Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
File:                     020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft (raw, json)
Hash identifier:          qkWSd+dSlPt9LPIp5WQb/RVr+gxtmrjHOT4ICKBu52E=
Subject key identifier:   A4:FD:07:4F:E1:E2:D9:61:83:7D:91:92:3E:9D:1C:A4:62:66:A3:E3
Authority key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E
Certificate issuer:       /CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E
Certificate serial:       6236E9CBDC4222AF99F10E73577059F5EF45BBF5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
Manifest number:          76
Signing time:             Tue 28 Jul 2026 11:41:15 +0000
Manifest this update:     Tue 28 Jul 2026 11:36:15 +0000
Manifest next update:     Wed 29 Jul 2026 15:39:15 +0000
Files and hashes:         1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: ZP3rmLF9cy6fjQhv3gmX6ZweiIwsNbdnkePWQCdw+7I=)
                          2: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl (hash: BDg9Y5hbBXKEN66tfRvtUzto0dbcAljN8i1g3JFAMGM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl
                          rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 09:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:36:e9:cb:dc:42:22:af:99:f1:0e:73:57:70:59:f5:ef:45:bb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E
        Validity
            Not Before: Jul 28 11:36:15 2026 GMT
            Not After : Jul 29 15:39:15 2026 GMT
        Subject: CN=A4FD074FE1E2D961837D91923E9D1CA46266A3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:cd:96:83:9c:7e:57:63:8e:95:ba:1c:e4:
                    90:e4:6c:50:b7:5f:00:0b:24:dc:2e:b7:24:9c:b8:
                    5e:f0:70:7c:2d:96:b7:85:e2:d8:2f:db:88:5c:5b:
                    62:48:75:a3:b8:fc:9a:25:47:6d:14:d9:68:e4:b4:
                    92:b9:b0:a3:bf:91:f6:01:68:45:e6:e9:59:38:3b:
                    f6:73:02:69:42:be:79:9f:ec:c3:ba:2d:6a:9d:01:
                    ed:0b:c8:fd:9c:d4:4c:dc:9f:d5:24:cc:b4:c6:40:
                    68:dd:9d:0c:e9:8a:24:96:b1:9b:1d:66:7c:68:13:
                    c2:f1:c3:48:92:ab:19:92:f4:72:a2:a1:c3:b3:59:
                    81:c9:af:c0:25:82:92:01:22:5b:01:6b:ce:6d:b2:
                    c1:63:ed:ed:e8:e3:21:85:3e:46:50:44:55:03:b1:
                    3e:c9:d6:a8:28:85:31:78:10:ee:4e:cf:8f:ee:e9:
                    00:61:d7:36:1c:c6:75:af:cd:22:18:8c:6f:dd:94:
                    92:36:29:f5:58:25:1e:ec:0e:cc:01:8c:d3:24:d7:
                    e5:89:f7:97:20:ed:f1:fd:61:49:e6:a8:b2:37:81:
                    d0:c9:a9:ac:74:a2:8d:a5:af:df:74:9e:c5:ef:dc:
                    8e:99:20:cd:b8:d9:c3:5b:37:09:6c:bc:6f:c2:8d:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FD:07:4F:E1:E2:D9:61:83:7D:91:92:3E:9D:1C:A4:62:66:A3:E3
            X509v3 Authority Key Identifier:
                keyid:02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:05:d7:79:74:73:d2:2b:e4:11:39:ed:91:d9:14:76:f9:
         10:c4:3d:d5:6f:52:05:b4:07:1b:f4:6a:cc:3f:93:91:33:25:
         af:66:e4:27:81:be:d9:65:00:dc:34:de:47:cd:1d:56:84:11:
         35:5d:49:e1:8c:d4:fe:3e:dc:5a:71:c0:a4:74:2d:94:bc:24:
         1c:6f:54:e9:b0:15:e0:34:b8:60:43:dd:1d:62:5e:b9:1b:85:
         34:2a:5f:6c:9c:e6:65:9b:03:a8:cf:3f:a5:64:5c:25:d2:5b:
         95:85:71:a3:c7:ab:37:86:da:83:7a:ec:5c:cc:80:fc:6a:f3:
         22:a2:3b:e5:fe:d5:bb:03:13:71:45:0f:aa:5d:ac:69:3f:71:
         8d:40:68:1d:00:dd:07:2f:33:39:7f:60:d7:4f:2a:c9:77:e5:
         a8:5e:4e:60:f1:a2:ac:f7:36:d7:82:a3:bb:0f:04:7e:37:59:
         9e:2e:79:da:16:a8:c8:fd:29:6b:e3:eb:0e:54:d8:5b:0b:14:
         6a:04:59:0a:15:be:69:69:c8:8c:07:23:f6:11:e4:8e:69:67:
         d4:42:13:e7:7f:b2:5b:0a:c8:83:01:65:ed:3b:c2:d8:78:ba:
         93:db:ac:3c:8b:98:bf:0a:d2:fe:51:1b:63:6e:24:ea:df:04:
         53:81:6b:80
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYjbpy9xCIq+Z8Q5zV3BZ9e9Fu/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0QzFC
ODFFOEIyRTAeFw0yNjA3MjgxMTM2MTVaFw0yNjA3MjkxNTM5MTVaMDMxMTAvBgNV
BAMTKEE0RkQwNzRGRTFFMkQ5NjE4MzdEOTE5MjNFOUQxQ0E0NjI2NkEzRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6y82Wg5x+V2OOlboc5JDkbFC3
XwALJNwutyScuF7wcHwtlreF4tgv24hcW2JIdaO4/JolR20U2WjktJK5sKO/kfYB
aEXm6Vk4O/ZzAmlCvnmf7MO6LWqdAe0LyP2c1Ezcn9UkzLTGQGjdnQzpiiSWsZsd
ZnxoE8Lxw0iSqxmS9HKiocOzWYHJr8AlgpIBIlsBa85tssFj7e3o4yGFPkZQRFUD
sT7J1qgohTF4EO5Oz4/u6QBh1zYcxnWvzSIYjG/dlJI2KfVYJR7sDswBjNMk1+WJ
95cg7fH9YUnmqLI3gdDJqax0oo2lr990nsXv3I6ZIM242cNbNwlsvG/CjbbTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpP0HT+Hi2WGDfZGSPp0cpGJmo+MwHwYDVR0j
BBgwFoAUAgQD9t1W8NXFLFk3tRekwbgeiy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmU5NTRmNDItOTQ1Mi00MjQ3LTk5YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZE
RDU2RjBENUM1MkM1OTM3QjUxN0E0QzFCODFFOEIyRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8wMjA0MDNGNkRENTZGMEQ1QzUyQzU5MzdCNTE3QTRDMUI4MUU4
QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5
YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0
QzFCODFFOEIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADS/Bdd5dHPSK+QROe2R2RR2+RDEPdVvUgW0
Bxv0asw/k5EzJa9m5CeBvtllANw03kfNHVaEETVdSeGM1P4+3FpxwKR0LZS8JBxv
VOmwFeA0uGBD3R1iXrkbhTQqX2yc5mWbA6jPP6VkXCXSW5WFcaPHqzeG2oN67FzM
gPxq8yKiO+X+1bsDE3FFD6pdrGk/cY1AaB0A3QcvMzl/YNdPKsl35aheTmDxoqz3
NteCo7sPBH43WZ4uedoWqMj9KWvj6w5U2FsLFGoEWQoVvmlpyIwHI/YR5I5pZ9RC
E+d/slsKyIMBZe07wth4upPbrDyLmL8K0v5RG2NuJOrfBFOBa4A=
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:57 2026 by rpki-client