Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File:                     68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier:          WOWWSm9G9P+pw1duFPKz+MvFxQ2OTA4GMabNx80AXQU=
Subject key identifier:   D5:B0:14:67:B6:CA:5B:9B:16:61:34:FE:49:D8:88:02:86:C8:56:A1
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer:       /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial:       7BBD11A06731AB24AC330A3BA383224EF1719955
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number:          AF
Signing time:             Thu 10 Sep 2026 14:19:37 +0000
Manifest this update:     Thu 10 Sep 2026 14:14:37 +0000
Manifest next update:     Fri 11 Sep 2026 14:23:37 +0000
Files and hashes:         1: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
                          2: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
                          3: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
                          4: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: f4/F2+X/IeMiJZ0CxYzMAPTxrDANeOKusIAWHMx6hZw=)
                          5: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
                          6: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
                          7: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
                          8: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
                          9: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
                          10: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM=)
                          11: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
                          12: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
                          13: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
                          14: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
                          15: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
                          16: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
                          rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 11:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bd:11:a0:67:31:ab:24:ac:33:0a:3b:a3:83:22:4e:f1:71:99:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
        Validity
            Not Before: Sep 10 14:14:37 2026 GMT
            Not After : Sep 11 14:23:37 2026 GMT
        Subject: CN=D5B01467B6CA5B9B166134FE49D8880286C856A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:eb:12:0d:53:4c:ae:9b:f9:31:90:d1:aa:
                    2e:ba:00:09:b4:2f:f6:61:39:c3:31:bf:2f:ea:5a:
                    a6:e3:67:ad:ee:b0:cf:d3:00:cb:e4:9b:ff:6b:3f:
                    4e:4d:b8:60:91:47:2e:74:1c:3a:9e:c0:b8:14:3f:
                    3c:32:8b:21:35:8f:ef:a0:ad:30:04:97:d9:39:46:
                    b6:57:3d:e2:e7:19:4e:5c:95:90:61:4b:a3:7c:8a:
                    11:98:0c:35:bd:73:a5:d9:c7:1b:89:62:17:ba:a9:
                    1b:45:ba:ac:49:fc:a8:d1:48:5b:65:ea:7f:ef:f2:
                    1c:b3:4a:3c:2a:d3:f0:8d:70:ba:be:94:0d:a2:f4:
                    23:d2:fd:a9:e4:65:77:f1:a5:77:c2:9d:a7:07:f7:
                    a3:b7:9b:dc:9d:a9:4f:20:b9:8b:61:71:03:b8:c8:
                    88:8d:a1:8c:dc:ee:6c:75:6c:68:6a:68:26:13:b0:
                    d8:70:ba:ad:ff:c3:b5:18:97:2b:0d:46:ff:14:a2:
                    c6:1f:15:e9:a3:a9:ca:dd:77:af:c7:bf:a8:53:db:
                    4d:bc:a3:d3:fb:99:92:be:ac:8d:21:39:6f:76:89:
                    17:5c:a9:a4:67:0a:d2:97:a1:14:7f:64:8e:33:b2:
                    29:2a:45:5e:de:6e:b4:77:09:31:70:20:c6:2a:7c:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B0:14:67:B6:CA:5B:9B:16:61:34:FE:49:D8:88:02:86:C8:56:A1
            X509v3 Authority Key Identifier:
                keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ef:0a:b8:6c:9d:f9:8d:54:0b:14:d0:9a:3b:f2:8c:a4:89:
         35:a8:4e:a0:1f:21:6f:52:ef:87:d6:c9:4c:f5:bb:49:52:a3:
         d0:83:d4:fe:7b:70:a3:a5:9f:b8:96:46:ec:15:29:c1:b2:57:
         ae:f2:bb:ca:8e:3b:d8:1e:c3:36:74:f1:bf:88:19:ea:24:30:
         c8:f6:fe:b3:c6:32:01:19:d3:c6:29:04:ad:16:3c:84:a9:ca:
         ec:fd:be:57:f8:22:07:7e:67:e6:21:80:13:e6:20:b7:06:80:
         9f:46:60:0b:04:60:25:57:7a:29:75:bc:d9:05:59:0e:61:cd:
         2f:02:68:f8:f8:3b:29:4d:1e:d9:3c:5a:28:06:99:3b:bc:a5:
         ae:f8:4b:b2:96:17:58:45:e5:46:2a:22:72:27:9f:2f:8e:2d:
         7d:46:f9:04:92:2c:3d:9f:85:0e:46:78:0b:30:a5:44:f2:19:
         28:7e:be:da:8c:20:5b:bc:46:da:a3:a3:82:40:78:6e:f0:40:
         4a:61:86:9c:e2:fb:a7:d6:c4:c8:d0:f5:9c:90:72:87:17:32:
         45:04:14:4d:df:81:19:3d:8f:c9:c2:65:e2:ba:93:e0:28:6c:
         3b:30:62:66:58:cc:23:55:9e:8b:3a:47:4f:2d:8d:94:89:c9:
         a3:20:61:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:06:08 2026 by rpki-client