Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
File:                     90A149FB759A6A176FE4D47F5082FA60C9767022.mft (raw, json)
Hash identifier:          QYZr4ehPN5BijjGXaUTJcyfV1/QscJLBha8NGZz1DEE=
Subject key identifier:   79:29:46:A8:92:BD:BF:95:83:CA:7F:AB:D6:6B:8C:DF:78:37:43:90
Authority key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22
Certificate issuer:       /CN=90A149FB759A6A176FE4D47F5082FA60C9767022
Certificate serial:       777C0E6553EB2BFA871C7F8F491E40B5C5707D3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
Manifest number:          74
Signing time:             Tue 28 Jul 2026 02:04:39 +0000
Manifest this update:     Tue 28 Jul 2026 01:59:39 +0000
Manifest next update:     Wed 29 Jul 2026 04:26:39 +0000
Files and hashes:         1: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: hcuXQrxnDSCR9sGH8AKpCLGAnxBa8Jctci8rHhKNuLM=)
                          2: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: MYxtWKdKnWygaDzucgDa2e53LN0HkZn96bp2EuKqQIc=)
                          3: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: fEHjHjujgkqVA1apLtwPlgVoJB63v2RTVUpYlDyn+3c=)
                          4: 3132302e32392e3232352e302f32342d3234203d3e203139393035.roa (hash: WJbMrhYWH52zN+15Q0lEM0yHGULJofqinsPUUc3DEoM=)
                          5: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: G5X9t8nXB1mRf0UKItbT4yn3eidWxB2oSMgKDMVRVbE=)
                          6: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: /bFeq3oJ+j4yhcHhIfucgcl6Z3OfaEag9GMIa9agARs=)
                          7: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: PkQgWHfFkFDdD7JqzWkftJuZG03TTvKBUbVrhzww6Q4=)
                          8: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: dcQ3Sb65sjjLX49tVMmjaQB6c8zJqXUEiFfQJc1R5QA=)
                          9: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: /6rKJIPdCG5UyO3XHODZZ3EDU0CTpBfu4ou77AX6cek=)
                          10: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: ZyVnCGfpVMbL3rPs3FU6HbGvjwN2cgfbIIbFeRp+eSg=)
                          11: 90A149FB759A6A176FE4D47F5082FA60C9767022.crl (hash: QYITWX142J9/RAwRYMNlq0p7sVdZndgkCcu/XARKktA=)
                          12: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: ckYh7W2IVtz0AntnQ+PueP5/KAoXf5rAosyZM59PhNk=)
                          13: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: wR1gyIq5cKfCTApo9vqdO2nlAEKOlwrS+SEI5BtyjVc=)
                          14: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: X5HsBE1ewqrCbWqrNdoiRxUV2ywDPMva+dNQ4cS5oB4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl
                          rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 04:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7c:0e:65:53:eb:2b:fa:87:1c:7f:8f:49:1e:40:b5:c5:70:7d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90A149FB759A6A176FE4D47F5082FA60C9767022
        Validity
            Not Before: Jul 28 01:59:39 2026 GMT
            Not After : Jul 29 04:26:39 2026 GMT
        Subject: CN=792946A892BDBF9583CA7FABD66B8CDF78374390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:21:9b:59:7a:61:65:69:1d:0f:4c:9a:33:
                    a7:63:ca:a4:89:af:68:52:21:ee:f2:01:52:e7:09:
                    cc:b6:b8:45:02:a8:66:71:0c:db:dc:a6:a5:16:83:
                    9d:ad:67:0c:08:b8:ce:c0:c7:fb:ca:b1:33:b8:9b:
                    f2:89:53:72:66:25:6c:93:d4:d1:16:3c:a0:fb:b7:
                    f9:4c:37:f5:34:99:b2:53:9a:2b:b6:2f:75:fe:eb:
