Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft
File:                     128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft (raw, json)
Hash identifier:          jr4JNv2cESsmts0G2Rg2DTh7ywPR4FQA+TxU8C2ZZGs=
Subject key identifier:   7C:D3:88:67:AF:C9:63:F8:52:B1:89:D4:C9:2F:8F:CA:A4:A8:36:26
Authority key identifier: 12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF
Certificate issuer:       /CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF
Certificate serial:       5F82762F238BFCAB679FEE5B5A771555B287CD7E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft
Manifest number:          67
Signing time:             Fri 17 Jul 2026 17:03:59 +0000
Manifest this update:     Fri 17 Jul 2026 16:58:59 +0000
Manifest next update:     Sat 18 Jul 2026 20:15:59 +0000
Files and hashes:         1: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: cU8IKTQYAlAkRanMKTbONUbw8P9tsvK8RuAPiO2VrzE=)
                          2: 128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl (hash: 8NwIgoBvDWu3SQOjzbGRTIMbbbwmYiq3ZIbDvuyPLGU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl
                          rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 20:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:82:76:2f:23:8b:fc:ab:67:9f:ee:5b:5a:77:15:55:b2:87:cd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128F07938FDE6F581427C2D0AA9AB9502DC892DF
        Validity
            Not Before: Jul 17 16:58:59 2026 GMT
            Not After : Jul 18 20:15:59 2026 GMT
        Subject: CN=7CD38867AFC963F852B189D4C92F8FCAA4A83626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:83:2d:1f:64:1a:09:9a:02:8c:a9:6f:70:
                    33:d9:2b:bd:cf:87:bf:9a:d1:77:93:56:3a:a1:d4:
                    33:8c:38:b2:73:ca:77:cd:ac:30:01:00:30:b4:cd:
                    af:fa:74:39:63:18:63:82:54:49:70:6e:d7:35:25:
                    01:c0:25:72:7a:15:5a:67:1a:d2:0e:dc:e1:59:74:
                    fa:02:f7:20:f9:46:3d:d5:76:47:23:62:5d:ed:2b:
                    f9:91:a5:c5:c1:9b:2c:53:81:25:16:60:49:b2:88:
                    a6:65:b6:b8:18:1b:79:36:8f:00:53:64:a9:6f:b4:
                    af:44:c7:00:37:bc:5f:1e:3f:58:08:e5:4a:ee:d8:
                    71:ed:0b:51:0f:7b:49:bc:cb:37:79:7a:56:36:15:
                    62:2b:15:d7:36:fc:90:db:30:b8:0a:8b:b9:48:78:
                    93:cb:c2:3e:7b:29:ad:bd:f0:04:95:6d:e9:98:da:
                    87:74:6a:d4:38:aa:68:4a:e2:6b:38:11:fe:1b:2c:
                    c6:89:9e:8f:0a:67:f2:0b:e3:d3:bc:84:a7:da:8e:
                    6b:dc:31:e8:c1:84:76:fd:d5:5a:94:3a:95:90:99:
                    68:ad:5d:70:1d:f2:b7:a3:aa:dc:1e:40:0c:c1:49:
                    f7:91:c7:93:78:6f:79:49:50:f9:0f:61:a0:01:86:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D3:88:67:AF:C9:63:F8:52:B1:89:D4:C9:2F:8F:CA:A4:A8:36:26
            X509v3 Authority Key Identifier:
                keyid:12:8F:07:93:8F:DE:6F:58:14:27:C2:D0:AA:9A:B9:50:2D:C8:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/128F07938FDE6F581427C2D0AA9AB9502DC892DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/128F07938FDE6F581427C2D0AA9AB9502DC892DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:de:26:8e:dd:bb:ff:ad:4b:b6:fc:30:84:52:02:45:98:f2:
         4f:16:be:40:68:23:9f:a7:57:85:35:9a:10:e2:fa:7c:78:d8:
         57:2a:46:46:46:79:22:4b:a5:a1:12:e8:39:bc:38:be:49:6e:
         60:7d:52:88:9a:88:54:f6:ba:27:5a:be:56:5a:43:3f:6a:18:
         35:95:e5:37:7f:8a:39:2d:ba:ff:33:59:e3:ff:f8:69:b3:78:
         15:91:da:f8:f8:02:91:a6:7e:bf:34:1f:5c:95:46:05:30:e7:
         c3:33:d6:56:1d:ac:5e:5d:70:c0:4c:c4:ff:e7:9c:ac:0e:87:
         b1:d1:26:d6:7b:4e:9b:d6:00:cf:b6:1d:7c:79:11:e1:3a:d2:
         bd:ee:42:ef:16:f6:f9:95:2a:ec:a5:d4:f0:df:87:2e:aa:c0:
         61:5a:1f:56:ae:b0:1e:c4:57:0b:18:55:eb:a6:fa:6e:ae:b5:
         f5:47:75:da:13:d8:42:bb:7b:ba:7a:52:db:39:c5:18:9f:7c:
         a3:fd:bc:98:67:91:cd:36:cc:86:69:04:3c:f1:bf:77:23:86:
         3c:47:21:df:b9:b7:42:36:44:f1:e2:92:db:bb:41:18:aa:6e:
         ca:91:86:11:88:d2:97:f0:9f:80:a0:d4:be:82:4d:68:a9:ca:
         e3:06:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:07:35 2026 by rpki-client