSzS/nBf5VV96TlOf3kDPJ3fHkKJck5TJx8nBr8hmI3OWkwpGZAST7YPU
dXVvodm+fALOIIismxg6DVw+URH47K9jsEv5YqOFL1rdzyZ1peMnYz2B3dLvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxuz+TE7EHGOnRJfb5uGOw/5MTRgwHwYDVR0j
BBgwFoAU00HY6oGAV3i68PwlgEYnqyBaWVswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDlhOWU4MzUtZjNhMS00YzM2LWI0N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4
MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIyMDVBNTk1Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMzQxRDhFQTgxODA1Nzc4QkFGMEZDMjU4MDQ2MjdBQjIwNUE1
OTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0
N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3
QUIyMDVBNTk1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACWQP4cRlAFFt+mmAmq6WUnCrd4whEjpX50S
oh1zJM8hWSELqzGwsV8IVYyFsctSJ2DKDaWUhPAMeiXFfwqSfOggpFVuE5BES+fW
l9VOBUB+clHb8kviAMQosqqf6T+rUtZ6iO5JnC2HPZrm31rFYUFD66+Q3j8G8UTm
any9V6IVj6xpIYsZcwjFrzGb3azCWfKILCmOOF0RC6oPeaFv9ahRdJbrqTY7fw0Q
T0unzbmsaWK4KdPlEgTDmcEy2GWV2KX4kyOuzMuIg1VgIKYsFzvlEIoJTfMFe8jF
T44SwRmYHpNmkuxKVIaByR6id0q+DIcznwzj3yh9RHuOZvTD7cs=
-----END CERTIFICATE-----
Generated at Thu Aug 20 10:25:03 2026 by rpki-client