Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
File:                     AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json)
Hash identifier:          uqcr1pkV9sfZNK0w+1mu2eLwCZ6Phce4GTCb030peY0=
Subject key identifier:   4E:7C:44:73:15:DF:7C:CF:69:B3:9C:EC:E8:E6:1A:87:B1:44:0B:53
Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
Certificate issuer:       /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Certificate serial:       3E223017C55E0D61826B175FD40F4B3BE0767AD0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
Manifest number:          76
Signing time:             Tue 28 Jul 2026 11:25:57 +0000
Manifest this update:     Tue 28 Jul 2026 11:20:57 +0000
Manifest next update:     Wed 29 Jul 2026 12:05:57 +0000
Files and hashes:         1: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=)
                          2: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: YxcZcVc912Ym6k6XJMkO1FK0y19Gxe3T8/rX+SzxnWk=)
                          3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
                          rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 12:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:22:30:17:c5:5e:0d:61:82:6b:17:5f:d4:0f:4b:3b:e0:76:7a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
        Validity
            Not Before: Jul 28 11:20:57 2026 GMT
            Not After : Jul 29 12:05:57 2026 GMT
        Subject: CN=4E7C447315DF7CCF69B39CECE8E61A87B1440B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:58:73:42:e7:ef:62:e3:b4:71:28:26:1d:01:
                    fe:6c:a8:a6:23:28:db:06:50:da:53:9e:5c:6f:f8:
                    4a:2e:95:f2:97:7b:45:97:23:2c:86:f8:83:08:3c:
                    70:28:b1:83:5a:a9:63:5a:6f:ef:b4:54:c7:c1:67:
                    cb:bf:5a:49:a4:10:c9:e2:ae:4f:39:f6:82:e3:2e:
                    9d:c7:2c:77:60:3c:38:f0:b3:e4:40:e7:0a:93:84:
                    46:11:5c:09:16:56:02:be:09:f4:1c:98:a7:08:2a:
                    c6:89:10:df:bb:8f:a8:80:98:b2:36:13:a5:7f:db:
                    0e:a2:3c:0e:22:c2:4f:e8:30:74:ee:9a:38:e3:29:
                    93:0f:e2:3f:aa:f1:a7:05:07:81:64:73:1d:47:3d:
                    2d:af:36:fa:1c:7f:16:46:78:c1:34:4f:64:c0:94:
                    8a:a0:96:cf:dc:03:2d:ff:3f:58:83:db:d8:e2:37:
                    91:08:f2:38:48:2f:92:7d:b0:cc:75:9b:97:f9:f8:
                    b1:09:c1:44:77:2d:6a:e4:98:de:21:bf:da:4a:00:
                    c7:5a:2c:97:b6:f2:4a:ee:60:56:f5:cb:8b:84:2f:
                    69:81:91:df:d6:71:23:79:ae:29:21:e0:2e:43:ce:
                    6d:5a:73:74:f1:13:fe:83:f6:0d:77:ee:66:fa:b8:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7C:44:73:15:DF:7C:CF:69:B3:9C:EC:E8:E6:1A:87:B1:44:0B:53
            X509v3 Authority Key Identifier:
                keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:88:d0:35:13:0a:08:f6:66:f9:a9:82:ff:19:55:28:bb:e6:
         8a:1a:c3:be:cb:f9:98:b5:35:6e:b7:b5:13:96:f4:5a:fa:9c:
         b8:78:f9:f0:69:ee:af:3b:4b:b2:57:a7:bf:c0:ed:a1:d7:4a:
         4c:ed:fb:fd:51:f0:ca:c0:43:e8:8b:c9:4c:04:1d:d1:94:45:
         84:ff:d0:2f:73:a1:86:b2:d6:a9:6a:0d:85:d5:26:8d:8b:72:
         55:c1:b7:49:49:63:dd:75:3c:2a:a0:6d:ae:d7:cc:18:e2:6b:
         e0:00:7e:6f:31:ce:08:58:40:a4:88:78:0a:04:64:df:fb:b5:
         9c:c5:4a:1c:81:2d:86:aa:a0:d9:0b:bf:d7:ec:cd:ff:c7:cc:
         fc:c9:62:ae:ab:55:08:1a:ad:9a:ed:5f:c8:b7:49:24:2f:e4:
         2c:12:46:2e:79:62:fb:a1:f7:09:e8:0a:ff:06:63:01:d3:62:
         c4:e2:6a:6d:a0:74:9d:69:37:5c:b1:c1:d9:0a:b5:53:eb:37:
         79:40:e6:5f:cf:d2:94:d5:65:e0:83:d1:83:11:09:1d:78:a9:
         19:e4:d0:21:9f:49:e0:ee:45:1f:92:7d:b3:d6:22:ce:4d:e7:
         ed:2d:b7:5c:aa:0f:03:99:a2:28:1c:8a:22:bc:d6:2a:ae:e4:
         e1:f4:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:19 2026 by rpki-client