Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft
File:                     71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft (raw, json)
Hash identifier:          3fch24fKN803ePDqfHzl16kcHim+5zdTKL5lyKo3jTA=
Subject key identifier:   1E:FF:21:CD:12:BA:69:DC:03:CC:3A:21:9E:5D:0C:77:A1:A2:5A:0D
Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32
Certificate issuer:       /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32
Certificate serial:       36B4DBF0ABFF11ECD1E9B7DC213F0AA74C99B08B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft
Manifest number:          7C
Signing time:             Sun 02 Aug 2026 06:30:20 +0000
Manifest this update:     Sun 02 Aug 2026 06:25:20 +0000
Manifest next update:     Mon 03 Aug 2026 08:46:20 +0000
Files and hashes:         1: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: d1IJ4T81r3K/uk2231YZmItFa5G4LBBNAf/1wVmUa9c=)
                          2: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: vqVbxn6Wjao5k2JYe2+RI+TcQAfRr5R7zs7bd5wdsLk=)
                          3: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl (hash: LCvWlh7pF9CASNzJ1k65T89WxX3X2R4oAwz1z7jRmo0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl
                          rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b4:db:f0:ab:ff:11:ec:d1:e9:b7:dc:21:3f:0a:a7:4c:99:b0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32
        Validity
            Not Before: Aug  2 06:25:20 2026 GMT
            Not After : Aug  3 08:46:20 2026 GMT
        Subject: CN=1EFF21CD12BA69DC03CC3A219E5D0C77A1A25A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:04:02:bf:b6:e4:9a:f0:9b:b4:f7:28:b8:
                    d7:8b:b1:c8:9a:02:a9:a4:14:15:63:ea:eb:80:ad:
                    a0:8c:d3:81:9c:13:bd:29:3e:6c:ac:5e:58:98:2f:
                    4c:ac:77:9a:ab:a6:54:26:85:09:3f:b9:db:a5:a2:
                    03:43:36:b9:f7:62:3d:a0:21:5d:eb:0b:a1:e7:b6:
                    3b:c9:00:2a:0e:ca:cd:97:b1:bc:1b:c6:6a:68:33:
                    15:ea:0c:8b:86:97:cc:22:b1:ee:ff:05:e0:38:54:
                    fe:19:d8:a8:ec:ef:7b:01:ad:6d:87:a5:57:a4:b0:
                    6a:89:7a:b1:05:51:11:c6:2c:49:f8:13:b1:05:73:
                    eb:41:3c:6d:a1:f2:05:8b:3d:bb:7f:96:92:84:0e:
                    c2:cf:82:10:5a:d3:62:74:d8:7e:83:a9:f5:12:29:
                    3a:96:35:85:53:d7:f0:84:9b:cf:db:7f:86:1c:0d:
                    a6:02:e7:29:64:b0:ac:50:7f:23:45:5d:5d:68:86:
                    1e:20:19:7c:c2:e8:52:f2:5a:f2:02:e6:16:a1:00:
                    13:80:50:a5:c2:5a:06:5c:4a:ad:47:be:f5:3a:1a:
                    ef:10:23:e6:6e:d1:fe:6d:75:db:4e:a5:9d:a2:c2:
                    9e:e9:de:b9:9d:6b:d7:90:bd:59:b1:29:43:84:97:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FF:21:CD:12:BA:69:DC:03:CC:3A:21:9E:5D:0C:77:A1:A2:5A:0D
