Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
File:                     11FFFA845980AD12347D7297657117A393722635.mft (raw, json)
Hash identifier:          q9KT/2Q+UUG2n/p0bwL1ve8cpT+nqzJkpf9BwvptYPM=
Subject key identifier:   71:EA:32:6D:E6:47:3E:08:FD:A3:23:99:D8:E3:C6:13:EC:AD:E6:B0
Authority key identifier: 11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35
Certificate issuer:       /CN=11FFFA845980AD12347D7297657117A393722635
Certificate serial:       2C3331B33A30FE034FE1CB35E65D30CA02DFB318
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
Manifest number:          73
Signing time:             Mon 27 Jul 2026 10:15:41 +0000
Manifest this update:     Mon 27 Jul 2026 10:10:41 +0000
Manifest next update:     Tue 28 Jul 2026 13:14:41 +0000
Files and hashes:         1: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: 1j1MwArF7+GiMoyA2GSO7NK/M/081FoP97bqeWhfFHU=)
                          2: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: lcXF2ukAyeD79WJ/+d/LiALmLjnDTwGdGGkGmI9GuQ8=)
                          3: 11FFFA845980AD12347D7297657117A393722635.crl (hash: 2S52gzL0q0k1NNCNfAycCF62soQsNGjLnrCS15bdvGk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl
                          rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:33:31:b3:3a:30:fe:03:4f:e1:cb:35:e6:5d:30:ca:02:df:b3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FFFA845980AD12347D7297657117A393722635
        Validity
            Not Before: Jul 27 10:10:41 2026 GMT
            Not After : Jul 28 13:14:41 2026 GMT
        Subject: CN=71EA326DE6473E08FDA32399D8E3C613ECADE6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:47:9f:0c:a2:f0:5b:94:e3:20:d0:c4:9c:
                    af:6c:52:bb:f7:51:97:3e:cd:40:40:dc:8a:e8:e6:
                    15:6c:fa:bc:45:0b:0e:07:37:79:b5:6a:8c:e4:97:
                    93:27:27:74:ca:d5:77:b9:01:a9:31:6d:5b:05:41:
                    7d:b0:6c:9d:e9:8c:66:95:75:dd:4f:35:9b:a5:cd:
                    a9:66:86:bf:29:a4:6b:10:a0:71:c4:42:16:75:5d:
                    c3:26:76:3c:e2:11:66:96:a3:46:ab:b5:e6:1b:a3:
                    ea:32:28:8c:bd:30:f4:5e:80:df:9f:d3:f9:40:a0:
                    d5:06:25:33:f1:96:f7:e5:f8:ea:21:6c:01:1d:69:
                    89:5e:eb:d6:a6:39:a6:7c:16:a3:b0:86:44:dd:d1:
                    e6:1c:2e:84:b5:de:5e:a6:0b:d3:b6:c2:2f:0e:a7:
                    21:47:20:a5:59:07:59:c5:c3:df:91:e2:49:c9:70:
                    b1:88:8b:b6:30:ff:ec:6c:82:26:60:f7:30:61:d5:
                    3d:f8:3b:1a:7d:e5:3b:83:7b:a5:fc:c0:eb:d9:37:
                    fe:2b:0d:87:77:2d:23:25:bb:62:ed:a9:cb:3e:d5:
                    36:88:60:8e:c5:bc:e5:f1:c9:cd:a9:2f:0f:13:6f:
                    5f:9d:d8:b9:01:f7:a7:c7:1f:fc:39:32:7e:a8:96:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EA:32:6D:E6:47:3E:08:FD:A3:23:99:D8:E3:C6:13:EC:AD:E6:B0
            X509v3 Authority Key Identifier:
                keyid:11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:21:d1:e0:d3:26:2c:72:1e:53:fe:97:ad:5d:79:66:77:
         22:ea:02:99:9c:47:85:11:8e:c5:cf:e7:73:0b:35:30:fb:04:
         ca:b6:98:88:bb:c0:2e:a8:b2:17:1d:3d:4b:bb:4d:0f:a2:6b:
         2c:d5:71:b6:f8:a9:a3:71:fa:62:aa:33:5d:92:39:dc:d9:40:
         67:18:02:62:5f:2b:8d:8f:d4:84:15:12:35:2c:10:7e:cb:44:
         50:26:0a:07:92:b0:20:37:88:45:cd:6a:a5:c9:0f:87:cf:72:
         b8:94:27:c2:20:5e:66:40:2c:e9:63:b5:78:95:ac:ea:e1:fd:
         6e:23:54:42:e5:95:1e:8c:55:bd:bb:4c:0c:3e:0a:1c:b3:3c:
         64:1f:04:7e:10:91:0b:af:36:bf:31:a9:3b:25:e4:40:96:1d:
         e8:71:39:32:70:e0:fa:7c:fa:20:d7:55:d0:2d:ed:33:f9:04:
         47:f8:9e:d0:6a:41:bb:8e:b2:dc:94:fa:f8:2c:c6:7f:d2:b7:
         48:19:2d:0a:c7:f3:72:ba:ab:29:9c:23:f1:a3:12:78:cd:ce:
         5f:1f:7b:90:5b:2a:c0:d2:46:6e:40:a6:14:12:21:6f:fb:6a:
         42:ba:50:44:f3:c5:ea:e1:6c:18:41:38:12:01:3b:88:ef:30:
         c3:5d:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:31:17 2026 by rpki-client