Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
File:                     90A149FB759A6A176FE4D47F5082FA60C9767022.mft (raw, json)
Hash identifier:          6Z5+XLPFmgxwkKhiFUukAlnBfN5/QAlf/MZSfphKyh0=
Subject key identifier:   FF:64:4A:C8:F2:32:4A:F5:A0:80:0D:F6:32:BD:B0:8E:C0:DC:1C:EA
Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22
Certificate issuer:       /CN=90A149FB759A6A176FE4D47F5082FA60C9767022
Certificate serial:       74836D222E1F7B33FB0CA502FDEF7B479FE5E707
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
Manifest number:          2C
Signing time:             Thu 04 Jun 2026 01:39:55 +0000
Manifest this update:     Thu 04 Jun 2026 01:34:55 +0000
Manifest next update:     Fri 05 Jun 2026 04:07:55 +0000
Files and hashes:         1: 90A149FB759A6A176FE4D47F5082FA60C9767022.crl (hash: 6CXQtheg/X9uPQogbDXYBdp47JzqVhAFU4Bs7V0BP7k=)
                          2: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: PkQgWHfFkFDdD7JqzWkftJuZG03TTvKBUbVrhzww6Q4=)
                          3: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: X5HsBE1ewqrCbWqrNdoiRxUV2ywDPMva+dNQ4cS5oB4=)
                          4: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: /bFeq3oJ+j4yhcHhIfucgcl6Z3OfaEag9GMIa9agARs=)
                          5: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: G5X9t8nXB1mRf0UKItbT4yn3eidWxB2oSMgKDMVRVbE=)
                          6: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: MYxtWKdKnWygaDzucgDa2e53LN0HkZn96bp2EuKqQIc=)
                          7: 3132302e32392e3232352e302f32342d3234203d3e203139393035.roa (hash: WJbMrhYWH52zN+15Q0lEM0yHGULJofqinsPUUc3DEoM=)
                          8: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: hcuXQrxnDSCR9sGH8AKpCLGAnxBa8Jctci8rHhKNuLM=)
                          9: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: fEHjHjujgkqVA1apLtwPlgVoJB63v2RTVUpYlDyn+3c=)
                          10: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: ZyVnCGfpVMbL3rPs3FU6HbGvjwN2cgfbIIbFeRp+eSg=)
                          11: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: wR1gyIq5cKfCTApo9vqdO2nlAEKOlwrS+SEI5BtyjVc=)
                          12: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: ckYh7W2IVtz0AntnQ+PueP5/KAoXf5rAosyZM59PhNk=)
                          13: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: /6rKJIPdCG5UyO3XHODZZ3EDU0CTpBfu4ou77AX6cek=)
                          14: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: dcQ3Sb65sjjLX49tVMmjaQB6c8zJqXUEiFfQJc1R5QA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl
                          rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 04:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:83:6d:22:2e:1f:7b:33:fb:0c:a5:02:fd:ef:7b:47:9f:e5:e7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022
        Validity
            Not Before: Jun  4 01:34:55 2026 GMT
            Not After : Jun  5 04:07:55 2026 GMT
        Subject: CN=FF644AC8F2324AF5A0800DF632BDB08EC0DC1CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:17:c1:f2:fd:49:b2:cc:24:cd:3d:16:d2:
                    68:14:d1:53:6c:3b:fc:e0:08:25:f6:2f:87:81:46:
                    e1:f2:77:bc:b6:1b:1d:13:3d:df:58:20:66:ec:94:
                    b4:2b:ad:5c:12:74:36:b2:01:07:40:5c:3c:14:30:
                    85:12:bb:e7:7c:5d:3c:f0:a5:ca:6d:3e:1a:7f:1f:
                    c8:d7:06:e2:f2:bb:df:4a:5a:34:4a:63:c1:c8:9c:
                    d9:04:61:5d:da:85:a5:60:bb:be:9b:39:8e:10:53:
                    80:e7:b8:41:1b:5b:74:bd:64:92:49:8c:3e:b3:28:
                    3d:92:df:31:a0:5b:a7:bc:98:06:d3:ac:d5:39:ca:
                    bd:68:3f:a2:a2:31:19:61:75:e5:21:a2:fd:34:c4:
                    31:c8:83:28:60:92:55:b4:d8:dc:b0:bb:f5:33:f6:
                    1b:e1:6e:45:65:3a:ea:2c:ce:1c:d4:6d:9c:45:f7:
                    a7:4e:ac:ad:9a:57:b7:f6:ab:56:4d:28:3e:d9:30:
                    b1:d1:2a:18:86:e4:ac:f0:dd:6f:87:86:ce:f8:12:
                    c4:1b:a9:06:8b:29:53:9e:00:eb:3d:44:7e:10:dd:
                    48:8f:05:dd:6e:b3:2c:37:e6:40:a9:4e:37:82:80:
                    d9:b0:28:11:b8:ce:72:ae:a7:0b:09:5e:58:63:81:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:64:4A:C8:F2:32:4A:F5:A0:80:0D:F6:32:BD:B0:8E:C0:DC:1C:EA
            X509v3 Authority Key Identifier:
                keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:27:8e:a8:fe:85:70:ac:ca:cf:5d:02:6a:20:bf:15:76:
         c2:6f:f0:30:25:04:f2:45:5e:7c:fe:80:53:88:8e:63:37:62:
         91:27:35:67:36:91:d8:7f:a1:db:14:a1:ae:12:07:97:57:1c:
         b9:c7:8c:49:e8:05:a6:55:42:29:c4:7a:a5:5f:ef:12:1d:7d:
         aa:64:e4:61:87:3d:1c:2c:b2:bb:26:c3:fb:15:aa:59:e1:9d:
         4a:02:27:2d:ff:44:38:5b:c3:78:64:42:cb:34:d0:ed:5c:bd:
         a7:a1:62:b5:3d:a8:58:26:75:22:2e:6b:80:b8:e4:a9:b4:44:
         e3:9d:aa:af:a5:02:3e:26:a6:b1:6f:7e:23:26:50:89:11:d2:
         75:39:63:e3:73:c0:f5:ff:4c:18:6e:6c:06:cc:de:96:45:f6:
         66:47:a6:f9:10:0a:3b:59:91:75:95:db:5c:c5:17:11:32:e9:
         66:b9:a8:b0:6f:76:c9:e7:26:4b:3d:0a:f7:15:8f:20:77:2f:
         06:63:5c:1b:dc:8f:ad:5c:aa:cd:07:7f:3a:00:90:ad:d9:1f:
         95:08:3c:67:02:c4:86:f6:be:30:65:72:37:c4:e0:f6:f3:4f:
         ca:a3:f2:7a:2f:89:a2:e4:8f:c1:56:c2:26:e3:d7:67:f7:9e:
         41:bb:bd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:16:21 2026 by rpki-client