            X509v3 Authority Key Identifier:
                keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:6b:ad:8c:d0:4f:a7:dd:95:71:c6:65:20:b6:b4:b9:fa:b6:
         ae:18:8c:51:a2:c7:d5:8f:92:15:b1:8b:44:b8:d7:0e:25:32:
         f1:07:db:c8:ca:28:cb:6a:b6:bf:08:35:b2:5c:e9:59:bd:32:
         aa:64:f0:98:28:78:2b:fb:08:4d:ff:24:d9:83:57:52:55:fc:
         6b:9b:0d:e5:ae:26:01:be:5e:e2:5e:6f:69:27:95:fc:55:29:
         f6:d1:92:bd:7c:ff:02:46:e7:c0:8c:d2:2e:47:23:9b:e2:8d:
         bb:07:94:6d:2a:e3:ef:ff:9c:94:36:08:aa:0e:ad:fe:a7:02:
         e3:c7:c7:33:6c:13:e3:0f:94:82:02:5e:f5:f6:53:1a:0e:0a:
         83:48:52:79:80:85:a6:46:ff:dd:87:60:14:f6:68:29:91:ce:
         46:9d:99:d8:fa:0b:95:13:ed:0d:09:f0:31:d4:4d:cf:ca:13:
         9f:2c:ed:56:2c:ff:f6:91:ac:78:ea:70:14:00:5e:05:82:52:
         fa:35:74:84:e3:e1:4b:7e:5a:bd:85:12:98:c6:73:0e:03:d0:
         2e:57:db:a7:52:6b:b8:6f:10:b9:93:81:ed:86:c7:e5:02:7f:
         a5:61:a1:1b:48:50:57:76:ee:a8:c9:4c:5e:7a:ec:58:c4:66:
         3c:9b:41:3d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNrTb8Kv/EezR6bfcIT8Kp0yZsIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1REIy
QjkwNkIzMjAeFw0yNjA4MDIwNjI1MjBaFw0yNjA4MDMwODQ2MjBaMDMxMTAvBgNV
BAMTKDFFRkYyMUNEMTJCQTY5REMwM0NDM0EyMTlFNUQwQzc3QTFBMjVBMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+AQCv7bkmvCbtPcouNeLscia
AqmkFBVj6uuAraCM04GcE70pPmysXliYL0ysd5qrplQmhQk/udulogNDNrn3Yj2g
IV3rC6HntjvJACoOys2XsbwbxmpoMxXqDIuGl8wise7/BeA4VP4Z2Kjs73sBrW2H
pVeksGqJerEFURHGLEn4E7EFc+tBPG2h8gWLPbt/lpKEDsLPghBa02J02H6DqfUS
KTqWNYVT1/CEm8/bf4YcDaYC5ylksKxQfyNFXV1ohh4gGXzC6FLyWvIC5hahABOA
UKXCWgZcSq1HvvU6Gu8QI+Zu0f5tddtOpZ2iwp7p3rmda9eQvVmxKUOEl9TTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHv8hzRK6adwDzDohnl0Md6GiWg0wHwYDVR0j
BBgwFoAUcaRcBdfV350W6cOwYHU12yuQazIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzI2Y2QyNmYtZmJkYS00Y2Q4LWEwMWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVE
N0Q1REY5RDE2RTlDM0IwNjA3NTM1REIyQjkwNkIzMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MUE0NUMwNUQ3RDVERjlEMTZFOUMzQjA2MDc1MzVEQjJCOTA2
QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw
MWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1
REIyQjkwNkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANNrrYzQT6fdlXHGZSC2tLn6tq4YjFGix9WP
khWxi0S41w4lMvEH28jKKMtqtr8INbJc6Vm9Mqpk8JgoeCv7CE3/JNmDV1JV/Gub
DeWuJgG+XuJeb2knlfxVKfbRkr18/wJG58CM0i5HI5vijbsHlG0q4+//nJQ2CKoO
rf6nAuPHxzNsE+MPlIICXvX2UxoOCoNIUnmAhaZG/92HYBT2aCmRzkadmdj6C5UT
7Q0J8DHUTc/KE58s7VYs//aRrHjqcBQAXgWCUvo1dITj4Ut+Wr2FEpjGcw4D0C5X
26dSa7hvELmTge2Gx+UCf6VhoRtIUFd27qjJTF567FjEZjybQT0=
-----END CERTIFICATE-----
Generated at Mon Aug 3 01:44:10 2026 by rpki-client