Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
File:                     F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft (raw, json)
Hash identifier:          fnWmz5BryQfPXfcm8XxlbQY4vpTLwDWTLy0PKPK/HG0=
Subject key identifier:   92:57:A9:38:FC:A2:AC:42:39:54:41:DD:FA:64:93:E4:4F:88:EF:5D
Authority key identifier: F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17
Certificate issuer:       /CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17
Certificate serial:       3F999D266973AE9CC486B287133C15C7F1AD3078
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
Manifest number:          76
Signing time:             Tue 28 Jul 2026 16:52:31 +0000
Manifest this update:     Tue 28 Jul 2026 16:47:31 +0000
Manifest next update:     Wed 29 Jul 2026 19:19:31 +0000
Files and hashes:         1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: eW2jjvdvI19U+UGpZwOooilR+jDpj7dTH79DXIcMLCo=)
                          2: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl (hash: ujaWfOfYNdhv7Cns9qWOOnXeerVaJtYrziQ00iDVgj0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl
                          rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:99:9d:26:69:73:ae:9c:c4:86:b2:87:13:3c:15:c7:f1:ad:30:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17
        Validity
            Not Before: Jul 28 16:47:31 2026 GMT
            Not After : Jul 29 19:19:31 2026 GMT
        Subject: CN=9257A938FCA2AC42395441DDFA6493E44F88EF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:ed:b2:af:bd:b6:8e:b2:85:fe:ed:4e:cb:
                    c9:1b:b7:8b:c0:cc:4f:86:4e:a3:7d:e9:77:c0:65:
                    4d:e9:5f:be:ea:05:f2:a7:d8:5f:67:12:bf:67:96:
                    ca:65:07:b4:ad:d2:7b:a9:cc:4d:3a:55:09:13:67:
                    b3:fa:67:b3:c3:3b:4c:1b:2a:dd:a8:8c:93:21:8b:
                    df:c5:38:eb:21:32:e4:49:03:3f:c9:36:73:c4:58:
                    f4:21:5f:da:d0:9e:a1:42:2d:66:18:49:df:f4:be:
                    44:c8:7b:5a:0c:34:a9:0c:f8:e3:43:1c:e6:32:6b:
                    d0:b7:8a:e4:c7:16:68:bf:e6:4f:98:a7:59:4a:a2:
                    e0:7b:06:fa:3f:dd:f7:ae:42:74:43:0f:a1:55:5f:
                    f1:70:79:ee:7b:97:66:28:36:9f:9c:46:17:29:ee:
                    df:2f:0e:9d:b6:7f:de:d5:4e:27:c3:45:d1:d2:df:
                    53:97:d7:c8:3c:c5:5c:ce:51:f5:83:58:66:3b:f5:
                    b2:95:31:c7:e4:ac:46:ec:aa:00:0c:c8:31:46:9d:
                    68:61:3a:a6:85:80:16:fc:6c:5f:d7:b0:ff:6c:b3:
                    bf:96:f3:e0:cf:58:c6:63:e0:3e:d3:a4:c8:2d:29:
                    f9:0b:60:af:c9:dd:08:59:2c:e9:05:75:c3:9e:43:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:57:A9:38:FC:A2:AC:42:39:54:41:DD:FA:64:93:E4:4F:88:EF:5D
            X509v3 Authority Key Identifier:
                keyid:F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:6c:de:7a:55:31:68:c2:7c:44:3a:30:bd:a8:6b:91:f3:
         de:d9:cd:7b:8a:77:d7:2f:0c:8f:d7:80:d7:65:01:38:f5:cd:
         66:3e:fd:cc:16:0b:83:96:6d:b2:4b:10:91:3f:4e:77:8c:95:
         6b:9b:6f:28:5d:94:52:f8:06:c9:46:75:64:6d:5f:56:d8:63:
         10:90:5b:b5:94:cb:00:95:61:61:d2:fb:b8:4e:58:21:a0:f3:
         76:b8:b8:05:3b:db:a6:49:9a:7b:23:25:33:d8:e0:bb:44:23:
         27:3d:c8:0a:40:74:e1:18:dd:30:5c:54:bc:22:b3:23:61:80:
         67:b5:94:18:bb:78:aa:33:e3:99:6d:e8:e4:ef:5e:19:37:9d:
         a1:da:2f:08:eb:bd:13:ef:da:94:85:b3:99:c8:e5:8e:26:64:
         44:b6:88:8a:98:72:f4:f6:86:93:d0:e9:45:a2:be:35:61:58:
         ed:8b:69:0b:a8:a4:85:71:da:2d:24:af:c6:bb:3a:ec:1b:2a:
         c6:39:d5:a8:d5:58:2f:dc:6b:1e:57:b9:1f:ea:2e:63:f7:d1:
         d0:fd:d1:5c:41:e0:8c:b6:47:f8:3e:83:7c:cb:de:2a:e2:6a:
         e6:f3:3e:c2:c1:ed:9e:0a:12:a7:43:9b:bd:7a:59:03:8b:06:
         0c:14:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:35 2026 by rpki-client