Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
File:                     5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft (raw, json)
Hash identifier:          CbiMyzwmJz2T5uSLGbkTNM2qqP20SR6wf0g3GMwmpC8=
Subject key identifier:   0C:DE:7C:61:5E:CB:E9:B5:16:7A:A7:FB:BE:6F:39:87:2C:E5:1F:85
Authority key identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63
Certificate issuer:       /CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
Certificate serial:       27B30AD5255EF4DED0A1A856F529A36251A94107
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
Manifest number:          75
Signing time:             Wed 29 Jul 2026 01:17:43 +0000
Manifest this update:     Wed 29 Jul 2026 01:12:43 +0000
Manifest next update:     Thu 30 Jul 2026 02:04:43 +0000
Files and hashes:         1: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: KDqog2rfiubYaTHJcE3FAsBqz6lLLEZTtq7kD9KAXRw=)
                          2: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: M9GmOl7DSf3JgqEI4OyXiGmMeRs5OMlGvZJmwiVp3yA=)
                          3: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: FSc1aeAh2Rt+5JPB4WOEH2O9AvnjApvUD4AoU6qwI3k=)
                          4: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o74QhQczERNJ9zjSUZ37A/5NOrH2tv7P/NXYzzpKIyQ=)
                          5: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: YZJGRKgbn++QjdW/BYBy5zi4Iey6oxaZnIjLCUOoVQY=)
                          6: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: pW9Xq+VRLYCTvIh/TcwaaDaFgakUuCARpznvzAbxTXo=)
                          7: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: WcflqBWiLgPAZ9Y0v7/46V6GV1t5xWnWDOoYXcwaOd8=)
                          8: 5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl (hash: zhUUq+qk8R9zkn0s5dIcPda481jydp2zJLu7UD0gZhg=)
                          9: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: BrA2AYWTFSxj+vqtiSjtdleZMLMTR+csvmqEcgKBW48=)
                          10: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: xLjlTIflH6sc0X3Sbj2zzWpljnqqaMPM3eUOug3XrMk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl
                          rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b3:0a:d5:25:5e:f4:de:d0:a1:a8:56:f5:29:a3:62:51:a9:41:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
        Validity
            Not Before: Jul 29 01:12:43 2026 GMT
            Not After : Jul 30 02:04:43 2026 GMT
        Subject: CN=0CDE7C615ECBE9B5167AA7FBBE6F39872CE51F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:81:9b:7b:7a:e6:63:3f:ab:3a:c0:e0:65:
                    5d:2a:82:10:cf:f3:2b:29:e7:90:35:78:30:41:1a:
                    12:5b:f5:80:27:8b:26:9c:c2:21:90:22:5b:6f:f0:
                    31:98:24:35:a7:09:c8:e8:4e:8a:5b:10:80:e5:82:
                    a4:0a:a1:18:71:68:0d:4c:12:c1:08:b0:ff:fc:2a:
                    08:4c:60:5d:80:94:2a:0e:c4:8e:7e:7f:dd:b6:1b:
                    57:8b:f6:45:2e:ec:1d:fd:37:49:eb:8d:49:c6:ae:
                    f6:f0:e9:8c:26:e7:35:4b:d9:2c:9f:17:47:87:58:
                    3b:51:68:35:1a:0d:68:51:cf:d2:2b:07:ea:a9:3d:
                    c2:00:d8:26:4d:e9:34:02:3d:4f:88:87:30:13:50:
                    7c:9c:dd:04:78:ba:2e:da:ff:3e:61:52:17:1c:95:
                    ea:d2:a7:3d:5f:ff:85:73:36:4d:e7:e8:a7:ab:e5:
                    31:ba:f0:c7:48:75:73:79:3a:39:3a:56:7c:af:0b:
                    db:28:bd:b7:f7:ed:b5:91:83:5f:9c:e6:a3:1e:08:
                    c6:11:67:8f:96:18:32:5d:73:a7:ae:27:50:4b:b0:
                    78:c9:85:48:d8:48:1d:7d:c0:4b:68:a5:8b:3d:ae:
                    dd:70:48:45:7f:8a:a3:ec:5b:13:11:bc:85:9a:4d:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DE:7C:61:5E:CB:E9:B5:16:7A:A7:FB:BE:6F:39:87:2C:E5:1F:85
            X509v3 Authority Key Identifier:
                keyid:5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:99:8a:3e:f1:86:c4:a2:40:a2:4c:d9:12:52:78:59:65:
         25:f2:6a:47:12:98:2a:5f:2d:54:cb:13:78:cd:19:88:ba:e9:
         fd:cb:bb:fc:f8:60:1d:00:09:e5:f4:f7:a4:f8:bf:eb:ce:bd:
         6b:cd:2c:f0:ac:06:e7:cc:5b:c3:34:e4:9c:7e:b3:64:a2:8e:
         63:e2:4b:c3:e1:0c:14:de:80:e5:09:a5:25:e9:0f:2b:9f:50:
         c1:b9:b1:05:bf:99:d4:c3:fd:2b:d8:bc:8a:43:eb:71:18:ff:
         04:f7:70:f2:09:3a:3a:de:e7:1d:b8:0a:8f:4d:b0:9f:0e:7b:
         b2:64:1b:a4:da:ba:92:f1:79:16:5c:c5:1d:8a:b5:d9:e0:4b:
         84:71:f2:45:5f:fa:75:0f:80:6f:63:b4:a3:ec:79:50:63:44:
         2a:5c:bc:75:10:7e:f3:eb:c7:81:a4:15:af:63:d2:ed:aa:9a:
         44:56:c9:3c:f5:91:f6:d9:a7:2e:a6:75:70:76:84:55:27:a5:
         87:48:c1:56:6f:e1:a9:16:12:de:5c:a1:a8:03:e4:4e:54:19:
         65:3c:b7:96:b7:04:f8:0a:c6:33:f2:5b:d2:be:1e:ea:32:41:
         87:c1:2b:fa:17:49:df:ed:d5:51:94:48:95:bd:b7:25:e7:dd:
         ce:11:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:15:59 2026 by rpki-client