                    eb:7d:89:f1:f1:90:f2:70:7d:ab:3f:10:22:e2:56:
                    55:05:62:c8:41:47:4c:cb:2a:8d:6a:54:2b:01:1a:
                    a3:4c:79:99:9f:a8:d0:8e:5f:4e:fe:51:d9:a1:5b:
                    77:82:7e:a7:cc:3c:d3:33:48:99:20:de:8a:b4:0e:
                    52:1b:62:74:06:4c:a8:9b:7e:98:4a:4a:55:48:57:
                    2c:8d:d2:5b:bc:07:5c:9d:67:d6:83:5b:46:6e:9d:
                    d3:01:32:2a:f1:f7:1e:28:90:72:13:47:41:2f:c2:
                    75:99:f1:c2:a7:d6:c9:27:f1:44:54:e6:40:ff:29:
                    fa:4f:b7:62:39:27:e9:9d:cc:83:0f:65:2b:30:30:
                    d6:78:ea:3a:e0:cb:ac:41:d8:86:4e:72:68:42:53:
                    ba:a7:aa:af:e5:9c:6d:7e:64:41:59:92:1c:e9:8d:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:29:46:A8:92:BD:BF:95:83:CA:7F:AB:D6:6B:8C:DF:78:37:43:90
            X509v3 Authority Key Identifier:
                keyid:90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:62:13:ab:22:d0:91:3c:db:90:05:52:13:ee:56:87:63:
         fd:e3:1f:ba:da:e3:02:49:9f:29:41:d9:be:36:86:13:14:59:
         90:36:59:c8:48:d8:98:52:32:71:14:32:6f:37:7a:44:4d:aa:
         47:93:86:c9:55:50:ec:ee:ca:fb:ca:24:b0:70:e6:0b:29:8b:
         eb:12:ce:08:91:4a:7f:5d:82:df:f3:4e:3e:36:4f:cb:bc:4b:
         b8:c0:4c:a7:11:62:3e:a6:83:33:bb:41:96:23:c2:1f:65:38:
         12:4e:53:e6:25:44:08:24:00:f9:4c:11:51:63:11:ab:07:3f:
         14:b1:1d:a1:d0:c2:16:17:d6:c1:dc:26:94:77:56:2a:de:52:
         cc:11:6d:c1:38:4e:22:ad:b7:bc:fd:0c:00:09:49:0f:33:9f:
         ac:d1:ae:66:38:50:61:ed:90:07:5b:13:b5:95:6c:37:d6:a2:
         ba:d1:91:f3:16:99:07:10:49:de:77:7f:f3:65:d7:e5:cc:33:
         cb:ed:80:b8:d5:41:0a:3c:ed:c1:97:7c:c9:c2:9e:5b:9a:0d:
         20:bd:af:5d:44:71:67:1b:eb:2d:6f:7f:22:e5:e4:74:ba:6d:
         fe:10:ea:b1:3a:fb:d6:ed:e3:84:0e:51:4c:af:ff:f5:2d:a1:
         c8:10:99:99
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd3wOZVPrK/qHHH+PSR5AtcVwfTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBBMTQ5RkI3NTlBNkExNzZGRTRENDdGNTA4MkZBNjBD
OTc2NzAyMjAeFw0yNjA3MjgwMTU5MzlaFw0yNjA3MjkwNDI2MzlaMDMxMTAvBgNV
BAMTKDc5Mjk0NkE4OTJCREJGOTU4M0NBN0ZBQkQ2NkI4Q0RGNzgzNzQzOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXrCGbWXphZWkdD0yaM6djyqSJ
r2hSIe7yAVLnCcy2uEUCqGZxDNvcpqUWg52tZwwIuM7Ax/vKsTO4m/KJU3JmJWyT
1NEWPKD7t/lMN/U0mbJTmiu2L3X+6+t9ifHxkPJwfas/ECLiVlUFYshBR0zLKo1q
VCsBGqNMeZmfqNCOX07+UdmhW3eCfqfMPNMzSJkg3oq0DlIbYnQGTKibfphKSlVI
VyyN0lu8B1ydZ9aDW0ZundMBMirx9x4okHITR0EvwnWZ8cKn1skn8URU5kD/KfpP
t2I5J+mdzIMPZSswMNZ46jrgy6xB2IZOcmhCU7qnqq/lnG1+ZEFZkhzpjQ5vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUeSlGqJK9v5WDyn+r1muM33g3Q5AwHwYDVR0j
BBgwFoAUkKFJ+3Waahdv5NR/UIL6YMl2cCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjIxYzljYWQtYzNiOS00NWEwLWJlYjYtYmNlNDhlMmIyMjcyLzAvOTBBMTQ5RkI3
NTlBNkExNzZGRTRENDdGNTA4MkZBNjBDOTc2NzAyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MEExNDlGQjc1OUE2QTE3NkZFNEQ0N0Y1MDgyRkE2MEM5NzY3
MDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl
YjYtYmNlNDhlMmIyMjcyLzAvOTBBMTQ5RkI3NTlBNkExNzZGRTRENDdGNTA4MkZB
NjBDOTc2NzAyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEC9YhOrItCRPNuQBVIT7laHY/3jH7ra4wJJ
nylB2b42hhMUWZA2WchI2JhSMnEUMm83ekRNqkeThslVUOzuyvvKJLBw5gspi+sS
zgiRSn9dgt/zTj42T8u8S7jATKcRYj6mgzO7QZYjwh9lOBJOU+YlRAgkAPlMEVFj
EasHPxSxHaHQwhYX1sHcJpR3VireUswRbcE4TiKtt7z9DAAJSQ8zn6zRrmY4UGHt
kAdbE7WVbDfWorrRkfMWmQcQSd53f/Nl1+XMM8vtgLjVQQo87cGXfMnCnluaDSC9
r11EcWcb6y1vfyLl5HS6bf4Q6rE6+9bt44QOUUyv//UtocgQmZk=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:55 2026 by rpki-client