Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft
File:                     24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft (raw, json)
Hash identifier:          H0hDBO8QRCDNu7pZKtAGYhY8giDzgmCMJi08zcgGmFs=
Subject key identifier:   29:F7:E7:5B:A4:4C:36:2E:C0:3D:9E:FB:69:BB:2C:AF:97:19:08:69
Authority key identifier: 24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C
Certificate issuer:       /CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C
Certificate serial:       330F5D0F7DEA3EF188E885B18F3BE104ABB44844
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft
Manifest number:          7B
Signing time:             Sun 02 Aug 2026 02:25:31 +0000
Manifest this update:     Sun 02 Aug 2026 02:20:31 +0000
Manifest next update:     Mon 03 Aug 2026 05:29:31 +0000
Files and hashes:         1: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: P2rFVCGkfAn7n6YhnSsQWxTg2/yvpx/ugQFzNxgB2+8=)
                          2: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: JZ+JrWyfeZVhemi+vD2CV7hYoGeyTJb618EwHA6inzE=)
                          3: 24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl (hash: CB9n08lTrEFXAmaBZUcuDatmWtwiARSdoVqTtmrt/ds=)
                          4: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: sBlAsBUm/zFX+7CxaqiGPRe6UIyTyExAzuBvhzYHXTs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl
                          rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0f:5d:0f:7d:ea:3e:f1:88:e8:85:b1:8f:3b:e1:04:ab:b4:48:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24288406EA1098AC2D2234BC7B2FF39074F71A3C
        Validity
            Not Before: Aug  2 02:20:31 2026 GMT
            Not After : Aug  3 05:29:31 2026 GMT
        Subject: CN=29F7E75BA44C362EC03D9EFB69BB2CAF97190869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c5:a3:6a:3e:e3:a0:4f:43:eb:e3:e2:a5:05:
                    19:5a:fa:65:35:4e:58:19:31:d0:6e:e9:42:c4:38:
                    9c:d9:e5:fb:87:09:a6:49:a4:9e:1c:a4:dc:03:71:
                    0c:78:3f:b5:4e:c3:f2:d3:5d:fc:6c:31:6c:66:6e:
                    21:4c:be:3f:d1:de:0d:78:c7:98:57:1b:45:b6:bf:
                    11:73:a3:92:60:d6:f5:91:c0:45:1f:88:4a:a0:96:
                    05:ff:65:81:75:fe:9b:c2:5c:48:da:84:0d:02:4b:
                    15:54:8b:87:e0:4f:81:24:e8:70:14:db:22:7e:dd:
                    ee:ef:36:11:10:1e:59:9b:6b:67:20:80:e6:6c:f5:
                    34:65:76:06:8b:c5:61:52:45:bb:88:3c:78:14:00:
                    14:23:c2:98:5c:68:a2:67:fa:a1:f6:1b:8c:5a:8a:
                    fa:88:61:1a:8b:59:a3:9a:44:23:26:15:83:f4:47:
                    20:59:ad:73:12:f2:3b:90:d4:f9:57:86:0c:88:eb:
                    cc:6b:14:0f:f4:23:da:d3:eb:c2:28:22:85:d0:e1:
                    bd:88:96:02:9d:80:c6:87:09:08:30:72:3d:12:37:
                    40:c9:88:b7:1a:76:53:16:56:0e:0e:e9:24:b8:88:
