Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
File:                     595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft (raw, json)
Hash identifier:          FVdarYQdinmi23e7aTslrtSl7chsNibWrLQ48QarqfQ=
Subject key identifier:   9F:CF:F6:8C:FC:A8:9E:B2:11:DD:62:B6:84:8F:06:71:3F:CA:7D:0E
Authority key identifier: 59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2
Certificate issuer:       /CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
Certificate serial:       2C2C6EF71604C9DCFFF98C93A0A662D981784B48
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
Manifest number:          75
Signing time:             Tue 28 Jul 2026 13:17:56 +0000
Manifest this update:     Tue 28 Jul 2026 13:12:56 +0000
Manifest next update:     Wed 29 Jul 2026 13:40:56 +0000
Files and hashes:         1: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: jNXjwR9NoJrp9dtiwnlZ8ZD+nF3IUWQs6hiqUnrS/Ok=)
                          2: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: OsRtYTl/a4gBsIVTCYGY7UbsLX5kl3Dd0rUx9sxMLF8=)
                          3: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: kbsHwCF+kLPIM6LmBzd7ReTnbGaVE3pJ2tb1Y6LGrMo=)
                          4: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: YnpwLS3qShrtat5vFr4GKHpgIrsqYW7nhd/bbP/N9z4=)
                          5: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: eR32X6TB9dCvTyEj8xcbUe0oCJGcSbLwWM78VEF/mIM=)
                          6: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 0dcgbUIE4O45ZJeQQknhi7QzWy9JrD3T/y5JsTnfFC0=)
                          7: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: Gf7+JDdgZXaOoBD3FCXccmzSiqspLprw2RT0W6wNy+U=)
                          8: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: eOdt05IAfcrKKZUnC2uIX6d/C9w0dr4HU6UCs9176ek=)
                          9: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: pBXuYTqReMplN2AY6AolkobEan90DNcRX+8WnFHv1IY=)
                          10: 3130332e3131382e3137342e302f32342d3234203d3e20313339323035.roa (hash: EZ+ZMEszQ0FNnAyScxrOoCf6N5MbYNv0AIqesnyNkY8=)
                          11: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: oIB0azCHKZZD4LUQLYG0Yqlb4f/9KSBQ4JwecEqWsUw=)
                          12: 595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl (hash: 2/LjGiZXwD40VJaCVRUXS57hCgRa/AmBPcOTsx4pAUE=)
                          13: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: jO/LVsBGp/hIYW/T7V2ve/LWVG5Avg+yBl19oxnQ+Ok=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl
                          rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2c:6e:f7:16:04:c9:dc:ff:f9:8c:93:a0:a6:62:d9:81:78:4b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595ADE95CD3971264537934C7A4061E2FCA6CCC2
        Validity
            Not Before: Jul 28 13:12:56 2026 GMT
            Not After : Jul 29 13:40:56 2026 GMT
        Subject: CN=9FCFF68CFCA89EB211DD62B6848F06713FCA7D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:9d:4d:16:75:7b:a3:d5:f5:be:d3:21:8e:
                    70:e7:6e:c2:01:a8:83:e0:da:e9:62:25:17:79:77:
                    cc:2a:98:b4:96:89:07:fc:fc:11:5e:ab:b9:44:2d:
                    80:5f:c1:03:72:5f:e4:39:dd:9e:14:02:84:f4:1f:
                    92:1d:e0:a4:49:f0:d0:5f:f2:77:ec:37:91:be:38:
                    32:d1:d5:cd:ab:ee:00:ac:e8:57:83:51:13:d9:c6:
                    75:1d:82:a3:a4:49:c2:2e:b5:63:75:99:0e:d0:b5:
                    0d:30:9d:25:e1:b8:31:21:89:27:08:7c:4b:a6:4e:
                    1d:ed:9b:3e:d5:36:b8:e3:ce:d2:4e:9d:54:1a:d5:
                    d5:3c:de:d1:11:e0:62:af:24:9f:2d:67:e1:37:f3:
