Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
File:                     65DBBEC678177B7159AD901A4023BA57AA4096DC.mft (raw, json)
Hash identifier:          d/PBYtRHrsOioNwQQB7hw/ayY9+mpZ4TsSm34jeQsoM=
Subject key identifier:   0E:9C:62:B6:FF:B5:83:3A:BE:EA:9C:2F:3E:DA:C8:A2:43:41:C8:EA
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Certificate issuer:       /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial:       35C3F73697A7BF907D7C90C9A4A83CACBD54DF29
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
Manifest number:          74
Signing time:             Tue 28 Jul 2026 13:53:32 +0000
Manifest this update:     Tue 28 Jul 2026 13:48:32 +0000
Manifest next update:     Wed 29 Jul 2026 17:26:32 +0000
Files and hashes:         1: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: tvyLyjFncuafaNsnPRjTIe3OmM+u2yeMnvd+JSKf+OI=)
                          2: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: ryDBz/OArSkajCTSmWMTBuq6yxPVuRRR4FSfEXo1xKg=)
                          3: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: uoDjto4Bon7pce7gaQoVwabXxUeeyeeN7W67OfZu0pY=)
                          4: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: uq0XahCuPwPF6uONqKm2eLZO4OTWzUiViXqNuFHYT+4=)
                          5: 65DBBEC678177B7159AD901A4023BA57AA4096DC.crl (hash: 7EPH1WiGVTzhL8lON9FHojJDMLTrfkDmMc38sU7+i4c=)
                          6: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: HYOwWEsyIVZXnK4eLcj02fPXUV54e21APLG1OWqeK6Y=)
                          7: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: aAelOJ+yvf4qi4zR02tVF6ytUGxSBShT/+GgUk24frk=)
                          8: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: RES+IzVfinBoTB3WoZkBb0K0PMLwmwjFh6203Hnv7Fk=)
                          9: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: 2tjc/8qrga6+39EQjimW3zf16UfFL3aN5h4lRF828pQ=)
                          10: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: ahy9pgYJ/JRzmM8+Ec6KtXzoFXDTJf+AENe9YjQMlak=)
                          11: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: Os0dOUCAo82Ro4JJGXlWsdYmgpvswgP/lGrJ/rFU8kQ=)
                          12: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: AMuay0c5oSMPzmQyIJxb21rH75gJq04Z09sxFsI2gX8=)
                          13: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: XMUkhya/Im5TwnX+KHLLztrNmQIz+mhwII8y24T5T0Y=)
                          14: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: S4EP1lFYVTju24ot1ck+7kHJylZlYJvHzPIKURDcI5k=)
                          15: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: WJ8WqvkTLbC87sRVwP0S84GR9M75HVASRazE6C4BxN8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
                          rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c3:f7:36:97:a7:bf:90:7d:7c:90:c9:a4:a8:3c:ac:bd:54:df:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
        Validity
            Not Before: Jul 28 13:48:32 2026 GMT
            Not After : Jul 29 17:26:32 2026 GMT
        Subject: CN=0E9C62B6FFB5833ABEEA9C2F3EDAC8A24341C8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:2f:0c:1e:3f:a1:99:13:41:16:28:39:65:
                    ca:ce:83:9c:1e:9d:3b:98:40:58:9d:ab:9a:72:df:
                    24:8e:80:8a:b9:3b:44:2c:4e:c3:65:50:c8:f4:22:
                    10:2f:77:3a:18:a2:af:10:e3:eb:a2:bd:e0:30:57:
                    26:ac:6f:44:9c:cb:b5:8b:d7:67:ac:a4:54:75:bf:
                    25:b1:8a:73:cf:fc:73:f9:35:aa:0d:35:59:3c:41:
                    45:4a:05:28:b7:5a:b7:28:10:2c:fc:0d:4c:79:cd:
                    9e:17:cd:ea:86:48:e7:37:61:28:61:37:df:e9:25:
                    19:a9:c4:3b:7f:bd:78:d6:99:a1:89:ac:39:3a:72:
                    8c:b9:2c:d4:2f:7f:6e:4a:39:80:e2:d2:b9:18:6e:
                    f1:d0:cd:7c:83:58:6d:43:08:02:31:bd:b4:56:e7:
                    aa:9a:1e:fd:70:5f:b3:e6:fa:b2:a2:82:70:fd:d7:
                    0f:d0:63:69:a0:89:77:b3:22:c5:ee:20:39:e4:4a:
                    db:14:4d:82:43:56:ce:d8:98:f1:2e:20:ed:b2:55:
                    96:86:90:12:62:2f:7f:0a:9f:14:d5:0e:5c:2f:56:
                    d3:29:ae:7a:97:cb:fe:73:fe:e7:c3:1e:ca:57:ce:
                    1a:81:04:f0:62:43:f9:7a:28:27:07:63:f9:e9:b2:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:62:B6:FF:B5:83:3A:BE:EA:9C:2F:3E:DA:C8:A2:43:41:C8:EA
            X509v3 Authority Key Identifier:
                keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f6:e4:29:46:a1:7f:4e:ae:3a:ce:5d:42:c4:4b:e4:91:56:
         3d:f1:df:48:36:6a:31:97:10:1c:82:ca:97:25:6d:28:65:0c:
         61:1c:db:07:a4:68:c3:ae:50:ef:f1:ae:f4:ff:94:ef:c7:85:
         2f:8f:54:b9:d5:57:f4:dc:2d:ae:45:77:5c:eb:94:31:78:34:
         ac:76:9d:c0:69:75:46:61:a6:8f:40:f6:85:f0:26:4d:a7:24:
         ae:50:42:9f:73:5f:2e:82:0b:8a:3e:51:4c:ec:12:7a:fd:21:
         73:ed:60:5e:c8:fd:c1:ef:1d:5c:15:78:71:44:01:33:2a:37:
         69:e8:c2:c7:51:12:bc:a2:6a:94:05:3e:ce:61:a9:7b:9a:6b:
         6f:f6:67:d0:2a:dc:5c:32:ae:8e:1f:8d:1e:44:d1:ce:1b:4f:
         72:ed:98:f2:67:71:58:b5:69:0c:da:a8:33:e3:68:f9:2c:23:
         db:bd:80:7d:f0:a5:f0:3f:fc:f9:67:c1:32:3e:b1:f9:c8:23:
         fa:ec:9d:d1:f6:5d:2c:82:37:24:d6:39:83:e6:a4:10:4f:07:
         53:9f:9b:35:21:33:e0:f7:c1:66:a6:87:23:8d:92:75:40:d1:
         21:f7:99:4b:cb:94:78:ba:92:44:4f:98:17:c1:36:eb:b4:97:
         51:15:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:31 2026 by rpki-client