                    03:5a:f7:cc:96:da:d4:fa:5d:79:4f:39:8a:fc:b2:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F7:E7:5B:A4:4C:36:2E:C0:3D:9E:FB:69:BB:2C:AF:97:19:08:69
            X509v3 Authority Key Identifier:
                keyid:24:28:84:06:EA:10:98:AC:2D:22:34:BC:7B:2F:F3:90:74:F7:1A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/24288406EA1098AC2D2234BC7B2FF39074F71A3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:fb:dc:6d:9f:44:52:c8:13:65:20:20:b1:19:52:ff:f7:
         90:16:bd:19:04:dd:e3:c4:14:31:98:10:48:a6:03:fb:52:d7:
         f8:0f:50:fd:a3:b8:cb:f5:72:24:af:46:ce:32:02:86:94:f9:
         e2:bb:ce:bb:d0:cb:5e:7b:95:98:5e:ee:40:59:7b:25:7a:50:
         94:0f:da:ae:bc:01:1d:07:eb:55:21:fb:6d:2d:60:48:c2:cc:
         85:c6:ad:33:f8:c6:59:74:31:ae:c8:eb:b3:d9:2e:a2:36:81:
         18:1d:31:c9:44:7b:2a:b7:9f:e1:e2:4c:36:03:c7:e3:36:00:
         58:61:86:55:52:19:3d:b5:b2:96:0c:40:8a:b5:68:8f:7e:9f:
         53:d8:a9:55:17:4d:70:44:5a:2c:31:50:7c:b2:3d:c7:a7:91:
         9a:69:72:39:6b:ea:3f:2b:b6:e3:c8:de:d4:5b:ed:50:f6:b4:
         aa:e9:90:ba:e9:cc:08:bb:ae:54:91:43:c1:8a:9d:61:a5:ba:
         02:8e:ca:dd:07:de:db:19:71:cf:be:ef:9b:56:af:27:71:26:
         d4:a2:cf:ad:3a:43:84:4d:a9:b9:8a:42:98:95:5e:01:2d:b3:
         04:8c:18:1c:ad:33:41:e7:48:f9:11:d1:83:78:7d:21:06:5a:
         1d:4f:01:25
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMw9dD33qPvGI6IWxjzvhBKu0SEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3
NEY3MUEzQzAeFw0yNjA4MDIwMjIwMzFaFw0yNjA4MDMwNTI5MzFaMDMxMTAvBgNV
BAMTKDI5RjdFNzVCQTQ0QzM2MkVDMDNEOUVGQjY5QkIyQ0FGOTcxOTA4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlxaNqPuOgT0Pr4+KlBRla+mU1
TlgZMdBu6ULEOJzZ5fuHCaZJpJ4cpNwDcQx4P7VOw/LTXfxsMWxmbiFMvj/R3g14
x5hXG0W2vxFzo5Jg1vWRwEUfiEqglgX/ZYF1/pvCXEjahA0CSxVUi4fgT4Ek6HAU
2yJ+3e7vNhEQHlmba2cggOZs9TRldgaLxWFSRbuIPHgUABQjwphcaKJn+qH2G4xa
ivqIYRqLWaOaRCMmFYP0RyBZrXMS8juQ1PlXhgyI68xrFA/0I9rT68IoIoXQ4b2I
lgKdgMaHCQgwcj0SN0DJiLcadlMWVg4O6SS4iANa98yW2tT6XXlPOYr8sstFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKffnW6RMNi7APZ77abssr5cZCGkwHwYDVR0j
BBgwFoAUJCiEBuoQmKwtIjS8ey/zkHT3GjwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTljMTViNzgtMjA3MS00NGQxLTlhMWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZF
QTEwOThBQzJEMjIzNEJDN0IyRkYzOTA3NEY3MUEzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8yNDI4ODQwNkVBMTA5OEFDMkQyMjM0QkM3QjJGRjM5MDc0Rjcx
QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh
MWQtYWQ2ZWIwOWZhZTA4LzAvMjQyODg0MDZFQTEwOThBQzJEMjIzNEJDN0IyRkYz
OTA3NEY3MUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFyx+9xtn0RSyBNlICCxGVL/95AWvRkE3ePE
FDGYEEimA/tS1/gPUP2juMv1ciSvRs4yAoaU+eK7zrvQy157lZhe7kBZeyV6UJQP
2q68AR0H61Uh+20tYEjCzIXGrTP4xll0Ma7I67PZLqI2gRgdMclEeyq3n+HiTDYD
x+M2AFhhhlVSGT21spYMQIq1aI9+n1PYqVUXTXBEWiwxUHyyPcenkZppcjlr6j8r
tuPI3tRb7VD2tKrpkLrpzAi7rlSRQ8GKnWGlugKOyt0H3tsZcc++75tWrydxJtSi
z606Q4RNqbmKQpiVXgEtswSMGBytM0HnSPkR0YN4fSEGWh1PASU=
-----END CERTIFICATE-----
Generated at Sun Aug 2 20:33:28 2026 by rpki-client