Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
File:                     97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json)
Hash identifier:          y6QKcooQuRE8Xq/+5ssSDReTPRE7wffb+ekIqYKJDXo=
Subject key identifier:   99:C1:C1:68:B4:9E:C0:E0:12:0F:4D:C3:F5:4D:43:55:BF:7A:A7:FF
Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49
Certificate issuer:       /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
Certificate serial:       06C41B82C554C939C10AD966D59CE05BE9F74938
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
Manifest number:          74
Signing time:             Tue 28 Jul 2026 14:03:50 +0000
Manifest this update:     Tue 28 Jul 2026 13:58:50 +0000
Manifest next update:     Wed 29 Jul 2026 16:53:50 +0000
Files and hashes:         1: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: AaldvnJCxEqzAP3gAHrS9AcGlA16zFgMrsMzmy/WZSU=)
                          2: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl
                          rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 09:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c4:1b:82:c5:54:c9:39:c1:0a:d9:66:d5:9c:e0:5b:e9:f7:49:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
        Validity
            Not Before: Jul 28 13:58:50 2026 GMT
            Not After : Jul 29 16:53:50 2026 GMT
        Subject: CN=99C1C168B49EC0E0120F4DC3F54D4355BF7AA7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:24:c0:1f:0f:7b:e4:a2:51:18:ed:db:f6:
                    50:da:76:b7:6e:db:0b:af:ec:39:a3:ac:76:e9:66:
                    59:7a:78:43:08:36:8b:52:e6:56:fc:23:d8:20:d1:
                    20:37:7c:80:9f:e1:3a:5b:98:cd:18:10:ff:43:b4:
                    11:70:4a:4f:63:5d:b1:38:e7:54:8e:c2:9d:38:5a:
                    30:7e:92:80:a4:da:13:4a:b6:74:1f:93:a7:27:9a:
                    1c:4c:a5:4c:84:90:a4:c8:3a:8f:fb:f9:57:05:52:
                    46:08:df:69:ed:38:08:e8:8a:e9:49:9d:4e:d9:14:
                    24:58:eb:6d:ea:ea:c0:a9:52:cc:92:17:c4:1d:36:
                    67:1e:f0:84:35:89:e0:c6:7d:dc:de:27:ea:3a:89:
                    60:7f:92:8c:97:d7:ab:7f:5d:18:19:cf:2d:6d:c3:
                    67:ac:df:b1:37:aa:d1:82:6b:5e:7b:95:c9:3b:f5:
                    7f:d3:b4:8d:8f:04:e9:ce:14:61:62:55:9a:f5:f8:
                    26:21:fe:1b:58:38:53:b8:b4:46:f0:2d:32:a8:04:
                    4e:08:68:09:7d:16:40:c7:bf:0d:57:02:37:8a:ca:
                    6e:52:11:96:5a:e7:1b:27:b8:20:8a:9a:99:a4:9c:
                    7c:c4:64:38:33:a7:b3:99:2e:7e:35:6c:fd:20:bf:
                    c7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:C1:68:B4:9E:C0:E0:12:0F:4D:C3:F5:4D:43:55:BF:7A:A7:FF
            X509v3 Authority Key Identifier:
                keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e9:17:81:fc:19:2f:81:00:a8:b5:07:e5:67:ca:bb:97:3a:
         6d:d1:4c:dc:fc:96:fb:66:0c:80:3d:de:0e:f3:ed:b9:b1:f3:
         5f:d6:07:0d:8d:f1:c5:3a:03:2d:5e:c6:1d:8e:60:ba:b7:25:
         a7:c3:cf:cd:9b:ec:c2:92:8d:cb:d2:3a:3b:f2:99:37:b2:20:
         c5:f9:7d:d9:b9:9d:1f:1e:a1:f1:e8:e4:14:42:16:52:ce:e1:
         e4:b6:d1:34:ee:18:ce:98:e8:16:75:98:7b:bd:73:cd:72:cf:
         a0:74:fb:1e:a7:86:a7:9c:f2:bd:36:74:29:1a:a5:73:50:9c:
         90:b1:ed:44:61:63:40:a5:ac:dc:93:3e:4a:b3:99:e9:c7:57:
         6d:a6:a0:8a:8c:d0:71:ad:a7:3a:69:19:c3:1d:1f:f3:76:f0:
         cd:ad:a1:68:b9:0b:ec:2b:ba:fa:fc:65:64:77:5d:e7:89:b6:
         3f:5d:e9:ec:ce:55:e8:bc:61:4a:2c:a6:ec:1e:66:cf:8d:a1:
         ef:01:34:7a:cf:4a:63:b0:55:8f:c7:75:4b:55:22:82:7f:38:
         4f:ae:e2:72:67:55:33:1a:b4:e5:ad:09:ad:8d:3e:e3:c2:50:
         4f:05:f8:9d:14:c8:8c:13:6d:bd:37:7f:ba:b7:4e:6f:d9:ad:
         e6:ff:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:10 2026 by rpki-client