Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
File:                     B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json)
Hash identifier:          xCVe0eyFHGAALeYd8v/ZIVnAz2soWZ4+I2iWIRBOv9I=
Subject key identifier:   7B:D4:5E:DB:DA:3D:E7:13:7F:55:07:78:51:74:E2:97:98:B2:F7:72
Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
Certificate issuer:       /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Certificate serial:       3DD9C72C57BC69EA1243EE63AA02142138C732D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
Manifest number:          74
Signing time:             Mon 27 Jul 2026 13:14:10 +0000
Manifest this update:     Mon 27 Jul 2026 13:09:10 +0000
Manifest next update:     Tue 28 Jul 2026 14:46:10 +0000
Files and hashes:         1: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: lkA86kcoUuuWincAi2Rm196Kw7zaB2dIVt1Sreg8Ls4=)
                          2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
                          rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d9:c7:2c:57:bc:69:ea:12:43:ee:63:aa:02:14:21:38:c7:32:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
        Validity
            Not Before: Jul 27 13:09:10 2026 GMT
            Not After : Jul 28 14:46:10 2026 GMT
        Subject: CN=7BD45EDBDA3DE7137F5507785174E29798B2F772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:e8:db:cb:0a:a4:a5:58:a2:35:20:37:6b:
                    3b:13:cf:d4:7c:23:1c:42:bd:e5:4d:0a:25:7e:49:
                    36:71:c8:9c:20:c0:ba:ac:9b:ab:ad:86:70:2a:3d:
                    18:fa:a5:c0:c2:9d:ad:91:05:10:e5:4b:a6:0b:cc:
                    c7:9a:22:8d:ea:7d:92:56:47:d5:09:4b:16:27:3f:
                    ad:98:b8:ce:d0:b9:92:f1:a5:65:2f:2a:cf:1b:bb:
                    5e:36:73:52:11:83:3c:37:8d:4d:5e:17:77:d1:5b:
                    05:43:7e:4c:e2:dd:0e:36:f6:ed:92:88:aa:9a:03:
                    5c:87:ea:a0:71:32:ac:91:38:ad:33:00:f2:08:5b:
                    b2:4e:81:d1:73:72:87:47:b5:7b:27:9f:14:15:43:
                    fb:a1:b9:fb:a5:27:78:62:91:df:db:ed:af:21:23:
                    5e:ff:ca:a1:88:2a:17:56:df:85:8d:e4:8b:1d:ae:
                    c4:23:17:cd:34:3e:e3:d1:3c:7f:af:fe:31:74:cb:
                    af:e3:9a:ca:2e:e7:97:81:4b:39:e1:ad:2b:c7:2f:
                    da:8c:2e:17:0a:6a:95:39:88:ed:9d:bf:00:5c:9b:
                    fc:cd:9f:b7:0b:10:c3:09:be:55:2e:08:53:16:d8:
                    cb:a1:89:4d:ad:89:64:35:b8:34:58:7c:6f:65:62:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D4:5E:DB:DA:3D:E7:13:7F:55:07:78:51:74:E2:97:98:B2:F7:72
            X509v3 Authority Key Identifier:
                keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:31:c4:98:55:df:41:af:c2:36:af:cb:f2:6a:68:83:b3:2e:
         f1:70:5a:de:41:bf:66:43:55:96:f7:2d:68:5f:f1:b8:53:b2:
         02:de:c1:59:1f:13:65:9d:ba:ae:8b:16:f2:34:9e:9b:74:50:
         6f:db:77:27:ae:38:9e:6d:68:95:ae:95:1d:af:07:53:53:ba:
         52:e2:db:70:04:31:b6:5b:8d:9f:09:68:03:05:ec:46:e9:0d:
         6f:21:3e:be:7b:0f:04:25:24:dd:77:5c:91:d8:7e:8f:84:d3:
         61:27:57:10:78:9a:a8:6f:22:8d:8b:fe:c6:2f:c6:5d:05:c1:
         47:cb:63:ef:a2:f7:84:ce:4d:90:9b:57:aa:d4:fa:ce:3c:24:
         54:89:ef:fb:f6:e9:ff:45:6e:0f:47:69:36:0d:7c:14:63:bc:
         04:c9:15:41:d3:c7:7d:65:69:e5:fd:92:9e:86:e1:19:b6:75:
         46:16:fe:d7:48:76:b9:90:06:80:93:e6:cd:af:b6:08:8b:1c:
         b5:62:e6:09:c7:e6:67:ee:62:29:fc:ff:d3:c9:29:de:92:0f:
         79:43:9c:ae:bf:21:8e:21:66:b9:2f:bf:11:e4:17:be:38:5e:
         6b:3b:37:d7:25:fa:3f:85:9f:f4:76:56:07:41:66:69:db:14:
         a4:6a:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:14:47 2026 by rpki-client