Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File:                     68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier:          AFoPdaDVWtFXai0q7K774fI5WA3+Cxd0s4GTAqvlzSU=
Subject key identifier:   56:CC:7F:C8:B9:25:48:E1:02:9D:50:D3:84:52:D9:08:F9:84:97:AF
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer:       /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial:       758C8D875FC6BB6A54343123039022EC869E2985
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number:          72
Signing time:             Sun 26 Jul 2026 20:13:25 +0000
Manifest this update:     Sun 26 Jul 2026 20:08:25 +0000
Manifest next update:     Mon 27 Jul 2026 23:10:25 +0000
Files and hashes:         1: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
                          2: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
                          3: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
                          4: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
                          5: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
                          6: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
                          7: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
                          8: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
                          9: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
                          10: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
                          11: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: YC/bAtugIDF9AOQDkFQKxVvoNuKQl5aXTdqqx1F/kiY=)
                          12: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
                          13: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
                          14: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
                          15: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
                          16: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
                          rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8c:8d:87:5f:c6:bb:6a:54:34:31:23:03:90:22:ec:86:9e:29:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
        Validity
            Not Before: Jul 26 20:08:25 2026 GMT
            Not After : Jul 27 23:10:25 2026 GMT
        Subject: CN=56CC7FC8B92548E1029D50D38452D908F98497AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:e9:45:fb:e2:83:d1:12:b1:76:55:cc:24:
                    98:71:ce:3c:b2:47:78:00:23:47:12:80:3f:2e:57:
                    9e:47:63:69:1d:c8:b0:f1:25:30:77:f6:2e:33:4a:
                    56:98:eb:b4:a3:56:f4:68:94:91:92:df:d2:16:fe:
                    68:41:64:51:da:b6:74:42:0f:3b:9d:eb:2b:c9:60:
                    0a:78:67:33:47:a4:36:e0:b2:a6:ac:23:80:c4:88:
                    0d:02:32:0b:15:0f:7a:8a:74:33:46:7e:13:2c:1a:
                    58:56:6b:61:46:b9:fa:cd:ae:e8:ba:55:1a:ae:2d:
                    d4:eb:3e:b8:c7:36:51:5b:0f:db:a7:03:aa:81:7b:
                    8b:e8:c4:0a:e1:42:25:4e:f8:f0:ae:e3:5d:91:57:
                    5d:6a:a9:d1:82:f5:55:c0:86:56:8d:00:38:28:ca:
                    13:ab:a7:e8:c1:a3:72:c6:99:b5:97:29:a7:dc:0a:
                    87:15:e0:31:1d:e4:6d:b5:ee:ad:4a:cf:0e:1a:dd:
                    d0:20:a4:4f:2b:81:3e:4b:9f:eb:09:1e:87:9c:ed:
                    cb:f2:82:be:b5:0b:b5:44:98:6c:3b:d2:a1:63:a9:
                    ac:36:93:89:dc:6a:cc:f9:1c:3f:ec:a4:da:a1:14:
                    4e:2d:b1:e4:51:fb:1e:12:42:c6:82:0b:ad:94:08:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CC:7F:C8:B9:25:48:E1:02:9D:50:D3:84:52:D9:08:F9:84:97:AF
            X509v3 Authority Key Identifier:
                keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:78:33:ec:c5:75:d1:f9:72:3b:55:84:8b:2e:2b:47:17:2b:
         e1:a3:0b:be:55:5a:45:17:cf:24:1c:01:26:6d:df:5d:90:3f:
         ba:50:78:98:74:18:4b:f6:b3:cb:31:36:d4:47:17:98:f6:53:
         62:af:48:f2:5d:35:f6:1d:f4:b7:99:26:49:de:08:14:f0:52:
         d4:e3:62:7f:c7:da:ac:46:5a:2b:91:5d:04:c2:e3:6e:2f:6c:
         23:35:7d:f9:99:34:a2:b6:30:68:63:d6:c4:dd:95:03:1d:e0:
         f0:a7:cf:b7:b0:a5:35:2a:19:f0:cf:5c:0f:c6:72:0c:c2:3d:
         dd:a1:b0:ec:be:b6:e2:e3:17:23:68:ab:f0:f8:43:cc:18:0d:
         30:a4:69:b9:80:f4:d7:28:45:67:d0:aa:47:16:f5:c8:35:80:
         d4:0c:49:cc:68:aa:d6:6f:f0:c2:de:b7:66:a0:09:37:17:ae:
         e6:68:d0:5d:7a:1b:2d:4e:ac:f2:cc:ab:80:f6:3a:cc:4b:5d:
         5d:ef:d5:b6:5d:91:82:92:d1:a6:91:8f:4c:b2:52:92:ef:25:
         8b:25:8d:cb:8b:3d:e0:39:76:c0:9e:6a:a3:d3:c8:33:99:cb:
         b7:eb:a6:ca:c9:8f:3e:c2:77:a3:ab:df:b9:74:3b:01:7c:66:
         ef:9a:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:20:06 2026 by rpki-client