                    6e:ae:7a:cb:2a:02:71:b1:13:55:64:b2:24:f3:c8:
                    f5:17:76:f2:9f:f0:8f:eb:42:b8:33:cd:d3:57:c1:
                    59:e2:dd:48:3a:d5:82:11:53:cc:ea:38:b6:5b:8d:
                    10:80:09:62:e2:a5:82:2c:f6:37:39:db:23:00:a8:
                    1d:c3:11:8d:d2:b0:fd:15:07:63:1e:1c:a2:bf:0a:
                    44:a5:19:5e:9f:8f:44:cf:14:d9:95:ce:9a:dd:e7:
                    5f:33:06:c6:45:aa:d3:46:8c:dd:36:b5:38:e5:af:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CF:F6:8C:FC:A8:9E:B2:11:DD:62:B6:84:8F:06:71:3F:CA:7D:0E
            X509v3 Authority Key Identifier:
                keyid:59:5A:DE:95:CD:39:71:26:45:37:93:4C:7A:40:61:E2:FC:A6:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/595ADE95CD3971264537934C7A4061E2FCA6CCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/595ADE95CD3971264537934C7A4061E2FCA6CCC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:41:42:41:96:a0:42:ca:62:94:42:f8:18:d8:7c:88:34:eb:
         1a:e1:f3:de:1a:e2:5f:4a:d1:eb:ac:af:af:0e:0e:db:5e:79:
         bb:71:e5:d8:63:20:3b:18:27:dc:fd:c6:fa:f5:a7:1c:65:ee:
         8c:4c:56:94:4d:73:00:d1:c1:37:b0:fc:8f:37:b0:e9:17:f3:
         8c:95:56:a2:07:08:40:c8:f3:fa:25:41:2d:20:91:9b:10:10:
         0a:74:36:e6:01:fc:10:f1:68:53:6e:45:cd:d4:57:41:f8:8a:
         54:05:ca:72:7f:ef:83:43:87:95:59:65:37:ed:12:53:60:b4:
         6d:74:a3:ab:3c:4d:e8:87:15:f9:61:39:0d:e0:5c:3e:04:c5:
         0c:dc:f0:5b:64:11:87:e1:35:07:58:4b:16:33:4c:df:f1:06:
         5a:a3:b9:a6:7f:ee:7f:9b:52:9e:30:57:73:70:29:5a:72:6e:
         4a:1c:d6:6c:cb:5b:ff:57:8f:2e:58:59:09:77:55:b0:fc:25:
         5b:78:14:b0:fa:2f:a0:b7:8c:ca:c8:ee:17:e5:72:a9:ae:fd:
         01:de:3e:35:c0:2b:23:13:bb:a4:af:ed:78:21:78:be:d4:db:
         07:d7:9e:07:5a:0e:7f:83:62:95:c9:2f:57:e1:fd:46:95:40:
         75:32:97:81
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULCxu9xYEydz/+YyToKZi2YF4S0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1QURFOTVDRDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJG
Q0E2Q0NDMjAeFw0yNjA3MjgxMzEyNTZaFw0yNjA3MjkxMzQwNTZaMDMxMTAvBgNV
BAMTKDlGQ0ZGNjhDRkNBODlFQjIxMURENjJCNjg0OEYwNjcxM0ZDQTdEMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qJ1NFnV7o9X1vtMhjnDnbsIB
qIPg2uliJRd5d8wqmLSWiQf8/BFeq7lELYBfwQNyX+Q53Z4UAoT0H5Id4KRJ8NBf
8nfsN5G+ODLR1c2r7gCs6FeDURPZxnUdgqOkScIutWN1mQ7QtQ0wnSXhuDEhiScI
fEumTh3tmz7VNrjjztJOnVQa1dU83tER4GKvJJ8tZ+E3826uessqAnGxE1VksiTz
yPUXdvKf8I/rQrgzzdNXwVni3Ug61YIRU8zqOLZbjRCACWLipYIs9jc52yMAqB3D
EY3SsP0VB2MeHKK/CkSlGV6fj0TPFNmVzprd518zBsZFqtNGjN02tTjlrwHDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn8/2jPyonrIR3WK2hI8GcT/KfQ4wHwYDVR0j
BBgwFoAUWVrelc05cSZFN5NMekBh4vymzMIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjdkOWQ3Y2ItNmNmYi00ZGUwLTlkYWEtZDIyMmI3YTg5MDcyLzAvNTk1QURFOTVD
RDM5NzEyNjQ1Mzc5MzRDN0E0MDYxRTJGQ0E2Q0NDMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OTVBREU5NUNEMzk3MTI2NDUzNzkzNEM3QTQwNjFFMkZDQTZD
Q0MyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdkOWQ3Y2ItNmNmYi00ZGUwLTlk
YWEtZDIyMmI3YTg5MDcyLzAvNTk1QURFOTVDRDM5NzEyNjQ1Mzc5MzRDN0E0MDYx
RTJGQ0E2Q0NDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADVBQkGWoELKYpRC+BjYfIg06xrh894a4l9K
0eusr68ODtteebtx5dhjIDsYJ9z9xvr1pxxl7oxMVpRNcwDRwTew/I83sOkX84yV
VqIHCEDI8/olQS0gkZsQEAp0NuYB/BDxaFNuRc3UV0H4ilQFynJ/74NDh5VZZTft
ElNgtG10o6s8TeiHFflhOQ3gXD4ExQzc8FtkEYfhNQdYSxYzTN/xBlqjuaZ/7n+b
Up4wV3NwKVpybkoc1mzLW/9Xjy5YWQl3VbD8JVt4FLD6L6C3jMrI7hflcqmu/QHe
PjXAKyMTu6Sv7XgheL7U2wfXngdaDn+DYpXJL1fh/UaVQHUyl4E=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:44:02 2026 by rpki-client