Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
File:                     256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json)
Hash identifier:          82Mv2frNzNOkSHluvdMP6mONJBMpqWmwWOox2i7/PS8=
Subject key identifier:   91:07:85:02:0F:36:9C:10:C6:06:E6:DA:6E:D5:85:40:0A:F1:1F:13
Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED
Certificate issuer:       /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED
Certificate serial:       6BB0589E90589551D86856E4A10C1758F68CE456
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
Manifest number:          75
Signing time:             Wed 29 Jul 2026 00:06:23 +0000
Manifest this update:     Wed 29 Jul 2026 00:01:23 +0000
Manifest next update:     Thu 30 Jul 2026 03:15:23 +0000
Files and hashes:         1: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: Y5jPyp6MWNGfEFDAqXzelHwXpTBSYWN+Wf0h6jAxF+k=)
                          2: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=)
                          3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl
                          rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b0:58:9e:90:58:95:51:d8:68:56:e4:a1:0c:17:58:f6:8c:e4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED
        Validity
            Not Before: Jul 29 00:01:23 2026 GMT
            Not After : Jul 30 03:15:23 2026 GMT
        Subject: CN=910785020F369C10C606E6DA6ED585400AF11F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:26:8d:0f:b8:f5:30:cc:7f:0e:64:14:c8:
                    c7:67:e8:be:fe:1e:8f:0c:34:a1:d6:05:1c:29:4e:
                    86:ca:64:35:78:cb:bd:b7:94:b1:76:cf:43:57:af:
                    4a:d0:f9:15:85:eb:0b:58:9f:70:79:af:95:0c:50:
                    d8:21:7a:5f:8b:eb:a3:a9:99:5b:6b:a4:56:ad:03:
                    07:4d:d9:63:c0:dc:78:58:c7:4f:7e:62:bd:df:eb:
                    e8:fb:97:4c:c2:4d:57:d5:80:37:63:c1:af:6d:d7:
                    e2:c8:93:bd:b5:9b:f4:ed:13:d1:28:9b:c5:e2:bb:
                    af:c6:d0:9e:71:0a:65:95:68:6e:23:0c:ed:67:3e:
                    6d:aa:23:3a:14:7b:b7:3b:6a:e7:ff:97:5b:2a:c1:
                    b2:aa:b8:b8:f3:f2:ea:2b:cc:06:66:42:c5:27:c8:
                    9b:d2:4f:c2:10:36:19:9c:a7:6b:c1:5b:33:97:00:
                    00:7b:ed:5b:2c:7d:32:89:56:a6:3e:c7:87:c7:23:
                    85:1d:68:45:c0:3d:64:a4:54:79:5b:01:b5:cb:b0:
                    99:df:57:6d:d7:36:03:4b:03:ab:98:82:12:40:b0:
                    2e:0d:01:c9:02:83:04:ed:4f:75:60:92:39:2d:ce:
                    66:ac:03:03:a5:62:e9:a3:49:02:e8:81:5c:3e:6e:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:07:85:02:0F:36:9C:10:C6:06:E6:DA:6E:D5:85:40:0A:F1:1F:13
            X509v3 Authority Key Identifier:
                keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:89:80:23:63:88:b4:f9:81:76:52:9e:36:92:c9:ca:e5:
         0c:aa:e5:e6:37:9f:32:be:89:d6:4c:8b:3b:6b:ce:82:7d:82:
         1e:05:c6:f9:7f:d5:83:f3:dd:83:23:63:44:a2:92:fa:80:7f:
         13:e2:48:c4:35:d4:43:0c:0a:85:5c:42:d1:93:0b:9b:be:c5:
         44:e8:e5:55:96:19:ce:fe:26:05:0a:45:de:70:8f:93:54:9f:
         d5:48:46:1f:4c:d3:f7:d0:bc:75:ed:b5:13:2b:86:bb:f8:1e:
         00:a3:e5:94:df:a6:06:cd:be:ca:6f:1f:6d:25:8d:80:de:d5:
         ed:71:0b:5c:3a:79:06:94:25:64:0b:08:58:5a:9c:14:60:56:
         48:32:47:6d:99:59:ed:cd:a8:78:18:8f:cf:60:42:cc:01:88:
         f0:55:25:92:0d:e1:73:03:4c:52:9b:76:09:85:7c:dc:34:fc:
         11:89:00:a2:98:67:2e:e8:34:b1:dd:d0:73:ea:c5:da:7d:1e:
         ed:04:a2:4c:82:3b:0d:37:86:1f:46:bb:39:49:e4:25:e6:32:
         4a:b2:23:1d:43:a7:72:04:d5:9e:10:c3:ee:de:e2:8f:c3:d2:
         03:fb:5d:80:6c:a9:9b:79:2b:87:29:27:cd:6d:4a:56:e9:4c:
         d8:30:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:45 2026 by rpki-client