Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft
File:                     68ECB00B63436E13214F12C7732F716D44E5E72D.mft (raw, json)
Hash identifier:          UHJPugdhRBQ48ITB+2YisDelv3Dr/vA6ViQPinJKWOc=
Subject key identifier:   60:26:76:D1:A7:82:B0:68:5D:C4:62:40:F9:67:3E:47:D1:56:9D:3B
Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D
Certificate issuer:       /CN=68ECB00B63436E13214F12C7732F716D44E5E72D
Certificate serial:       6A6FF091C3C691569B5EEB908F4D308073E36D11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft
Manifest number:          75
Signing time:             Tue 28 Jul 2026 15:51:13 +0000
Manifest this update:     Tue 28 Jul 2026 15:46:13 +0000
Manifest next update:     Wed 29 Jul 2026 15:57:13 +0000
Files and hashes:         1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=)
                          2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: rPmnLfRHW0MsBvRLZTu2XZb2TPdVWPSkbs3wCW3iaxE=)
                          3: 68ECB00B63436E13214F12C7732F716D44E5E72D.crl (hash: 8yHTUzRy7D+2pbqHTegOmLY48/ff82r/16cs7X6AJ/8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl
                          rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6f:f0:91:c3:c6:91:56:9b:5e:eb:90:8f:4d:30:80:73:e3:6d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D
        Validity
            Not Before: Jul 28 15:46:13 2026 GMT
            Not After : Jul 29 15:57:13 2026 GMT
        Subject: CN=602676D1A782B0685DC46240F9673E47D1569D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:17:9c:96:39:53:a1:c7:d5:96:ba:af:f8:
                    9a:42:21:95:a2:8a:e4:c1:c7:94:d2:d8:ce:b1:71:
                    7b:3d:ab:bb:ec:43:b2:27:2e:35:83:59:b2:0b:5d:
                    4c:34:b7:a3:d7:44:c0:04:ae:8b:4a:49:1e:9d:db:
                    aa:f6:7f:89:04:15:d8:76:22:e7:88:c6:c1:f6:07:
                    8c:88:b1:fa:0a:bb:e5:8c:23:e5:ce:3a:8d:0f:f6:
                    32:87:fa:97:33:f8:28:1c:8a:52:51:25:69:b0:08:
                    ea:de:2b:cd:9c:97:7f:a7:90:8b:83:21:bc:19:31:
                    3e:b9:f2:a3:05:20:9e:ee:df:42:92:26:01:9f:e0:
                    ba:0c:29:c0:bc:9b:ea:40:45:bd:59:5b:43:19:e7:
                    be:79:fa:43:0d:64:b3:e6:40:eb:5e:ed:60:1f:e5:
                    5e:dc:ab:98:86:35:c5:74:45:37:e1:b8:bd:7a:81:
                    fb:57:6d:84:41:9a:3d:ea:8e:65:bc:5d:08:a5:da:
                    2f:0b:27:20:89:3a:be:87:71:fd:6e:4e:b6:2f:f4:
                    d4:2a:35:6a:f1:25:12:ad:11:d9:c8:c9:b3:1c:78:
                    03:7a:31:0c:c7:66:7d:c5:7e:73:6f:00:38:1c:04:
                    ed:9c:06:8e:c0:01:57:6e:74:bd:f9:67:eb:a1:23:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:26:76:D1:A7:82:B0:68:5D:C4:62:40:F9:67:3E:47:D1:56:9D:3B
