Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
File:                     AF6B7BCDACF90BA83205EA298327379BAB489418.mft (raw, json)
Hash identifier:          Gr6KYtTxf0SLu2erJKqXJO3ua3/G2MrB+CTYKdJ3OZ8=
Subject key identifier:   D7:96:A8:23:2A:97:2A:93:43:AB:0D:BD:52:AB:7E:01:25:2F:55:9B
Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
Certificate issuer:       /CN=AF6B7BCDACF90BA83205EA298327379BAB489418
Certificate serial:       7E1ADB44F4AC7B79974492C66561516E8A5586F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
Manifest number:          75
Signing time:             Tue 28 Jul 2026 10:45:08 +0000
Manifest this update:     Tue 28 Jul 2026 10:40:08 +0000
Manifest next update:     Wed 29 Jul 2026 12:57:08 +0000
Files and hashes:         1: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: Lg4qdsj1osZUt2Wgs1cQh8M+Cq27I8kA05MBhaZ1e2E=)
                          2: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: qCc2JIEbiwtQdnz7uQXbC2p3w6YwxAaU8dCI6McQWsM=)
                          3: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: +CIQNtkENDgMFXO899OFs+eQgqEbZwGsuSxbjsO2CJU=)
                          4: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: m+sPMgDP6AqfDbfIIzCUcgfgt53+FkXMgNrd1zzKT1I=)
                          5: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: xu1cN52iKwYrST7ZHiU1OG9/BN4NR23in1R/aZa/9/Y=)
                          6: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: EFzx2gdrAoK4dLqP6OWhoqarBZwTNPP8hlTF8ndHsA8=)
                          7: AF6B7BCDACF90BA83205EA298327379BAB489418.crl (hash: c+2ALBgw19vh7Bjvl5fA5m11aZRH+ldD+fmdLQxr6kI=)
                          8: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: oE4Q0cuL75fyXaIHf3JDUpfM+2/K4+wsnH/TeLPodS0=)
                          9: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: BxCzNrTcp0dp4A7C91gDRudiTOOmKrDBcvkaJa1pltE=)
                          10: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: y5wzCpmCgccfr9+aDXB1mUmJvFdLQ1aEGTJds2iwsoo=)
                          11: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: g0pqFy9DWm0Sz42lbSirSeYkq3Vdx407OgsTjSScBgc=)
                          12: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: K8j/ZLU+ci7JWbQ44lPBg2aflFRtCWtRODUltXPnDVo=)
                          13: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: sxFoSO5566DvevtkqciXR0xAuQamF9AudcC/0/+/BMA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl
                          rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 12:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1a:db:44:f4:ac:7b:79:97:44:92:c6:65:61:51:6e:8a:55:86:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418
        Validity
            Not Before: Jul 28 10:40:08 2026 GMT
            Not After : Jul 29 12:57:08 2026 GMT
        Subject: CN=D796A8232A972A9343AB0DBD52AB7E01252F559B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:bb:0e:98:11:0a:de:b7:df:e8:9e:85:5d:
                    ba:63:27:4b:5f:33:0a:f8:26:b4:86:bf:95:a0:1b:
                    b6:c5:ff:7f:76:06:6b:f3:a4:a1:85:f8:36:ce:1a:
                    d4:6b:0f:09:38:8f:ec:ec:b8:b6:b4:97:1d:c8:48:
                    a5:57:41:a6:0b:7a:4c:58:50:ec:92:17:22:73:26:
                    59:f0:1d:a6:d8:56:24:63:e0:a5:8e:b9:f3:71:d9:
                    b8:8c:7f:90:74:0d:23:34:b1:1a:6e:70:76:c6:a5:
                    5a:89:e3:e6:d8:57:e2:fc:ca:81:e8:61:54:74:6d:
                    e9:a9:2f:ad:02:a8:41:62:f4:3b:07:5d:e6:1d:8a:
                    06:e6:90:52:9f:75:bc:24:7e:f0:27:e4:25:68:8c:
                    bb:d7:47:c0:75:6d:c6:18:15:0f:9a:9b:f2:18:c4:
                    64:75:6c:26:8c:2d:31:1f:87:e3:83:6f:5d:27:34:
                    eb:bf:5b:41:05:a4:6e:b1:55:43:26:de:41:94:0a:
                    39:c4:b8:b7:89:63:ff:d0:3f:3e:17:0f:1e:30:cd:
                    fb:ba:bf:f4:da:c6:9a:7f:a5:ba:bf:63:98:d1:a5:
                    44:f0:db:84:6c:0d:94:04:9a:29:06:b8:da:89:af:
                    ba:52:aa:c9:3b:1d:4d:7e:0d:12:4b:40:a3:a0:52:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:96:A8:23:2A:97:2A:93:43:AB:0D:BD:52:AB:7E:01:25:2F:55:9B
            X509v3 Authority Key Identifier:
                keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:50:6f:be:e5:b4:03:6c:22:10:02:87:87:67:3e:04:98:
         77:6d:d2:89:79:05:b9:c6:78:5a:ed:c3:af:19:ad:c9:52:57:
         55:5c:87:3f:c4:f5:59:04:b4:93:0c:e2:29:5e:27:5e:82:83:
         6e:39:3f:f5:ea:09:46:19:2f:41:56:11:af:92:cb:89:e5:a0:
         d7:eb:46:a7:c2:2b:1b:bf:e4:93:a1:fd:3d:a0:64:e5:e1:66:
         2f:a3:ac:c3:c5:52:61:38:cd:00:dc:47:7e:04:7e:17:ce:3e:
         62:6e:66:6d:ba:cc:d7:3b:5e:f1:f4:e1:34:bd:ff:0d:f8:8b:
         97:66:00:3b:a4:df:2d:fc:24:b5:36:51:01:8d:b1:2d:2b:b8:
         48:ff:49:e0:19:43:aa:7e:38:2a:1e:9c:76:83:85:0e:24:65:
         0b:69:fc:3e:a8:e1:1e:40:dd:3c:76:c2:54:0c:43:f2:b8:0f:
         d2:3b:56:3a:dc:08:b2:32:68:c0:98:d6:c8:28:e8:42:c3:c5:
         ab:4c:9c:73:c4:c7:bf:dc:32:10:e9:71:2f:04:98:81:b1:f6:
         68:95:a3:ed:e8:67:8e:fc:66:14:ea:e6:eb:3c:c6:fe:c3:30:
         48:8d:a6:ca:17:67:f2:3d:46:e5:8b:36:c1:36:06:8a:c0:91:
         bf:89:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:58 2026 by rpki-client