Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
File:                     C7281E70CDFFA77145134C1424E6A649EA797D8A.mft (raw, json)
Hash identifier:          phhH8DAe5Zxh3p6WgWU4bTLnXGwvsbQpDSl9HhsBPV0=
Subject key identifier:   9E:9D:B3:01:D6:20:94:65:B2:7A:FF:1C:B7:47:8C:A1:94:7E:96:CE
Authority key identifier: C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A
Certificate issuer:       /CN=C7281E70CDFFA77145134C1424E6A649EA797D8A
Certificate serial:       15C36EAA7E062FA4E632EA67F2001F25A89487E6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
Manifest number:          74
Signing time:             Tue 28 Jul 2026 14:03:52 +0000
Manifest this update:     Tue 28 Jul 2026 13:58:52 +0000
Manifest next update:     Wed 29 Jul 2026 17:27:52 +0000
Files and hashes:         1: 323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (hash: cXKkyqfbSB+TtcjHk1mHx/AJ1vKr+O8y/yaLaZ1+wx8=)
                          2: 3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (hash: FH9DT+b1XWN3pV6XhdDYXcgO7tOiFoyEXNlC5hXHyTE=)
                          3: C7281E70CDFFA77145134C1424E6A649EA797D8A.crl (hash: L21MyXg16hBN1gLsfzg2MJ1hlyFZ+5N4iV2VIuTv9Zs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl
                          rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c3:6e:aa:7e:06:2f:a4:e6:32:ea:67:f2:00:1f:25:a8:94:87:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7281E70CDFFA77145134C1424E6A649EA797D8A
        Validity
            Not Before: Jul 28 13:58:52 2026 GMT
            Not After : Jul 29 17:27:52 2026 GMT
        Subject: CN=9E9DB301D6209465B27AFF1CB7478CA1947E96CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:ad:91:b6:1b:b5:61:3a:3a:14:f3:b4:3d:
                    01:ee:bd:75:c0:df:db:c1:8a:4e:3f:b6:49:b8:cd:
                    d8:58:2f:f1:e2:8e:4e:7f:98:6a:cd:a4:8b:00:0b:
                    38:45:8e:83:64:72:57:d9:7c:d5:ef:a7:d0:23:a2:
                    72:ee:79:39:89:b8:be:a5:cf:2a:cb:d8:4d:23:c2:
                    d9:88:5f:43:28:f1:cb:6f:cb:c6:9d:68:cd:14:e2:
                    de:4f:e0:e2:f3:ee:92:38:13:55:38:80:de:e3:99:
                    70:a6:5c:17:87:db:08:0b:9c:7a:e6:3d:d4:62:b9:
                    4e:da:42:5d:3b:54:bb:23:8c:c0:cc:24:1c:10:79:
                    83:14:91:df:e4:17:15:08:25:6f:b9:df:f8:34:42:
                    52:88:7f:c3:b2:ca:b3:e7:e8:01:65:44:f2:f1:ca:
                    99:a4:a2:4a:31:8f:59:64:50:45:6e:f4:05:0c:6c:
                    d9:23:5a:b2:32:6f:d0:19:12:af:78:d0:22:77:b4:
                    78:c0:81:40:53:f3:af:07:65:2c:8f:4c:17:a1:91:
                    2a:ae:4f:8e:e2:e8:60:87:10:52:04:42:d3:ad:c2:
                    34:67:63:34:27:8e:a2:3e:40:a9:fd:6e:97:82:0e:
                    c9:47:30:74:08:76:85:b1:5a:20:b6:aa:30:51:45:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:B3:01:D6:20:94:65:B2:7A:FF:1C:B7:47:8C:A1:94:7E:96:CE
            X509v3 Authority Key Identifier:
                keyid:C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:16:e6:eb:d8:c1:b5:5a:92:58:f2:9f:25:61:72:a8:a3:3b:
         23:2a:c1:45:19:25:25:12:a6:7f:76:bb:c0:68:7f:bd:65:da:
         c1:92:19:85:2c:9e:0b:e1:89:3f:a5:31:06:47:8b:38:f6:40:
         cd:72:bc:e4:3a:99:f4:ed:8b:d0:d9:c1:a7:4c:4e:11:de:26:
         87:f0:76:21:d0:16:82:44:7d:9c:1f:f5:e1:3b:c4:d7:9a:d4:
         19:5c:b3:e9:61:11:7e:bb:97:c8:bf:65:f6:84:45:de:de:d3:
         40:8d:2f:c4:16:f0:12:31:2f:04:2e:13:bd:37:fd:e4:01:36:
         7a:5f:ca:aa:6b:71:94:f4:d0:50:17:40:52:cc:83:26:36:63:
         ff:45:e9:14:69:e4:bf:b7:51:73:c9:50:0a:df:32:df:d1:8c:
         72:a0:13:59:b1:ea:2e:18:61:b5:41:a4:cd:47:c0:57:a0:e8:
         86:00:da:07:61:fd:ba:99:10:cc:56:20:1a:d9:8a:a8:f2:d8:
         b7:54:e3:3c:8f:54:d5:80:05:44:4e:9e:3b:65:4c:c7:c1:ce:
         21:26:e9:35:e3:1e:fc:e8:65:1e:a4:09:25:08:5a:11:ef:b4:
         b8:11:0b:ec:dc:5b:9a:0b:28:6b:1a:01:9e:0b:b2:41:de:b5:
         91:5e:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:29 2026 by rpki-client