            X509v3 Authority Key Identifier:
                keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:4a:80:16:be:4e:08:bd:86:e6:41:f5:2b:8c:45:26:7c:
         ab:ce:7e:16:70:0b:d3:2d:02:da:3c:ee:98:b7:03:d5:2b:f7:
         a3:8c:e7:94:9f:1e:3e:b2:62:92:15:4a:f7:2c:d4:17:b7:bc:
         ae:4e:e6:f4:21:eb:ea:5a:a2:f6:c0:bc:a2:ce:30:e6:93:f6:
         41:bb:dc:bc:65:b4:e5:9d:c7:52:30:61:2e:16:3c:72:3c:89:
         30:f9:05:27:71:5f:ea:47:b2:b9:b4:e2:2d:61:54:d0:2a:2f:
         34:7f:b0:6e:eb:4e:72:5d:f0:0c:28:86:a5:96:86:05:69:03:
         cf:ee:17:77:aa:8e:69:0d:be:50:64:15:92:98:49:4a:b6:af:
         52:2f:cc:96:be:b3:32:34:1b:c3:b1:fc:28:98:38:2a:e8:f5:
         7a:e1:f1:58:c6:76:e3:64:df:0b:87:12:c6:8c:4a:c2:4b:c5:
         24:91:92:89:70:1f:23:21:d6:71:b5:97:dd:93:81:75:51:57:
         57:03:27:f7:25:8f:13:ac:1e:b8:26:57:68:3a:47:ff:d0:6d:
         d3:d1:78:fe:43:0d:19:06:16:39:14:c2:cc:22:9c:e8:86:35:
         61:d8:10:ac:7d:89:9f:39:6b:0f:2c:46:b6:98:c6:ab:e0:d1:
         85:35:df:6e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUam/wkcPGkVabXuuQj00wgHPjbREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0
NEU1RTcyRDAeFw0yNjA3MjgxNTQ2MTNaFw0yNjA3MjkxNTU3MTNaMDMxMTAvBgNV
BAMTKDYwMjY3NkQxQTc4MkIwNjg1REM0NjI0MEY5NjczRTQ3RDE1NjlEM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJBecljlTocfVlrqv+JpCIZWi
iuTBx5TS2M6xcXs9q7vsQ7InLjWDWbILXUw0t6PXRMAErotKSR6d26r2f4kEFdh2
IueIxsH2B4yIsfoKu+WMI+XOOo0P9jKH+pcz+CgcilJRJWmwCOreK82cl3+nkIuD
IbwZMT658qMFIJ7u30KSJgGf4LoMKcC8m+pARb1ZW0MZ5755+kMNZLPmQOte7WAf
5V7cq5iGNcV0RTfhuL16gftXbYRBmj3qjmW8XQil2i8LJyCJOr6Hcf1uTrYv9NQq
NWrxJRKtEdnIybMceAN6MQzHZn3FfnNvADgcBO2cBo7AAVdudL35Z+uhI2zlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYCZ20aeCsGhdxGJA+Wc+R9FWnTswHwYDVR0j
BBgwFoAUaOywC2NDbhMhTxLHcy9xbUTl5y0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTM5YzU0ODQtMmUzNy00OGY5LThlYmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2
MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0NEU1RTcyRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OEVDQjAwQjYzNDM2RTEzMjE0RjEyQzc3MzJGNzE2RDQ0RTVF
NzJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl
YmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcx
NkQ0NEU1RTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIn3SoAWvk4IvYbmQfUrjEUmfKvOfhZwC9Mt
Ato87pi3A9Ur96OM55SfHj6yYpIVSvcs1Be3vK5O5vQh6+paovbAvKLOMOaT9kG7
3LxltOWdx1IwYS4WPHI8iTD5BSdxX+pHsrm04i1hVNAqLzR/sG7rTnJd8AwohqWW
hgVpA8/uF3eqjmkNvlBkFZKYSUq2r1IvzJa+szI0G8Ox/CiYOCro9Xrh8VjGduNk
3wuHEsaMSsJLxSSRkolwHyMh1nG1l92TgXVRV1cDJ/cljxOsHrgmV2g6R//QbdPR
eP5DDRkGFjkUwswinOiGNWHYEKx9iZ85aw8sRraYxqvg0YU1324=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:05:18 2026 by rpki-client