Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft
File:                     5109EC0B3BA28731E9E261F3B59F3600B563E644.mft (raw, json)
Hash identifier:          6dj8NUlK+ab2Yhi8J0KSkEk+prSKIiMQEEWvm68OYI8=
Subject key identifier:   A6:88:DD:65:62:AE:39:DC:9B:9E:4C:EC:DA:1D:98:59:77:93:35:7C
Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44
Certificate issuer:       /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
Certificate serial:       0656BE0C834DF1762F29572C3580D4CC5F456E5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft
Manifest number:          77
Signing time:             Wed 29 Jul 2026 00:47:09 +0000
Manifest this update:     Wed 29 Jul 2026 00:42:09 +0000
Manifest next update:     Thu 30 Jul 2026 03:11:09 +0000
Files and hashes:         1: 5109EC0B3BA28731E9E261F3B59F3600B563E644.crl (hash: sqqlb8M8ZEqGJKT+20Tj5syVnYLgI32iEWs6bV09nm4=)
                          2: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: WbqdW7MhiN2iDSZWaMRymz0suZjkKuhQk8kC3475/Ds=)
                          3: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: MF1opaQfJw+Iei/Le09BzIXkrXsDLiX2XTUMp350q1Q=)
                          4: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: Sxg6YyOUpBblg3g3D4oNcKxKaQWWwQAvP3gO95G7uko=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl
                          rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:56:be:0c:83:4d:f1:76:2f:29:57:2c:35:80:d4:cc:5f:45:6e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
        Validity
            Not Before: Jul 29 00:42:09 2026 GMT
            Not After : Jul 30 03:11:09 2026 GMT
        Subject: CN=A688DD6562AE39DC9B9E4CECDA1D98597793357C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:51:87:77:75:d2:13:60:f4:4f:2b:0e:02:
                    98:21:a7:72:09:0c:52:44:cf:53:67:a3:a4:64:10:
                    0c:78:14:2f:57:f0:d1:f5:34:a7:3a:5f:8c:ab:30:
                    fd:3b:9c:94:14:83:72:29:61:05:02:e1:76:60:b7:
                    51:f8:b5:d3:24:5b:93:2f:99:13:dc:c3:f2:54:55:
                    ad:5b:90:cd:3c:06:1c:a6:7a:39:f2:c9:32:a0:5d:
                    78:75:aa:cb:ae:0c:20:54:53:7b:cd:c1:bd:30:6e:
                    a3:68:46:87:65:94:bd:8d:72:73:02:30:b4:6b:f0:
                    27:0b:a9:ef:9d:33:2d:2d:f7:8b:6c:14:90:ab:c5:
                    56:87:73:f6:b8:89:1b:96:a4:9d:a7:0d:c7:db:cb:
                    55:54:89:16:17:5e:0f:10:dc:0a:05:b1:69:02:4c:
                    a4:46:f7:be:68:48:e8:af:c8:54:5f:d6:e4:be:cc:
                    67:a8:25:9b:df:94:b3:8e:00:09:6a:97:ea:9f:1b:
                    f7:8e:0c:02:ac:cf:d7:ee:74:bc:2c:a9:10:3d:6a:
                    81:09:56:b5:d3:9b:76:71:1b:2b:f0:50:c1:ba:0a:
                    c4:d5:d1:af:45:b5:10:5f:a3:ee:53:d8:2f:3a:ed:
                    66:e2:1f:4b:eb:3c:db:7a:4b:40:f4:61:55:6a:c5:
