Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
File:                     7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft (raw, json)
Hash identifier:          UrXxRaafMPY8TP8qyEnDosYoGH+kLvxfwSpxg573OYQ=
Subject key identifier:   BD:8F:E0:05:8E:25:D8:7B:D3:25:49:D0:98:C7:FE:6C:BA:A3:14:F9
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Certificate issuer:       /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial:       6045C5F50EE046973632F02BA803845F0EAEC413
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 19:59:32 +0000
Manifest this update:     Thu 23 Jul 2026 19:54:32 +0000
Manifest next update:     Fri 24 Jul 2026 21:20:32 +0000
Files and hashes:         1: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: K/TdIZS/b961M+WBr5AdYVjyihtdzB52T4G83Wtnnt4=)
                          2: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: LFWm0EcZVdKQjPdOneLLEFWhQfSN5g3Hf6HGlVqHaI8=)
                          3: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: kzOezK5pJW56638YkKVBJp7Z9zkDhQFuaxKkqL/Jq6c=)
                          4: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 7Txv9C0CleyV9C9DJEoBZ+ODaZPJvEcP4KfRLd5UzEc=)
                          5: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: F6rhjUutKa29bUnm7/UxG094I13DCzG5bjD0FGBZBes=)
                          6: 3230322e39312e33302e302f32342d3234203d3e20313532303639.roa (hash: tPMzPTpsoYjE3xnLVYHISDf6L6hBGhuk0Owt7ukQ+FM=)
                          7: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: f3sbcSJJAXRFf4psPjs2YrJ+ZQorOa5bzyPsnXVoi58=)
                          8: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: lnZUd67/u+q68sxl1PDDYAeJMb51iAPVqKyYmLq4L8A=)
                          9: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: nJbUH2HeehvwuwWk5Ov+PdaciTDOUHySNuFD9i+1zG8=)
                          10: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (hash: 1B1TVPRMyjlvdSS5PDnfi+a+7Z7dzoKNS0Tsds8V9X4=)
                          11: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: 45AAQ0VUPgUlngwmQc08RYng8iNJmTJSeNFh2/3cLi0=)
                          12: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: dBMRidIHmDJpAXQnRb7chQxbiE61M8MP8MR8WVkobdk=)
                          13: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: 9qfFoBhiNHzp+LreK9FNs3OMOxGnSUcOBWmf2OnEzeE=)
                          14: 7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl (hash: rP0J5prslHTdpi19bjL7n2xojKjVeryF5mBQz3sPEDE=)
                          15: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: gQkyLjmlcDwKcd2z2flGb/EQPjqBxcBo5tmP6HZn8gU=)
                          16: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: mkTvztfJSo91nm3StwqhTN6opwgEonPpDJuRndRoQxg=)
                          17: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: 9+aWSYM5qln+RUD+mRbEe6cHjWT6vF9wbMbOOp4+klI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
                          rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:45:c5:f5:0e:e0:46:97:36:32:f0:2b:a8:03:84:5f:0e:ae:c4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
        Validity
            Not Before: Jul 23 19:54:32 2026 GMT
            Not After : Jul 24 21:20:32 2026 GMT
        Subject: CN=BD8FE0058E25D87BD32549D098C7FE6CBAA314F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:0a:14:da:7c:a4:00:8d:d4:fd:c0:15:f5:
                    18:15:19:2c:6c:e1:34:f4:4e:ce:d3:ba:a3:d7:71:
                    12:3c:99:77:b8:54:b4:08:64:34:d9:38:15:ca:a3:
                    ef:1b:77:22:76:74:33:b4:65:db:52:b1:a0:c2:c8:
                    1c:0d:19:cd:bb:a9:8d:56:1b:ca:f7:35:ac:bf:42:
                    c6:44:04:5d:2d:5a:8b:4e:be:78:ef:2c:cb:17:3f:
                    9c:b7:f6:59:71:43:94:76:0d:b3:95:af:ee:d5:d7:
                    ee:53:ed:a6:10:36:ed:2f:4f:d4:ef:eb:02:71:67:
                    37:88:2c:92:0f:ca:33:2a:73:3f:6f:43:a5:c3:4f:
                    94:26:51:e1:9c:98:f9:fe:73:94:b3:32:39:6a:2f:
                    84:ff:83:30:73:b2:b3:a0:da:8e:1b:71:5b:a0:19:
                    36:2b:09:01:ba:c9:52:b0:19:ba:53:19:29:44:27:
                    99:7f:98:5c:e8:96:c6:d6:5c:66:87:26:53:82:a6:
                    27:12:59:f7:c9:8e:87:85:af:f5:e9:f5:39:ea:30:
                    5b:2f:26:36:2e:00:95:15:2b:d8:2e:b8:b6:e9:0f:
                    77:94:0e:9d:aa:58:8c:69:b4:67:e4:8a:4b:bf:ff:
                    e5:57:10:10:1e:a8:d0:26:d8:1d:21:54:8d:b9:85:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8F:E0:05:8E:25:D8:7B:D3:25:49:D0:98:C7:FE:6C:BA:A3:14:F9
            X509v3 Authority Key Identifier:
                keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:25:9d:cf:4c:45:79:fe:42:cc:f2:34:39:c7:dc:12:c3:6d:
         f7:ab:ac:7e:db:cf:8b:a4:d9:f7:a8:42:f3:c6:47:47:0d:36:
         00:5a:28:96:85:d4:90:1e:f2:1e:7a:89:da:66:eb:7f:6f:17:
         85:fc:70:02:d1:09:21:cb:2b:eb:21:01:1c:a0:c4:0c:6a:43:
         72:8d:a1:67:74:e8:71:b1:cd:61:f4:ad:bb:b5:0a:94:03:b9:
         7b:20:c3:26:e7:be:12:e3:f5:1c:0e:bf:10:4c:8d:05:82:a8:
         70:f1:89:e9:b7:89:02:7d:3e:aa:7a:09:0e:56:f2:35:6d:f5:
         d0:a8:ef:2a:f8:44:26:a7:dd:94:31:ae:6a:e2:92:af:35:d7:
         15:9f:77:f7:13:d8:4e:a8:12:4a:f9:14:55:13:bc:76:d0:60:
         22:17:e3:b8:eb:17:f1:0e:36:92:b4:01:3e:af:46:e5:f6:8c:
         90:8c:89:cd:4a:39:4e:33:44:fe:42:6b:27:a7:e6:d8:f2:c1:
         1c:ac:65:fd:65:6c:fc:26:2f:50:55:2f:59:dc:d1:81:1a:e8:
         21:0e:68:87:5f:16:66:28:90:8a:df:0e:c8:a2:6c:40:82:33:
         19:8d:05:db:5a:c2:30:4e:ab:28:4c:12:a5:9e:aa:49:b6:22:
         b7:2c:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:04:46 2026 by rpki-client