Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
File:                     677938123D24C0A27D10E007C474D99FC455C86B.mft (raw, json)
Hash identifier:          AIMv1Y/kaLUWK2eDghKRsqjWDToMT29Mz8XBsq9RCjg=
Subject key identifier:   57:31:73:BD:7B:32:37:0B:C7:DD:5F:C0:2C:1D:C1:DD:5E:75:A5:49
Authority key identifier: 67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B
Certificate issuer:       /CN=677938123D24C0A27D10E007C474D99FC455C86B
Certificate serial:       02FBC090E3C27EE76F9B96D137612F7EF24637C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
Manifest number:          7C
Signing time:             Sun 02 Aug 2026 16:17:05 +0000
Manifest this update:     Sun 02 Aug 2026 16:12:05 +0000
Manifest next update:     Mon 03 Aug 2026 16:46:05 +0000
Files and hashes:         1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: 4Cc4QPAN4qbF7Ai91llZsgvFRMCExHlGGbgV9qW0tuM=)
                          2: 677938123D24C0A27D10E007C474D99FC455C86B.crl (hash: 9ZP2/sTlxZeUZfIW7xldQyBfZhtY1z/JBFtOn8/tn3E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl
                          rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 16:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fb:c0:90:e3:c2:7e:e7:6f:9b:96:d1:37:61:2f:7e:f2:46:37:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677938123D24C0A27D10E007C474D99FC455C86B
        Validity
            Not Before: Aug  2 16:12:05 2026 GMT
            Not After : Aug  3 16:46:05 2026 GMT
        Subject: CN=573173BD7B32370BC7DD5FC02C1DC1DD5E75A549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:6a:53:87:d0:8c:00:76:1e:47:d7:34:b6:
                    e1:af:74:70:53:9e:b9:df:c9:28:51:aa:aa:7a:71:
                    26:ba:db:09:c7:5a:88:76:3b:a9:35:58:75:d9:a2:
                    db:89:5f:bc:ac:47:32:b2:a2:fb:8e:95:03:3a:94:
                    d2:a7:ba:8e:1b:0f:6a:19:27:62:27:e2:4e:51:12:
                    ae:fe:3f:1b:1f:ed:f8:0b:ee:19:e1:94:b9:f4:4f:
                    ee:d3:fa:4e:9d:6d:30:c0:25:9d:f8:24:09:6c:15:
                    2e:fc:bb:3e:31:fc:54:d7:f2:fa:a6:45:95:ae:f8:
                    d9:92:12:cc:64:4b:df:bd:bf:77:ca:53:58:cb:c1:
                    af:c5:92:bb:36:a6:aa:6d:8d:dd:2c:a9:32:36:bc:
                    89:fd:8f:d5:88:61:1c:9b:2d:93:cc:57:53:48:bd:
                    ae:e5:a7:60:57:35:12:40:6b:f3:51:56:84:40:f4:
                    a4:42:01:ba:28:59:fc:22:d0:27:f6:34:0d:a1:a6:
                    ad:f1:93:73:d7:e5:51:07:02:38:0a:74:a9:fc:77:
                    cd:be:e5:d7:e7:1d:39:8a:2b:60:78:e8:b2:18:b8:
                    29:71:52:08:04:f9:68:b0:d1:0a:0a:7e:82:b5:8d:
                    41:41:8d:4d:73:e9:16:53:72:a8:1a:23:c8:b0:18:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:73:BD:7B:32:37:0B:C7:DD:5F:C0:2C:1D:C1:DD:5E:75:A5:49
            X509v3 Authority Key Identifier:
                keyid:67:79:38:12:3D:24:C0:A2:7D:10:E0:07:C4:74:D9:9F:C4:55:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/677938123D24C0A27D10E007C474D99FC455C86B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/677938123D24C0A27D10E007C474D99FC455C86B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:24:59:f8:af:be:a8:30:83:14:94:7e:d9:8f:05:44:75:73:
         c0:b5:1a:b8:b5:35:ee:a9:59:59:15:a3:81:46:bf:e0:ce:f2:
         55:3b:58:85:0c:f0:5b:7f:d6:4a:03:21:b1:07:a6:a7:22:b3:
         a8:d1:56:fd:3b:80:19:0a:02:88:5f:80:3c:7d:67:3c:f1:34:
         f6:ec:4a:0f:1a:94:a0:c9:85:e1:99:b7:53:e5:dc:21:3f:a4:
         1d:c7:41:f8:07:e2:9d:df:17:89:a1:3d:4c:8d:d7:f4:ea:55:
         03:d0:7c:53:d3:fe:99:ca:71:78:ab:a1:00:30:a2:b6:2e:d2:
         41:17:95:16:0e:8c:d1:bb:fd:dd:34:f9:40:c5:5b:2d:8b:49:
         c7:89:cf:ba:22:04:53:4e:af:e2:cc:30:ed:8a:a3:ec:3f:2d:
         5d:f3:ea:94:53:00:42:c1:a8:47:c5:8c:f3:c8:a3:f6:f9:62:
         0e:8b:05:09:cc:6d:65:cd:2d:57:ca:d6:ff:e0:27:11:89:4d:
         da:79:44:7f:49:32:1b:4a:1e:fe:cd:dc:7e:ce:6a:b6:9d:53:
         d6:18:f9:1b:99:1e:2a:34:7b:46:c8:ef:f3:35:5f:88:7d:ac:
         61:1a:40:50:dd:42:bd:97:53:7e:b7:f4:60:eb:fb:49:f6:a9:
         e1:e7:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:39 2026 by rpki-client