                    64:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:88:DD:65:62:AE:39:DC:9B:9E:4C:EC:DA:1D:98:59:77:93:35:7C
            X509v3 Authority Key Identifier:
                keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:21:f7:21:d5:f9:a0:4a:ad:1c:4d:98:6f:7f:97:74:07:ff:
         3a:24:d6:ff:45:c3:b4:a8:35:4b:2d:6f:50:51:1c:a5:4f:51:
         bd:f7:36:2c:4e:f4:98:bd:99:fb:62:5b:4a:5c:cc:83:48:cd:
         68:5d:bc:bc:9a:51:31:92:12:4e:9e:bb:21:94:3e:b1:c8:5b:
         d6:03:d1:d6:71:49:b9:62:93:12:13:cd:67:03:44:7b:89:d6:
         81:39:1c:4c:ff:93:ef:05:e8:e5:33:79:2f:71:a8:81:b9:52:
         c3:2d:5b:84:21:81:52:f8:3f:89:4d:3c:d9:09:f2:ee:9e:2b:
         49:d2:1d:0d:9b:0f:01:48:b9:0e:8c:0e:2f:9e:7e:ba:be:36:
         bb:7b:c8:41:b0:7b:81:73:62:1b:7d:c7:37:78:dd:fc:9b:00:
         01:1c:f6:a1:c3:d4:1c:ff:32:d5:ac:64:3d:8c:1b:f5:ea:86:
         8a:10:69:a9:2a:f1:28:70:66:57:3f:88:17:a4:ec:bb:9b:15:
         8e:ec:64:f4:fa:d7:cc:26:e5:87:0c:1c:a7:94:48:6d:a2:01:
         6c:36:56:76:94:3c:db:96:a4:de:c1:49:43:89:ec:7b:aa:4b:
         d4:bd:8e:73:4a:62:ef:19:c1:14:e8:fc:9f:21:4a:cd:04:72:
         92:5d:f7:a2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBla+DINN8XYvKVcsNYDUzF9FblswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2MDBC
NTYzRTY0NDAeFw0yNjA3MjkwMDQyMDlaFw0yNjA3MzAwMzExMDlaMDMxMTAvBgNV
BAMTKEE2ODhERDY1NjJBRTM5REM5QjlFNENFQ0RBMUQ5ODU5Nzc5MzM1N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7lGHd3XSE2D0TysOApghp3IJ
DFJEz1Nno6RkEAx4FC9X8NH1NKc6X4yrMP07nJQUg3IpYQUC4XZgt1H4tdMkW5Mv
mRPcw/JUVa1bkM08BhymejnyyTKgXXh1qsuuDCBUU3vNwb0wbqNoRodllL2NcnMC
MLRr8CcLqe+dMy0t94tsFJCrxVaHc/a4iRuWpJ2nDcfby1VUiRYXXg8Q3AoFsWkC
TKRG975oSOivyFRf1uS+zGeoJZvflLOOAAlql+qfG/eODAKsz9fudLwsqRA9aoEJ
VrXTm3ZxGyvwUMG6CsTV0a9FtRBfo+5T2C867WbiH0vrPNt6S0D0YVVqxWRXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpojdZWKuOdybnkzs2h2YWXeTNXwwHwYDVR0j
BBgwFoAUUQnsCzuihzHp4mHztZ82ALVj5kQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzliM2JiMzQtMTVlMi00NDg3LWI1MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIz
QkEyODczMUU5RTI2MUYzQjU5RjM2MDBCNTYzRTY0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MTA5RUMwQjNCQTI4NzMxRTlFMjYxRjNCNTlGMzYwMEI1NjNF
NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1
MjctNmU3NTEyODZjZTdkLzAvNTEwOUVDMEIzQkEyODczMUU5RTI2MUYzQjU5RjM2
MDBCNTYzRTY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJgh9yHV+aBKrRxNmG9/l3QH/zok1v9Fw7So
NUstb1BRHKVPUb33NixO9Ji9mftiW0pczINIzWhdvLyaUTGSEk6euyGUPrHIW9YD
0dZxSblikxITzWcDRHuJ1oE5HEz/k+8F6OUzeS9xqIG5UsMtW4QhgVL4P4lNPNkJ
8u6eK0nSHQ2bDwFIuQ6MDi+efrq+Nrt7yEGwe4FzYht9xzd43fybAAEc9qHD1Bz/
MtWsZD2MG/XqhooQaakq8ShwZlc/iBek7LubFY7sZPT618wm5YcMHKeUSG2iAWw2
VnaUPNuWpN7BSUOJ7HuqS9S9jnNKYu8ZwRTo/J8hSs0EcpJd96I=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:59 2026 by rpki-client