Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
File:                     8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json)
Hash identifier:          7z4k1Plbd8tSd+S4ofZZukt7FJcUgXMfnnlVqTifijw=
Subject key identifier:   3C:21:56:E7:80:C1:09:34:29:F8:4F:3D:4B:18:F5:31:F9:17:9B:5F
Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C
Certificate issuer:       /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C
Certificate serial:       2110663ABD12495FE4C2DF95798A03B45F5D59D7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
Manifest number:          61
Signing time:             Mon 13 Jul 2026 06:57:15 +0000
Manifest this update:     Mon 13 Jul 2026 06:52:15 +0000
Manifest next update:     Tue 14 Jul 2026 10:47:15 +0000
Files and hashes:         1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=)
                          2: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: NDWYtYRk1bRjhpvZgK+nccIhm9rq+UQFf9eqN4DjRA8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl
                          rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 05:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:10:66:3a:bd:12:49:5f:e4:c2:df:95:79:8a:03:b4:5f:5d:59:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C
        Validity
            Not Before: Jul 13 06:52:15 2026 GMT
            Not After : Jul 14 10:47:15 2026 GMT
        Subject: CN=3C2156E780C1093429F84F3D4B18F531F9179B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:26:ad:2a:a0:35:9c:07:88:6d:71:a4:e0:
                    7c:9d:db:25:2d:bf:92:f5:b0:46:1a:af:e9:c6:74:
                    05:cb:e1:f3:36:63:d4:a5:82:67:6a:a9:9c:ae:bb:
                    44:50:4d:97:03:a2:77:96:79:88:a7:20:83:dc:a1:
                    89:35:a8:90:dc:f6:46:ab:b8:fb:05:31:c3:be:63:
                    c2:44:c9:3e:3c:d0:80:ef:89:61:5f:a7:dd:4a:b4:
                    97:f1:fd:32:df:6f:51:22:8e:1a:18:a7:a5:52:0d:
                    8f:30:58:cf:1d:9b:47:ad:dd:21:ef:83:f9:4e:14:
                    1f:a5:04:35:24:9c:33:02:5e:fa:b4:10:42:dc:61:
                    c7:23:ec:94:f7:ac:46:15:d1:a7:80:17:f5:6a:72:
                    55:ec:ad:bc:bf:3e:b8:cb:b6:43:63:08:09:92:e7:
                    56:78:43:c3:05:f4:8d:14:cb:f3:16:db:b9:31:17:
                    8a:99:c1:9a:e5:a9:67:17:5b:5b:4d:a6:b6:99:29:
                    83:c3:f0:10:d2:42:a9:28:f3:6c:a9:7c:58:41:d8:
                    79:7b:48:b9:6d:dc:9e:ec:f9:a6:16:d0:4c:07:8c:
                    6b:23:7c:c5:4e:ca:2f:48:75:6c:ff:c2:59:f2:ce:
                    de:e6:65:d2:7c:0b:f7:04:d5:a5:a6:9f:a6:25:7b:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:21:56:E7:80:C1:09:34:29:F8:4F:3D:4B:18:F5:31:F9:17:9B:5F
            X509v3 Authority Key Identifier:
                keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:7c:b4:7f:93:c3:cc:a4:b0:a4:3f:89:d2:65:c7:a6:df:
         9d:f6:e6:34:7d:93:58:7a:f5:5e:a4:e7:a2:a9:d2:38:93:54:
         3e:af:5c:ed:b1:76:00:39:83:72:67:85:c6:af:1c:e7:d5:bb:
         30:f5:04:60:0f:75:03:e3:27:62:be:fb:71:9e:13:b4:60:d4:
         32:e9:fc:a1:4e:2b:b5:3f:f6:b7:8b:16:79:11:15:f8:85:a0:
         13:a3:f6:6b:a8:79:4a:47:31:66:b0:cf:75:30:6d:a4:d1:e6:
         8f:48:a9:95:95:d5:6a:54:fa:0b:ef:57:23:9c:98:32:9e:ee:
         a6:f0:4f:e9:89:3f:06:77:3d:8c:6c:cf:42:a0:45:ae:d0:27:
         04:fb:4a:54:fc:47:e9:59:9d:20:74:b4:5b:3b:c2:c4:76:79:
         c9:35:49:ba:43:fb:02:71:00:c3:3d:a8:c4:0a:48:aa:87:f8:
         d5:54:b2:57:ee:7f:03:f6:1c:ec:6b:51:7b:e3:13:1a:b4:b8:
         06:14:ba:e6:c4:ea:04:34:28:c0:03:d1:33:c5:8d:f6:6e:b2:
         62:e1:dc:b7:18:57:18:f8:60:b0:90:75:31:48:8f:53:d6:c0:
         ed:cd:09:c1:19:b4:73:40:44:23:3a:dc:f3:e7:1e:10:81:68:
         51:58:1d:c4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIRBmOr0SSV/kwt+VeYoDtF9dWdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMy
NzAwNjI4QzAeFw0yNjA3MTMwNjUyMTVaFw0yNjA3MTQxMDQ3MTVaMDMxMTAvBgNV
BAMTKDNDMjE1NkU3ODBDMTA5MzQyOUY4NEYzRDRCMThGNTMxRjkxNzlCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTyatKqA1nAeIbXGk4Hyd2yUt
v5L1sEYar+nGdAXL4fM2Y9SlgmdqqZyuu0RQTZcDoneWeYinIIPcoYk1qJDc9kar
uPsFMcO+Y8JEyT480IDviWFfp91KtJfx/TLfb1EijhoYp6VSDY8wWM8dm0et3SHv
g/lOFB+lBDUknDMCXvq0EELcYccj7JT3rEYV0aeAF/VqclXsrby/PrjLtkNjCAmS
51Z4Q8MF9I0Uy/MW27kxF4qZwZrlqWcXW1tNpraZKYPD8BDSQqko82ypfFhB2Hl7
SLlt3J7s+aYW0EwHjGsjfMVOyi9IdWz/wlnyzt7mZdJ8C/cE1aWmn6Yle5o9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPCFW54DBCTQp+E89Sxj1MfkXm18wHwYDVR0j
BBgwFoAUjhabWjni+FgO5/aqTnbWQycAYowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDNkZGI3OWYtMmMzNy00N2FmLWI5NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEz
OUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMyNzAwNjI4Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84RTE2OUI1QTM5RTJGODU4MEVFN0Y2QUE0RTc2RDY0MzI3MDA2
MjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5
NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2
NDMyNzAwNjI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIcefLR/k8PMpLCkP4nSZcem35325jR9k1h6
9V6k56Kp0jiTVD6vXO2xdgA5g3JnhcavHOfVuzD1BGAPdQPjJ2K++3GeE7Rg1DLp
/KFOK7U/9reLFnkRFfiFoBOj9muoeUpHMWawz3UwbaTR5o9IqZWV1WpU+gvvVyOc
mDKe7qbwT+mJPwZ3PYxsz0KgRa7QJwT7SlT8R+lZnSB0tFs7wsR2eck1SbpD+wJx
AMM9qMQKSKqH+NVUslfufwP2HOxrUXvjExq0uAYUuubE6gQ0KMAD0TPFjfZusmLh
3LcYVxj4YLCQdTFIj1PWwO3NCcEZtHNARCM63PPnHhCBaFFYHcQ=
-----END CERTIFICATE-----
Generated at Mon Jul 13 09:46:49 2026 by rpki-client