Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
File:                     AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json)
Hash identifier:          WyOjuUZfhaO0XH9HYmg3WsW/FqgNPUVq+4muKRmw3hI=
Subject key identifier:   6B:1E:3D:2C:64:51:F9:4E:F7:32:7C:4C:E8:BE:B5:65:C3:53:C2:D9
Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
Certificate issuer:       /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Certificate serial:       5F20023DE9EFABC8F7EF683E6E68013604A97DD1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
Manifest number:          7D
Signing time:             Sun 02 Aug 2026 15:21:02 +0000
Manifest this update:     Sun 02 Aug 2026 15:16:02 +0000
Manifest next update:     Mon 03 Aug 2026 18:48:02 +0000
Files and hashes:         1: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: 7k5G7FhMD0VAnOtAHyxvhl0fxQ9vxK9XHNxWGN3mVLg=)
                          2: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=)
                          3: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
                          rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 17:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:20:02:3d:e9:ef:ab:c8:f7:ef:68:3e:6e:68:01:36:04:a9:7d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
        Validity
            Not Before: Aug  2 15:16:02 2026 GMT
            Not After : Aug  3 18:48:02 2026 GMT
        Subject: CN=6B1E3D2C6451F94EF7327C4CE8BEB565C353C2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:e0:7b:84:cc:f2:c3:d0:5a:db:97:48:60:
                    22:01:8e:53:82:77:c0:f6:8e:a8:64:44:9f:d9:28:
                    5b:48:de:3b:08:98:8b:ca:f0:a9:0f:d2:cd:3f:ab:
                    0c:1d:0b:23:84:90:7e:a6:f2:e6:cc:83:8b:56:13:
                    ac:e2:1f:64:02:04:40:25:78:eb:dd:54:2f:d1:12:
                    44:90:41:44:e3:34:46:7c:27:87:be:d6:fc:8f:ca:
                    fe:04:0e:e1:60:58:c7:a5:a1:52:58:8c:21:c6:f2:
                    c2:93:bf:94:23:61:e9:61:f6:97:54:57:12:0f:25:
                    ee:ad:2e:3e:a0:f8:fc:01:0d:a8:78:fe:7c:5e:db:
                    ba:de:e6:1e:d5:d2:32:ce:63:7a:8f:b3:91:0b:80:
                    79:8c:9c:1d:0e:59:41:29:e5:10:0b:00:66:c3:64:
                    70:bd:90:09:ee:d3:d1:99:b5:cf:00:94:d8:f0:3c:
                    94:37:1b:de:1e:b7:1f:fe:9d:d8:0c:52:8b:4c:5d:
                    d7:a9:e6:4c:ea:2b:d7:c5:33:1a:dc:4c:dc:9e:0d:
                    7b:92:e7:fe:d2:0d:c8:ae:47:50:4e:fa:29:e5:d0:
                    51:06:49:c8:45:f3:5f:4b:2a:ba:4d:a1:b3:f0:cc:
                    10:8f:71:8f:af:e0:15:87:6e:c1:05:f1:f8:cd:0f:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1E:3D:2C:64:51:F9:4E:F7:32:7C:4C:E8:BE:B5:65:C3:53:C2:D9
            X509v3 Authority Key Identifier:
                keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:99:65:38:a7:b7:7b:0f:55:db:b4:da:7e:c1:a1:25:ad:1e:
         06:ec:51:4a:1e:c3:4e:3f:7a:6e:97:7d:c9:0d:7a:af:31:22:
         a3:75:e7:da:4f:8a:40:10:49:51:ea:09:f5:d4:13:c5:25:c4:
         3d:db:c1:ae:27:55:26:35:2d:72:59:44:9c:50:08:ca:9d:94:
         19:0f:14:ec:ab:62:c6:a0:d2:91:ef:0e:92:7d:a1:72:68:27:
         ab:a4:7e:a6:85:5e:ac:0b:4f:9c:41:5c:0a:d4:65:35:78:85:
         6d:8b:10:5d:d1:4a:55:c1:7d:39:85:b7:69:9c:17:0c:32:0c:
         35:fd:59:be:82:aa:41:70:ec:ad:fe:d9:b6:c0:83:7a:c4:88:
         05:65:bf:7f:df:6d:c0:4e:e9:17:1c:c3:74:cc:5d:df:ea:52:
         70:8d:d5:9f:30:37:83:28:d9:35:eb:b5:c6:78:c4:77:2b:e5:
         5f:47:e4:53:2a:a9:40:6f:60:c5:2e:b4:48:e3:0b:00:e4:75:
         c9:d0:b8:b2:c8:2f:c7:50:14:20:95:45:62:b3:46:73:49:29:
         b0:be:c6:08:44:bc:72:39:a1:22:ab:8f:6b:85:0d:31:d7:6b:
         40:be:05:f0:41:a7:43:b6:4b:d4:d1:54:de:b9:c3:34:44:61:
         bd:7b:07:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXyACPenvq8j372g+bmgBNgSpfdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5
QkMyRjIxRjAeFw0yNjA4MDIxNTE2MDJaFw0yNjA4MDMxODQ4MDJaMDMxMTAvBgNV
BAMTKDZCMUUzRDJDNjQ1MUY5NEVGNzMyN0M0Q0U4QkVCNTY1QzM1M0MyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscOB7hMzyw9Ba25dIYCIBjlOC
d8D2jqhkRJ/ZKFtI3jsImIvK8KkP0s0/qwwdCyOEkH6m8ubMg4tWE6ziH2QCBEAl
eOvdVC/REkSQQUTjNEZ8J4e+1vyPyv4EDuFgWMeloVJYjCHG8sKTv5QjYelh9pdU
VxIPJe6tLj6g+PwBDah4/nxe27re5h7V0jLOY3qPs5ELgHmMnB0OWUEp5RALAGbD
ZHC9kAnu09GZtc8AlNjwPJQ3G94etx/+ndgMUotMXdep5kzqK9fFMxrcTNyeDXuS
5/7SDciuR1BO+inl0FEGSchF819LKrpNobPwzBCPcY+v4BWHbsEF8fjND6dtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUax49LGRR+U73MnxM6L61ZcNTwtkwHwYDVR0j
BBgwFoAUrRnSJkiQA/CStp1X8q7khJvC8h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjNiMTc4NTctYmUzZC00MTMyLThmMTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0
ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5QkMyRjIxRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BRDE5RDIyNjQ4OTAwM0YwOTJCNjlENTdGMkFFRTQ4NDlCQzJG
MjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm
MTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0
ODQ5QkMyRjIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAESZZTint3sPVdu02n7BoSWtHgbsUUoew04/
em6XfckNeq8xIqN159pPikAQSVHqCfXUE8UlxD3bwa4nVSY1LXJZRJxQCMqdlBkP
FOyrYsag0pHvDpJ9oXJoJ6ukfqaFXqwLT5xBXArUZTV4hW2LEF3RSlXBfTmFt2mc
FwwyDDX9Wb6CqkFw7K3+2bbAg3rEiAVlv3/fbcBO6Rccw3TMXd/qUnCN1Z8wN4Mo
2TXrtcZ4xHcr5V9H5FMqqUBvYMUutEjjCwDkdcnQuLLIL8dQFCCVRWKzRnNJKbC+
xghEvHI5oSKrj2uFDTHXa0C+BfBBp0O2S9TRVN65wzREYb17B2g=
-----END CERTIFICATE-----
Generated at Sun Aug 2 20:34:54 2026 by rpki-client