Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
File:                     D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json)
Hash identifier:          FcTrp3EaRCMpFKHk9lfybzGw/a3puLgUE59R5Zz1XrQ=
Subject key identifier:   59:CB:20:3A:C4:10:2B:83:4B:87:14:6D:4A:63:B0:06:13:76:E5:B5
Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81
Certificate issuer:       /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181
Certificate serial:       7A9655217ED453A7A466538C142C083F60044379
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
Manifest number:          75
Signing time:             Tue 28 Jul 2026 13:58:43 +0000
Manifest this update:     Tue 28 Jul 2026 13:53:43 +0000
Manifest next update:     Wed 29 Jul 2026 17:56:43 +0000
Files and hashes:         1: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: tqkUswsBcb4n9IawJ9TfwKXrH4OxnXFOEnMTxMDCwt8=)
                          2: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl
                          rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:96:55:21:7e:d4:53:a7:a4:66:53:8c:14:2c:08:3f:60:04:43:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181
        Validity
            Not Before: Jul 28 13:53:43 2026 GMT
            Not After : Jul 29 17:56:43 2026 GMT
        Subject: CN=59CB203AC4102B834B87146D4A63B0061376E5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e2:4d:0d:70:c9:34:db:50:94:6f:1a:83:5e:
                    e1:8b:ce:0a:b5:29:0c:ac:c8:e1:6c:3f:aa:8f:58:
                    72:ba:cb:15:52:5e:67:15:c6:cf:90:bd:41:9d:b4:
                    0f:62:85:b0:b8:e4:75:e7:ed:d7:ab:95:28:67:df:
                    b1:c2:06:e2:40:63:16:c3:97:d1:6a:fc:00:60:63:
                    1c:94:72:f4:a4:3f:9b:7a:02:50:d5:ab:e9:96:f6:
                    c7:4d:b2:23:12:a8:0f:a2:84:33:e7:e5:00:6c:d2:
                    5a:ea:b7:c6:e4:9f:3a:40:fd:ae:08:f2:f4:39:f4:
                    96:92:0b:6f:04:21:34:ad:28:ca:d0:1d:66:42:b6:
                    67:aa:00:c2:20:6f:82:e2:a8:40:b7:7b:f0:db:38:
                    da:0f:15:0d:32:b0:d3:7b:44:bd:b9:c4:7c:e3:56:
                    e9:12:f3:9e:e3:06:0a:06:43:ff:37:c1:9e:7f:ab:
                    6b:0a:2a:9c:2b:7a:92:89:11:b1:a5:de:fd:64:e7:
                    31:2e:fe:5a:36:a2:4a:e0:b7:92:33:56:13:e8:59:
                    56:a0:fd:60:c1:c4:e4:67:23:a3:21:a4:14:97:f1:
                    5a:c4:c6:e9:52:ee:4a:04:b7:87:a8:1e:e3:04:81:
                    92:d8:cb:70:4d:71:29:e8:74:39:c0:3b:41:0b:9a:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CB:20:3A:C4:10:2B:83:4B:87:14:6D:4A:63:B0:06:13:76:E5:B5
            X509v3 Authority Key Identifier:
                keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:75:b7:4d:5f:ee:50:05:12:56:8e:84:aa:2f:65:0a:d7:69:
         ea:d9:a2:36:1b:40:83:74:44:73:81:8d:3c:66:1d:cb:f4:c0:
         9d:00:15:46:46:8d:6a:ef:ad:28:5d:5e:6e:35:64:79:b9:d8:
         ca:c6:46:0e:5e:31:4d:2c:66:2e:1b:8b:92:36:56:cf:09:7d:
         2a:01:ec:3c:f6:fa:b2:a1:03:96:18:48:d1:7b:f2:11:9f:10:
         0f:18:ed:0b:b3:a2:5e:c0:2c:90:4d:0c:b3:61:15:63:f3:81:
         57:b9:3c:30:62:34:0f:f4:b5:33:7d:91:0c:48:34:78:44:a9:
         50:2f:4e:f8:93:01:7f:95:dd:eb:83:d4:e1:77:4d:0b:96:5f:
         f9:69:71:e8:62:d9:49:fb:e8:83:6d:51:cd:fd:8b:3e:7b:e6:
         69:36:5c:9d:75:d9:4f:23:e4:d0:36:5a:7b:58:c9:9d:ef:b3:
         89:65:24:1e:ed:41:17:b7:83:6a:7e:71:13:36:1f:11:e0:39:
         e8:16:f6:31:ce:f6:70:29:79:b6:c1:8c:fd:98:e6:68:c5:ef:
         5d:15:db:3a:15:05:ec:40:fe:6c:75:80:56:18:bb:cd:50:cc:
         a1:cf:3c:55:e5:fb:8c:36:e7:56:9b:42:38:68:a8:31:93:40:
         8c:91:ca:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:53:53 2026 by rpki-client