Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
File:                     FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json)
Hash identifier:          JJMtO4gGlOPF0WRraWEcKr8ssMnbdAoWbNgkg7sMOBQ=
Subject key identifier:   57:8A:0D:CC:49:7A:60:07:3F:3A:6E:88:0A:A2:E8:F7:09:F3:61:E8
Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
Certificate issuer:       /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Certificate serial:       2467648CBEDD6CF74F6FEBE554EAC4F7C559EC25
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
Manifest number:          6B
Signing time:             Tue 21 Jul 2026 11:25:42 +0000
Manifest this update:     Tue 21 Jul 2026 11:20:42 +0000
Manifest next update:     Wed 22 Jul 2026 14:02:42 +0000
Files and hashes:         1: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=)
                          2: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: MYcMBcGExpQwGymsPXczSFXYfrZhMqvZTQfZNwnwd2s=)
                          3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=)
                          4: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=)
                          5: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
                          rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 14:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:67:64:8c:be:dd:6c:f7:4f:6f:eb:e5:54:ea:c4:f7:c5:59:ec:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
        Validity
            Not Before: Jul 21 11:20:42 2026 GMT
            Not After : Jul 22 14:02:42 2026 GMT
        Subject: CN=578A0DCC497A60073F3A6E880AA2E8F709F361E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:0e:02:d4:d8:d1:cf:e4:76:bd:60:71:6c:
                    01:eb:98:d5:9d:5c:c5:ac:36:63:7f:65:6d:d6:96:
                    b3:54:4c:d0:b2:f2:3f:6a:46:78:82:ae:54:74:9f:
                    fe:86:a6:da:c1:68:dd:87:8c:1c:eb:c0:fd:7d:47:
                    df:9f:58:05:54:c5:ff:87:b4:25:a8:61:be:91:80:
                    12:c6:b4:1f:5b:6c:37:04:4f:8f:d7:14:17:c2:c8:
                    76:74:4c:46:cb:e1:74:7d:b3:50:dd:d3:39:25:ec:
                    f8:af:a5:2a:93:a9:5a:97:99:b3:f4:28:33:f3:d0:
                    51:82:2d:c1:07:79:05:98:6e:a4:dd:39:d2:a4:77:
                    5f:41:b9:a2:c1:5b:63:5a:86:bf:b6:0c:26:d0:cc:
                    d2:87:36:96:0f:fb:ed:f6:0b:3f:bb:bc:c5:1d:43:
                    25:fa:11:1e:11:9b:5b:98:33:40:4c:6e:7c:9d:8e:
                    11:d6:d4:2a:03:86:b2:89:62:99:6f:bd:3d:9a:a5:
                    f8:db:4d:5a:db:98:f9:cb:09:3b:69:24:b1:29:db:
                    de:96:48:aa:12:9e:14:90:fc:d4:34:3a:cc:a5:da:
                    dc:f4:03:8a:39:35:97:a3:8b:a5:ec:2a:b6:5d:21:
                    28:d5:d2:fa:72:90:c8:02:82:d1:b4:80:30:96:63:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8A:0D:CC:49:7A:60:07:3F:3A:6E:88:0A:A2:E8:F7:09:F3:61:E8
            X509v3 Authority Key Identifier:
                keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:64:d0:4f:0d:bf:89:43:7a:97:94:bd:a3:f7:bc:c6:87:
         0a:d3:cb:f3:e2:5c:48:8e:63:5c:a4:0f:ec:3b:8d:e9:89:23:
         59:f4:7b:2f:bd:29:80:f7:d1:5d:91:f5:2d:f4:8c:9e:46:61:
         f6:65:83:41:a9:d1:c5:17:c8:c6:11:0a:20:19:68:41:c1:b2:
         24:52:cd:0e:82:15:b3:7b:51:0f:b6:9b:60:78:d0:8f:4f:d3:
         4a:57:2d:38:a0:ca:b4:11:67:44:91:90:c8:07:1d:eb:73:e8:
         14:9c:32:d7:8d:6e:c1:a9:59:b3:bc:13:50:46:c0:14:25:65:
         e2:a2:a2:78:e5:a4:f8:ca:51:66:7b:8f:21:28:28:89:78:30:
         b7:be:6b:a0:be:3f:d7:9e:50:ce:42:62:55:d9:cd:ad:c5:8d:
         29:f9:2a:7f:de:d4:1a:7c:6b:88:0d:df:db:9d:b5:e3:8d:d1:
         73:1f:dc:e5:7d:d3:55:f5:9d:00:e7:83:2b:c2:00:4a:8b:06:
         28:cb:0e:0f:c0:f1:71:13:98:cf:eb:cd:01:db:dc:31:a4:a9:
         eb:a8:de:15:d5:3e:63:d7:88:11:0b:e5:f4:54:17:de:0e:c5:
         4f:8a:95:31:33:10:46:33:b2:83:41:a1:58:a5:12:74:6f:61:
         aa:a4:63:5d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJGdkjL7dbPdPb+vlVOrE98VZ7CUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3
MzYwNURBQzAeFw0yNjA3MjExMTIwNDJaFw0yNjA3MjIxNDAyNDJaMDMxMTAvBgNV
BAMTKDU3OEEwRENDNDk3QTYwMDczRjNBNkU4ODBBQTJFOEY3MDlGMzYxRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7w4C1NjRz+R2vWBxbAHrmNWd
XMWsNmN/ZW3WlrNUTNCy8j9qRniCrlR0n/6GptrBaN2HjBzrwP19R9+fWAVUxf+H
tCWoYb6RgBLGtB9bbDcET4/XFBfCyHZ0TEbL4XR9s1Dd0zkl7PivpSqTqVqXmbP0
KDPz0FGCLcEHeQWYbqTdOdKkd19BuaLBW2Nahr+2DCbQzNKHNpYP++32Cz+7vMUd
QyX6ER4Rm1uYM0BMbnydjhHW1CoDhrKJYplvvT2apfjbTVrbmPnLCTtpJLEp296W
SKoSnhSQ/NQ0Osyl2tz0A4o5NZeji6XsKrZdISjV0vpykMgCgtG0gDCWYxczAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUV4oNzEl6YAc/Om6ICqLo9wnzYegwHwYDVR0j
BBgwFoAU/cg8gZnHbQkeKtm/tGCSZXNgXawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTA1Zjc2OGItNDIxOC00YzVkLTg5M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5
OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3MzYwNURBQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GREM4M0M4MTk5Qzc2RDA5MUUyQUQ5QkZCNDYwOTI2NTczNjA1
REFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5
M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDky
NjU3MzYwNURBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFQ8ZNBPDb+JQ3qXlL2j97zGhwrTy/PiXEiO
Y1ykD+w7jemJI1n0ey+9KYD30V2R9S30jJ5GYfZlg0Gp0cUXyMYRCiAZaEHBsiRS
zQ6CFbN7UQ+2m2B40I9P00pXLTigyrQRZ0SRkMgHHetz6BScMteNbsGpWbO8E1BG
wBQlZeKionjlpPjKUWZ7jyEoKIl4MLe+a6C+P9eeUM5CYlXZza3FjSn5Kn/e1Bp8
a4gN39udteON0XMf3OV901X1nQDngyvCAEqLBijLDg/A8XETmM/rzQHb3DGkqeuo
3hXVPmPXiBEL5fRUF94OxU+KlTEzEEYzsoNBoVilEnRvYaqkY10=
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:34:12 2026 by rpki-client