Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft
File:                     A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft (raw, json)
Hash identifier:          5p+KerlFxzesynLl8upo1OsULi7oqxTu6xEpd8w3eBY=
Subject key identifier:   0E:D9:2D:C5:50:31:3F:E0:86:27:F5:F3:CA:C1:C7:BA:31:36:68:8D
Authority key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D
Certificate issuer:       /CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D
Certificate serial:       63377E90ED4BAC05519D55BDC15B3A430896AE63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft
Manifest number:          74
Signing time:             Tue 28 Jul 2026 17:43:35 +0000
Manifest this update:     Tue 28 Jul 2026 17:38:35 +0000
Manifest next update:     Wed 29 Jul 2026 20:33:35 +0000
Files and hashes:         1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 0G4YBfT8XRPQC+cAerXBYMMW9I/KjiVejVSF2aUT8Xk=)
                          2: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl (hash: oGnEXa0H1MWTl8M0YfUwdmINnKXeeKOZgR0qMuUW/I4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl
                          rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:37:7e:90:ed:4b:ac:05:51:9d:55:bd:c1:5b:3a:43:08:96:ae:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D
        Validity
            Not Before: Jul 28 17:38:35 2026 GMT
            Not After : Jul 29 20:33:35 2026 GMT
        Subject: CN=0ED92DC550313FE08627F5F3CAC1C7BA3136688D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:65:dc:c9:5a:ec:30:e9:95:b6:8d:43:7a:f3:
                    c2:4a:98:c2:31:be:aa:59:92:c2:73:00:b4:02:d7:
                    48:e9:0e:04:8e:84:25:c2:38:25:51:84:6e:e6:74:
                    56:c6:d8:9a:89:a2:87:c1:11:98:8b:b0:93:c3:50:
                    3c:17:22:2d:1c:8d:6f:82:ba:a5:5a:25:18:2c:1b:
                    7c:15:e3:1d:b3:af:36:7a:07:2f:5c:07:e9:46:c4:
                    9b:f2:66:0e:b5:46:7c:e0:77:4f:36:f6:7b:2b:78:
                    08:b6:86:76:d6:95:c5:b8:8e:c2:f4:33:0e:c0:ec:
                    b7:31:ba:2e:3f:79:8c:01:72:de:9d:99:a9:b9:f8:
                    ad:56:b7:35:bf:4f:63:c5:f0:39:fc:49:41:a2:0a:
                    3d:e5:4c:77:ba:fa:ee:af:8b:cc:98:a5:c1:72:66:
                    28:24:84:c8:69:73:a0:1a:63:29:a4:75:71:8b:1a:
                    5a:39:fb:96:5f:10:c2:99:82:c0:76:e0:c1:46:97:
                    a8:a2:d4:73:f1:90:12:44:03:51:92:64:a6:42:4f:
                    e1:4b:8a:64:cf:9b:3d:ed:18:0a:1c:34:6e:9d:00:
                    96:cd:cd:98:ef:54:a6:61:a4:cd:33:04:fe:cf:a7:
                    5a:92:07:64:4b:d9:af:e8:af:02:e7:bc:18:ca:4a:
                    dd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D9:2D:C5:50:31:3F:E0:86:27:F5:F3:CA:C1:C7:BA:31:36:68:8D
            X509v3 Authority Key Identifier:
                keyid:A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e9:b9:dc:08:28:af:b3:e2:6c:c3:a2:a3:af:c9:72:19:63:
         2d:64:61:76:ce:59:73:57:bb:5c:02:92:f4:0d:df:ff:d9:05:
         dc:85:75:4e:e7:86:7f:7d:38:79:b2:ca:b5:1d:0d:8c:30:b0:
         c4:db:e3:c9:06:bc:14:20:a9:cb:46:0a:0c:07:f1:ad:48:1e:
         94:96:8c:39:0b:0a:1f:1a:f3:c6:a4:38:33:5c:5b:b7:39:ae:
         ea:8b:43:2f:a6:81:6f:ba:ff:57:5e:89:f4:ec:b5:d6:b3:23:
         f5:27:fe:9e:68:41:57:e7:a6:17:3b:2a:56:c2:ed:4a:6b:d5:
         93:4e:ba:8e:fc:e2:72:4f:95:5a:79:2b:ed:3e:df:e8:8c:65:
         63:d4:b3:15:b3:46:e5:bf:27:89:56:d2:a8:57:cd:2f:e3:26:
         f0:24:31:04:22:cf:eb:c3:bd:0b:17:b0:f0:62:5f:7b:8d:e2:
         ab:d6:51:3a:03:cc:58:a2:ce:cb:d9:4c:4a:08:37:2d:a4:0d:
         7a:20:03:c8:bf:55:6a:c4:ca:83:88:52:db:29:de:bc:a7:3f:
         6f:cf:47:31:ed:e7:14:8b:c1:8e:b8:6e:bb:c8:f5:a0:55:b1:
         e6:7e:95:db:dc:db:08:9e:c7:4b:21:f4:25:b7:cc:c7:d9:ff:
         22:dc:98:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYzd+kO1LrAVRnVW9wVs6QwiWrmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZFQzRC
RkQwMkY0RDAeFw0yNjA3MjgxNzM4MzVaFw0yNjA3MjkyMDMzMzVaMDMxMTAvBgNV
BAMTKDBFRDkyREM1NTAzMTNGRTA4NjI3RjVGM0NBQzFDN0JBMzEzNjY4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUZdzJWuww6ZW2jUN688JKmMIx
vqpZksJzALQC10jpDgSOhCXCOCVRhG7mdFbG2JqJoofBEZiLsJPDUDwXIi0cjW+C
uqVaJRgsG3wV4x2zrzZ6By9cB+lGxJvyZg61Rnzgd0829nsreAi2hnbWlcW4jsL0
Mw7A7Lcxui4/eYwBct6dmam5+K1WtzW/T2PF8Dn8SUGiCj3lTHe6+u6vi8yYpcFy
ZigkhMhpc6AaYymkdXGLGlo5+5ZfEMKZgsB24MFGl6ii1HPxkBJEA1GSZKZCT+FL
imTPmz3tGAocNG6dAJbNzZjvVKZhpM0zBP7Pp1qSB2RL2a/orwLnvBjKSt13AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDtktxVAxP+CGJ/XzysHHujE2aI0wHwYDVR0j
BBgwFoAUo0Ecd7XlTyOTetCQgy7+xL/QL00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjRjNmY3NzAtNjg2YS00NWVmLThkZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdC
NUU1NEYyMzkzN0FEMDkwODMyRUZFQzRCRkQwMkY0RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMzQxMUM3N0I1RTU0RjIzOTM3QUQwOTA4MzJFRkVDNEJGRDAy
RjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk
ZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZF
QzRCRkQwMkY0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGvpudwIKK+z4mzDoqOvyXIZYy1kYXbOWXNX
u1wCkvQN3//ZBdyFdU7nhn99OHmyyrUdDYwwsMTb48kGvBQgqctGCgwH8a1IHpSW
jDkLCh8a88akODNcW7c5ruqLQy+mgW+6/1deifTstdazI/Un/p5oQVfnphc7KlbC
7Upr1ZNOuo784nJPlVp5K+0+3+iMZWPUsxWzRuW/J4lW0qhXzS/jJvAkMQQiz+vD
vQsXsPBiX3uN4qvWUToDzFiizsvZTEoINy2kDXogA8i/VWrEyoOIUtsp3rynP2/P
RzHt5xSLwY64brvI9aBVseZ+ldvc2wiex0sh9CW3zMfZ/yLcmD4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:10:48 2026 by rpki-client