Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
File:                     1B06933632B5A267F98A1716F3CB78EA840D6E65.mft (raw, json)
Hash identifier:          Ljc6ctHujFQaHOlYRy0Ro5KZSyo1pVH8uYHb/0Bu1Sg=
Subject key identifier:   13:BC:AB:D7:44:34:06:19:EF:2F:C9:41:BD:68:E9:7A:35:9C:4B:8D
Authority key identifier: 1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65
Certificate issuer:       /CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
Certificate serial:       20DAD14D98A9FF8F1D8492D9FA1571C0DE5B167B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
Manifest number:          75
Signing time:             Tue 28 Jul 2026 17:53:49 +0000
Manifest this update:     Tue 28 Jul 2026 17:48:49 +0000
Manifest next update:     Wed 29 Jul 2026 20:37:49 +0000
Files and hashes:         1: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: 0VVs/sIJ5MrPj5d4PmHdMp47XW+kiXnvAYhD29LsMwA=)
                          2: 1B06933632B5A267F98A1716F3CB78EA840D6E65.crl (hash: PyU1632ZvRYfnnuqwU5zRuzj/cXMuKoqLipPpT+Uc0Q=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl
                          rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:da:d1:4d:98:a9:ff:8f:1d:84:92:d9:fa:15:71:c0:de:5b:16:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B06933632B5A267F98A1716F3CB78EA840D6E65
        Validity
            Not Before: Jul 28 17:48:49 2026 GMT
            Not After : Jul 29 20:37:49 2026 GMT
        Subject: CN=13BCABD744340619EF2FC941BD68E97A359C4B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:ef:72:2a:c8:bc:28:ed:bd:3e:64:2f:26:
                    26:3f:21:2c:60:41:d9:4c:18:67:82:21:88:6c:de:
                    da:c8:71:43:c1:13:12:1c:0c:ca:ce:64:d8:21:bd:
                    9d:a7:fb:77:7e:85:3f:19:cc:8c:05:ec:76:56:c6:
                    ad:7b:6a:92:82:29:25:97:16:a8:e5:ba:a1:7e:7b:
                    66:24:4f:dc:a8:59:07:c0:8e:94:a4:0b:ab:bb:a3:
                    53:44:6f:1c:e5:f5:30:c2:6e:b2:ee:1b:e2:a7:18:
                    a4:91:74:80:62:59:8e:74:27:46:5a:2c:4f:52:d0:
                    92:00:b5:aa:bd:9b:e1:6a:ea:ea:0a:4e:6f:bc:b1:
                    9b:f0:eb:ab:e0:34:6b:ad:04:6a:ad:a3:ba:45:fc:
                    0c:a9:90:3b:f2:2c:1b:40:41:62:fc:51:33:de:1f:
                    b2:6b:5d:98:23:2e:4d:2e:2b:59:cf:18:5e:9d:ec:
                    53:33:e0:2f:61:d7:83:55:b1:70:81:fe:47:da:d1:
                    6f:ca:47:8a:7d:1b:d6:f7:24:78:51:13:d5:f3:90:
                    a8:cf:7f:1b:c4:99:d2:74:c2:46:c6:6c:3f:e8:23:
                    d2:50:0d:9b:5d:2b:f9:a2:3d:1c:9c:76:c8:94:b1:
                    8c:38:96:65:2b:bb:c3:5b:43:f6:1f:f8:db:b2:0f:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BC:AB:D7:44:34:06:19:EF:2F:C9:41:BD:68:E9:7A:35:9C:4B:8D
