Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
File:                     5FF85953C6850E359467A581C3FE1AC78E529F2F.mft (raw, json)
Hash identifier:          hQLJbOAjw+84qATEMpPMXJSjcaTgiZmC1J1VMSG1D4I=
Subject key identifier:   11:75:73:DA:67:AE:AA:DD:BB:D3:BE:BD:7E:E9:1C:2B:F8:1E:6C:09
Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F
Certificate issuer:       /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
Certificate serial:       585C00350771B42054EAF267A37AC91A3404EF7B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
Manifest number:          76
Signing time:             Tue 28 Jul 2026 22:19:17 +0000
Manifest this update:     Tue 28 Jul 2026 22:14:17 +0000
Manifest next update:     Thu 30 Jul 2026 00:09:17 +0000
Files and hashes:         1: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: AwkHb7HGSUt+TaaLZZEdADtv/v78j6fMphbiNKpRchs=)
                          2: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: uTaNGo7IDdsOGs73zESne28tA+ZzMyK0wMRINMuXTcQ=)
                          3: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: +qKLLz9ehRuOchJ8m6wI99oYtklf5Gx9ixqGHWMAzMw=)
                          4: 5FF85953C6850E359467A581C3FE1AC78E529F2F.crl (hash: fcwnstY42/4uIMg3sB46VH1PTpfJ0nfA6lDtwc3MeBg=)
                          5: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: MmVOOc/LuqFNSXqQ5IddobFw0Ch137C+avOoyFd6ZzY=)
                          6: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=)
                          7: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: kPUK2GFDFYlKn9GXNmNAqFN8ChpgIluMw/CP+FmKw0o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl
                          rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5c:00:35:07:71:b4:20:54:ea:f2:67:a3:7a:c9:1a:34:04:ef:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
        Validity
            Not Before: Jul 28 22:14:17 2026 GMT
            Not After : Jul 30 00:09:17 2026 GMT
        Subject: CN=117573DA67AEAADDBBD3BEBD7EE91C2BF81E6C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:ff:0a:32:44:96:ba:6f:7f:8e:d0:60:5b:
                    44:ad:24:78:5e:42:05:11:b8:93:d4:68:49:db:4e:
                    74:a9:d9:f5:b8:e0:ea:e7:fb:35:54:e4:b9:d1:c6:
                    01:48:46:1d:b8:19:8c:f4:cf:29:df:59:d1:e8:1c:
                    0a:6e:f5:44:75:bf:f5:e5:25:d4:27:f4:99:c1:b7:
                    4a:8c:70:84:ce:e6:d7:71:b5:97:e4:7f:ff:9f:f7:
                    0e:5a:a5:8d:46:52:c2:dd:c0:99:41:3a:b7:f7:fa:
                    89:d6:76:1b:70:3d:9a:be:11:34:1a:21:03:9c:07:
                    49:75:d9:db:d2:55:fb:57:c8:64:46:28:08:09:a6:
                    16:68:60:75:6c:fa:6a:1e:9a:a3:5c:f3:83:6c:a1:
                    57:96:79:21:14:d5:d3:d9:a9:57:bf:74:4f:bc:31:
                    c4:e3:da:cd:63:ad:c2:4f:ae:cc:54:55:d9:58:ad:
                    84:fe:32:09:52:65:a1:f7:d7:b0:43:53:78:05:0d:
                    bf:63:db:2a:9d:63:61:1b:59:a4:6e:5c:36:d5:ec:
                    ed:0e:f8:49:58:ff:5e:22:9a:4b:1a:8f:74:e9:2c:
                    0a:94:32:b8:e1:98:23:68:bf:fb:3e:6d:ad:2b:6c:
                    35:62:4d:70:88:1a:b6:f8:c1:7e:67:08:0e:69:78:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:73:DA:67:AE:AA:DD:BB:D3:BE:BD:7E:E9:1C:2B:F8:1E:6C:09
            X509v3 Authority Key Identifier:
                keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:39:b6:c6:c8:c6:8e:06:f4:2e:47:31:0f:6b:82:10:6d:b9:
         16:21:18:8e:9d:f0:bc:b8:bf:04:ef:c4:87:7f:d1:87:58:9e:
         3c:de:0f:e1:e6:87:c6:c7:fe:54:3d:52:e4:73:fd:3d:c3:ff:
         19:7c:6d:c8:a2:49:da:89:c6:01:77:64:85:d9:c6:a5:81:43:
         b8:3c:1a:ce:32:93:b0:11:98:5d:f7:92:44:ec:45:37:aa:cc:
         7c:a6:48:55:15:7e:60:8e:18:b2:ef:a5:81:b7:31:18:aa:b6:
         4b:85:59:0d:8b:bb:89:05:b8:96:2d:5d:4f:aa:dc:63:4b:8b:
         0f:e2:7b:fa:62:b6:0d:42:26:3e:68:7f:75:76:c7:d5:82:02:
         34:4f:20:e7:55:b8:1d:f0:ee:e9:40:6b:6e:2b:74:c8:7e:49:
         73:90:71:f8:a5:ad:99:64:98:83:48:8d:9c:35:18:1a:1e:f1:
         de:88:04:36:2f:b4:c5:2c:70:c3:ac:6f:cf:c9:fc:09:b9:94:
         63:2f:98:f5:9b:eb:5b:a7:bf:61:74:d2:1a:a7:58:07:67:01:
         10:9c:4e:39:78:5f:bb:ab:6b:c6:cb:9e:23:48:a9:b3:ca:ef:
         81:c3:9d:ab:10:6b:6a:7a:be:0b:4a:90:e5:dd:6c:3a:90:15:
         e2:6a:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:54 2026 by rpki-client