Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
File:                     595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft (raw, json)
Hash identifier:          5LqD3wYzxdkB89+zXkIxESddUIS1YwL1oKacuXVfO2c=
Subject key identifier:   D8:FC:2C:9A:EE:1C:84:38:D1:71:71:DA:8D:C0:ED:42:72:D6:19:40
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       0E801AB8B73F8361687F37CF1D689F9E740CD378
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
Manifest number:          89
Signing time:             Wed 12 Aug 2026 13:59:12 +0000
Manifest this update:     Wed 12 Aug 2026 13:54:12 +0000
Manifest next update:     Thu 13 Aug 2026 15:15:12 +0000
Files and hashes:         1: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: Gf7+JDdgZXaOoBD3FCXccmzSiqspLprw2RT0W6wNy+U=)
                          2: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl (hash: tjFtISjlZ33oS1XUchXylacZYcCzLOo8pK2JjgcnE/s=)
                          3: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=)
                          4: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: EZ+ZMEszQ0FNnAyScxrOoCf6N5MbYNv0AIqesnyNkY8=)
                          5: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: YnpwLS3qShrtat5vFr4GKHpgIrsqYW7nhd/bbP/N9z4=)
                          6: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: OsRtYTl/a4gBsIVTCYGY7UbsLX5kl3Dd0rUx9sxMLF8=)
                          7: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: kbsHwCF+kLPIM6LmBzd7ReTnbGaVE3pJ2tb1Y6LGrMo=)
                          8: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: pBXuYTqReMplN2AY6AolkobEan90DNcRX+8WnFHv1IY=)
                          9: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: jO/LVsBGp/hIYW/T7V2ve/LWVG5Avg+yBl19oxnQ+Ok=)
                          10: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 0dcgbUIE4O45ZJeQQknhi7QzWy9JrD3T/y5JsTnfFC0=)
                          11: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: jNXjwR9NoJrp9dtiwnlZ8ZD+nF3IUWQs6hiqUnrS/Ok=)
                          12: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: oIB0azCHKZZD4LUQLYG0Yqlb4f/9KSBQ4JwecEqWsUw=)
                          13: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: eR32X6TB9dCvTyEj8xcbUe0oCJGcSbLwWM78VEF/mIM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 15:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:80:1a:b8:b7:3f:83:61:68:7f:37:cf:1d:68:9f:9e:74:0c:d3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: Aug 12 13:54:12 2026 GMT
            Not After : Aug 13 15:15:12 2026 GMT
        Subject: CN=D8FC2C9AEE1C8438D17171DA8DC0ED4272D61940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:b7:24:b3:e2:46:79:08:3b:c7:10:3d:23:
                    86:62:41:4f:b5:f7:1a:2b:78:8e:b2:86:6b:26:c6:
                    50:09:1a:e5:14:72:3e:f8:ce:b3:9b:33:04:ae:5a:
                    b2:46:6c:f3:e9:17:fa:95:41:e8:e0:2c:20:a1:c2:
                    fe:c8:86:13:2c:d7:cc:eb:cf:59:e9:89:97:30:37:
                    77:a3:ef:e2:45:cc:e6:86:ed:02:df:53:ec:91:74:
                    63:37:59:56:02:15:83:26:e8:9f:86:6d:fa:fb:b4:
                    68:b4:64:b8:48:ce:e2:b6:4a:27:0c:2a:a5:1f:b1:
                    09:d9:4b:35:e4:d8:a5:75:1a:d9:78:72:55:6b:e9:
                    26:1c:bd:b2:2f:6d:39:01:7d:67:1a:83:33:86:21:
                    6b:7a:ef:d4:8b:ce:83:cc:44:ae:72:8d:02:90:f4:
                    0b:f4:00:8d:69:a0:0f:04:71:6f:41:ca:39:48:5e:
                    dc:85:04:b5:cf:90:81:ef:a0:e0:ba:42:5f:1d:9a:
                    e3:20:64:34:6e:4a:33:07:0b:49:38:7b:bc:32:31:
                    1f:b1:5c:68:e4:ae:36:e4:81:3e:d1:b7:e7:f5:bb:
                    02:3f:61:ec:d5:5d:f9:09:59:26:80:1b:44:94:cb:
                    17:4c:a4:f1:b8:11:f5:e9:ee:b5:e0:88:ec:73:b1:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FC:2C:9A:EE:1C:84:38:D1:71:71:DA:8D:C0:ED:42:72:D6:19:40
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:44:ed:9f:df:df:ad:5e:c9:d1:a9:bc:85:f9:22:59:c4:30:
         94:e9:25:77:b7:47:97:19:e7:0a:34:a5:71:a1:a2:07:45:5a:
         6b:1e:5b:f6:fa:cb:72:de:d7:60:37:5b:4c:02:ed:f4:f2:84:
         fe:ec:5e:00:65:a5:5a:b9:51:23:77:64:9d:6c:bf:66:86:44:
         01:90:e7:46:6a:78:52:90:06:4f:12:e3:42:3c:81:3f:b2:9e:
         c5:a3:32:5e:30:02:0b:a0:3d:75:cb:ba:55:53:53:8d:a7:17:
         02:aa:b2:cb:39:b3:39:9a:b7:29:be:79:3d:1c:ee:8a:0f:cd:
         93:8e:b0:50:b7:c0:26:fa:0c:d0:4b:ca:73:af:fa:47:32:e6:
         2d:5e:d2:89:c2:1b:1b:29:e8:73:43:41:9c:26:c1:39:b8:cf:
         ce:f6:a8:7a:ac:fb:b8:2a:ac:e6:ff:44:22:5d:fe:7e:13:09:
         5a:9d:9e:de:8e:71:20:38:b4:dc:9e:47:73:67:c9:b0:14:bb:
         07:b1:92:fe:c9:9a:65:6a:dc:9c:e0:a7:7b:1f:69:81:8d:63:
         b6:3d:d7:08:72:67:17:de:c3:ef:32:4b:b2:05:99:c8:5d:ad:
         e2:58:68:e4:a8:0c:b0:b4:9a:31:1d:73:ec:56:1c:d1:0e:f5:
         02:52:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:19:50 2026 by rpki-client