Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
File:                     5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft (raw, json)
Hash identifier:          xWcjA5c9SDeOxPeRJ52Z6OX/bfhnM19Tl5wnjx6E9oY=
Subject key identifier:   97:AB:68:D6:DE:97:34:78:B2:32:68:4B:81:24:31:B6:D3:E9:1D:DC
Authority key identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
Certificate issuer:       /CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Certificate serial:       71A1B6C7C16E6995494C0DDD02033F08722A26B8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
Manifest number:          76
Signing time:             Tue 28 Jul 2026 14:19:08 +0000
Manifest this update:     Tue 28 Jul 2026 14:14:08 +0000
Manifest next update:     Wed 29 Jul 2026 18:03:08 +0000
Files and hashes:         1: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl (hash: w4AeGaPQmeDCGL0+CK6gxDGzE2/APdYPd3VaEsN4w/A=)
                          2: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (hash: gVVcFzT/K9Q9nDNA6t6fupz9aVwPxkvvDdd7B2c399E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
                          rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a1:b6:c7:c1:6e:69:95:49:4c:0d:dd:02:03:3f:08:72:2a:26:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
        Validity
            Not Before: Jul 28 14:14:08 2026 GMT
            Not After : Jul 29 18:03:08 2026 GMT
        Subject: CN=97AB68D6DE973478B232684B812431B6D3E91DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:91:24:d6:7e:52:f9:db:69:1f:0d:64:fc:
                    4c:79:ed:35:da:ac:94:7f:0c:7c:d6:ab:b6:1c:44:
                    e3:f4:e8:6f:91:c3:3f:63:40:21:76:cc:07:dc:1f:
                    f9:07:e1:4c:2f:92:66:20:d6:8c:5f:c7:67:10:14:
                    e4:c8:67:34:b9:0e:dd:54:22:4c:38:8d:c3:5b:2f:
                    0c:20:50:84:0d:4d:dc:59:80:d2:77:87:b8:c4:1c:
                    7c:06:48:d1:d5:a1:5d:f5:fa:f1:5a:d8:e5:4f:42:
                    37:c1:6f:98:6c:30:6b:81:79:2a:88:bd:9e:eb:ae:
                    ee:d4:ff:46:51:f3:7a:32:d5:b5:14:36:17:5a:92:
                    59:95:21:9d:69:5b:a5:45:0f:c6:e6:b5:50:f8:26:
                    c7:63:1f:8c:e1:27:15:79:22:11:e4:7f:c6:3a:07:
                    99:3b:12:1e:e9:f2:31:c5:4d:f8:a0:77:21:55:1e:
                    25:3f:f7:ef:55:cc:65:4a:2c:c3:01:b1:b4:a7:7e:
                    72:58:ac:3c:7d:bb:e4:86:1e:f4:ca:64:41:e8:33:
                    c1:88:81:ee:9e:d9:45:59:5d:4f:e9:dc:20:62:95:
                    bc:9c:22:ce:19:88:d3:43:df:e0:21:e3:0d:c3:98:
                    b1:3f:1b:31:53:d4:1f:88:aa:e9:aa:37:b7:7a:63:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AB:68:D6:DE:97:34:78:B2:32:68:4B:81:24:31:B6:D3:E9:1D:DC
            X509v3 Authority Key Identifier:
                keyid:5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:56:52:34:68:f3:70:cc:4e:d4:2f:ea:19:40:64:5a:4a:
         5d:fc:23:b4:47:2e:00:f7:0a:d8:b8:35:d8:a2:74:9f:5b:dc:
         3c:ba:1d:ef:08:b7:b0:8c:ae:a0:1f:a5:4f:25:b3:d8:72:e8:
         12:64:12:a1:d2:05:49:d9:1b:fc:62:29:ed:cc:4d:b3:18:57:
         73:1e:cf:8e:05:b1:14:c7:46:e6:5d:45:1e:30:93:28:d5:b0:
         12:6d:07:fc:77:3e:86:7f:2f:e1:0a:e4:6f:88:02:af:be:8c:
         32:3f:67:f7:6b:22:3c:08:6c:98:66:22:15:e7:90:89:f6:3d:
         f7:a0:49:99:a2:b7:86:5c:88:12:a9:c3:30:1f:b5:fb:12:04:
         2c:25:8b:22:a6:ef:89:65:54:80:86:94:4e:41:5d:0d:be:57:
         f4:c2:02:7c:a4:3a:1d:7a:09:e6:36:5e:f7:41:4c:ac:34:d7:
         fd:6f:d4:42:7c:c8:b4:35:29:a2:5e:9a:ed:4c:c9:01:b8:b4:
         15:01:e2:03:44:ac:7d:de:a5:e0:9c:69:ca:5f:f7:37:ea:52:
         95:c8:f1:be:89:88:f2:eb:c3:6d:7c:04:91:3d:4d:e7:74:7a:
         d7:52:2c:77:40:d9:61:2f:4f:bd:14:8b:dd:af:7d:c6:cd:b1:
         cf:20:af:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:24:56 2026 by rpki-client