            X509v3 Authority Key Identifier:
                keyid:1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f1:5e:f8:f5:fb:ca:a0:00:71:26:34:5b:c2:ff:c8:54:62:
         a3:d2:5d:31:62:5e:da:12:0e:81:2a:8c:1f:d6:a8:cb:c3:b0:
         1c:c0:63:ca:ac:da:e6:c0:8a:5c:c5:28:9a:05:ed:54:bb:c0:
         51:31:fb:ef:aa:21:e6:b4:e0:c8:db:e8:db:50:5c:e8:8d:27:
         a9:14:92:14:6e:4b:13:88:7a:7f:77:28:f4:07:a8:03:f4:6c:
         d2:88:93:eb:0a:dd:01:21:96:bb:97:6e:2c:f1:16:e7:cb:08:
         3b:61:f1:56:c8:3b:c2:12:48:1d:cd:5b:9d:8c:f9:93:0e:70:
         8b:93:f0:df:42:00:c5:e6:f3:6b:ea:4d:52:be:a7:e3:3f:4c:
         46:cc:3f:40:69:69:f5:8f:c0:ee:e9:8d:11:32:41:01:73:b5:
         37:61:3e:42:e4:85:94:cb:f6:dc:bf:d0:4c:c7:e5:f3:69:e7:
         a5:62:09:94:be:48:49:d2:55:66:a3:8d:b2:0d:1a:9c:61:2a:
         57:a6:cf:9b:d8:d9:3f:23:01:2c:c5:80:da:7c:9e:28:6b:14:
         42:70:36:e3:1e:7f:11:df:11:40:eb:96:ad:39:ce:05:17:fa:
         18:a5:aa:60:f8:f4:93:d6:28:ee:e5:bf:95:73:ea:e4:25:b2:
         9a:94:c9:cc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUINrRTZip/48dhJLZ+hVxwN5bFnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIwNjkzMzYzMkI1QTI2N0Y5OEExNzE2RjNDQjc4RUE4
NDBENkU2NTAeFw0yNjA3MjgxNzQ4NDlaFw0yNjA3MjkyMDM3NDlaMDMxMTAvBgNV
BAMTKDEzQkNBQkQ3NDQzNDA2MTlFRjJGQzk0MUJENjhFOTdBMzU5QzRCOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyve9yKsi8KO29PmQvJiY/ISxg
QdlMGGeCIYhs3trIcUPBExIcDMrOZNghvZ2n+3d+hT8ZzIwF7HZWxq17apKCKSWX
FqjluqF+e2YkT9yoWQfAjpSkC6u7o1NEbxzl9TDCbrLuG+KnGKSRdIBiWY50J0Za
LE9S0JIAtaq9m+Fq6uoKTm+8sZvw66vgNGutBGqto7pF/AypkDvyLBtAQWL8UTPe
H7JrXZgjLk0uK1nPGF6d7FMz4C9h14NVsXCB/kfa0W/KR4p9G9b3JHhRE9XzkKjP
fxvEmdJ0wkbGbD/oI9JQDZtdK/miPRycdsiUsYw4lmUru8NbQ/Yf+NuyD6VXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUE7yr10Q0BhnvL8lBvWjpejWcS40wHwYDVR0j
BBgwFoAUGwaTNjK1omf5ihcW88t46oQNbmUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWNlNmFjMDEtOGVhYy00NmM1LTk0NjktMzVlZmEzNjA5OWZkLzAvMUIwNjkzMzYz
MkI1QTI2N0Y5OEExNzE2RjNDQjc4RUE4NDBENkU2NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xQjA2OTMzNjMyQjVBMjY3Rjk4QTE3MTZGM0NCNzhFQTg0MEQ2
RTY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNlNmFjMDEtOGVhYy00NmM1LTk0
NjktMzVlZmEzNjA5OWZkLzAvMUIwNjkzMzYzMkI1QTI2N0Y5OEExNzE2RjNDQjc4
RUE4NDBENkU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABTxXvj1+8qgAHEmNFvC/8hUYqPSXTFiXtoS
DoEqjB/WqMvDsBzAY8qs2ubAilzFKJoF7VS7wFEx+++qIea04Mjb6NtQXOiNJ6kU
khRuSxOIen93KPQHqAP0bNKIk+sK3QEhlruXbizxFufLCDth8VbIO8ISSB3NW52M
+ZMOcIuT8N9CAMXm82vqTVK+p+M/TEbMP0BpafWPwO7pjREyQQFztTdhPkLkhZTL
9ty/0EzH5fNp56ViCZS+SEnSVWajjbINGpxhKlemz5vY2T8jASzFgNp8nihrFEJw
NuMefxHfEUDrlq05zgUX+hilqmD49JPWKO7lv5Vz6uQlspqUycw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:17 2026 by rpki-client