Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
File:                     5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft (raw, json)
Hash identifier:          5XX+z0W4rMtym8Ht8YzPYB4bc6mwFxUGRvj8voeqslY=
Subject key identifier:   D5:6D:7D:4A:5F:02:2C:D3:F3:27:53:26:5D:9A:BF:C2:2F:4C:D3:49
Authority key identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63
Certificate issuer:       /CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
Certificate serial:       387855B0E5FD7F8642B117298E43DB8F938A4CBF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
Manifest number:          8C
Signing time:             Sat 15 Aug 2026 01:00:28 +0000
Manifest this update:     Sat 15 Aug 2026 00:55:28 +0000
Manifest next update:     Sun 16 Aug 2026 04:12:28 +0000
Files and hashes:         1: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: xLjlTIflH6sc0X3Sbj2zzWpljnqqaMPM3eUOug3XrMk=)
                          2: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: WcflqBWiLgPAZ9Y0v7/46V6GV1t5xWnWDOoYXcwaOd8=)
                          3: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: YZJGRKgbn++QjdW/BYBy5zi4Iey6oxaZnIjLCUOoVQY=)
                          4: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: pW9Xq+VRLYCTvIh/TcwaaDaFgakUuCARpznvzAbxTXo=)
                          5: 5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl (hash: 4rIf/2QixTV1B77AEHjyllFKpIBKLrXjqzZSbsfMyWU=)
                          6: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: KDqog2rfiubYaTHJcE3FAsBqz6lLLEZTtq7kD9KAXRw=)
                          7: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o74QhQczERNJ9zjSUZ37A/5NOrH2tv7P/NXYzzpKIyQ=)
                          8: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: FSc1aeAh2Rt+5JPB4WOEH2O9AvnjApvUD4AoU6qwI3k=)
                          9: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: M9GmOl7DSf3JgqEI4OyXiGmMeRs5OMlGvZJmwiVp3yA=)
                          10: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: BrA2AYWTFSxj+vqtiSjtdleZMLMTR+csvmqEcgKBW48=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl
                          rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:78:55:b0:e5:fd:7f:86:42:b1:17:29:8e:43:db:8f:93:8a:4c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
        Validity
            Not Before: Aug 15 00:55:28 2026 GMT
            Not After : Aug 16 04:12:28 2026 GMT
        Subject: CN=D56D7D4A5F022CD3F32753265D9ABFC22F4CD349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:aa:ab:ca:c2:05:5c:ab:c9:5c:76:fd:da:
                    46:4b:ff:0a:e3:54:3b:37:30:e5:e1:60:e9:bb:94:
                    35:6f:78:d2:34:c6:8a:b9:b4:9b:1b:fb:1f:75:08:
                    35:a8:aa:6d:db:f6:be:25:95:2e:9d:07:57:c0:ee:
                    eb:38:11:b3:ce:22:73:72:96:63:f1:48:33:c5:f3:
                    67:f5:84:b1:6b:52:00:de:a5:04:e8:f0:5f:6a:f5:
                    67:1c:88:28:75:88:d4:a2:38:35:08:ef:2c:38:43:
                    54:b5:52:02:36:3d:3a:2a:f4:63:7d:fe:58:a3:47:
                    69:26:b5:3b:f1:96:8e:38:9c:4a:07:f1:69:f6:93:
                    b1:89:1b:0c:50:a6:b3:bd:6e:ba:4b:e9:62:76:6e:
                    7f:73:34:7c:31:a0:2b:ef:ef:85:ea:88:d9:fd:6a:
                    d8:27:be:88:f6:86:5a:73:71:55:10:d2:fe:a5:a3:
                    b3:71:06:f5:7e:5d:65:3b:0f:07:91:7a:88:5c:28:
                    a9:73:13:5e:4b:5e:d9:dd:0a:5a:28:b8:ca:f9:cf:
                    b5:39:d9:6a:98:80:e3:d1:8e:92:c7:c6:81:e8:56:
                    25:ee:bd:bf:f8:cc:d1:55:70:4a:11:c9:f1:af:c8:
                    8b:81:45:44:a4:3f:50:a6:39:0d:8d:d2:3f:aa:31:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6D:7D:4A:5F:02:2C:D3:F3:27:53:26:5D:9A:BF:C2:2F:4C:D3:49
            X509v3 Authority Key Identifier:
                keyid:5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0a:1d:40:0f:94:ce:dd:bc:54:e9:25:7e:89:24:86:a8:f6:
         30:b9:60:73:55:48:6f:9c:1a:e4:7e:bd:28:b3:39:1e:2b:8e:
         78:24:85:14:29:ed:8d:bb:d6:80:90:f2:3d:e8:c9:b8:2f:7c:
         14:62:07:ba:9f:e6:81:f7:f7:42:6c:bc:f7:d6:9a:94:0b:82:
         63:08:87:78:0b:f3:a3:76:f0:f2:da:3c:eb:45:94:0b:da:4d:
         db:9f:93:e6:e6:8c:0c:5c:8f:fb:ec:b4:b2:c8:4b:3a:a7:5b:
         9d:f3:39:f9:85:9c:ba:38:3d:56:b5:a7:ba:c1:d9:78:a1:87:
         31:ec:2b:ba:0d:d8:76:41:92:6c:e8:5e:dc:a1:af:a9:0b:9f:
         cb:a3:db:44:c3:c7:65:6c:46:ec:a5:f2:c6:20:6e:17:be:28:
         2d:0c:45:b3:ec:d2:85:fe:cd:e0:cc:65:6a:f3:a4:f4:be:e3:
         65:ca:93:04:b0:30:ce:55:63:ec:e4:78:b8:1b:f1:b7:c3:ad:
         6c:0f:f1:fd:65:26:a0:d1:07:e4:ed:63:48:7e:fe:c1:e1:e3:
         ac:e1:73:57:79:67:06:9a:8b:14:4f:f1:08:02:ea:05:d5:5a:
         d4:65:8f:18:05:c0:bc:cf:c7:87:09:58:35:e7:24:48:78:af:
         bb:0a:e4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:40:36 2026 by rpki-client