Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
File:                     DB23849BCF63AE719E7BE4FE89385D166773A883.mft (raw, json)
Hash identifier:          re2jpSaARQB1oRsRTNpUA2ZXc6xapc0TxFrMrNTrF2E=
Subject key identifier:   40:8B:DE:41:E5:8C:06:10:5F:C8:20:2E:E0:07:C0:65:F4:35:97:80
Authority key identifier: DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83
Certificate issuer:       /CN=DB23849BCF63AE719E7BE4FE89385D166773A883
Certificate serial:       61CAEF284961E35B99FFCB9EA41C4B696F45AD19
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 08:40:29 +0000
Manifest this update:     Thu 23 Jul 2026 08:35:29 +0000
Manifest next update:     Fri 24 Jul 2026 11:46:29 +0000
Files and hashes:         1: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: g3WbWI1q18vac55oq8gdpUXBjsp4Aidv1FzJgM9YpdM=)
                          2: DB23849BCF63AE719E7BE4FE89385D166773A883.crl (hash: oXXhg0dx8XLxFOAYoc0G4KJIjmiuz3fU8GP97pRJki8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl
                          rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 11:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ca:ef:28:49:61:e3:5b:99:ff:cb:9e:a4:1c:4b:69:6f:45:ad:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB23849BCF63AE719E7BE4FE89385D166773A883
        Validity
            Not Before: Jul 23 08:35:29 2026 GMT
            Not After : Jul 24 11:46:29 2026 GMT
        Subject: CN=408BDE41E58C06105FC8202EE007C065F4359780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:fc:59:9a:65:6e:04:60:c3:00:2e:35:48:
                    b4:b8:7c:9c:43:f6:1e:f5:89:1f:1d:98:55:72:f0:
                    54:a2:5d:4d:f0:63:08:c8:ea:83:19:36:cb:70:e6:
                    ca:44:1e:d1:78:0b:c6:6d:b2:e0:7f:31:a2:fe:04:
                    f7:bd:b7:ad:d2:f0:dd:7d:56:7a:d5:ef:79:c7:d3:
                    9d:b4:52:80:b7:37:31:dd:24:de:d6:9c:42:d8:f9:
                    cb:7d:58:19:f6:a8:fa:52:1f:15:28:dd:6d:22:e9:
                    f6:81:9a:c1:46:e7:3a:41:0c:0f:95:f3:92:cc:5a:
                    e5:ac:09:8e:68:22:70:e5:3f:65:9e:bf:f6:e0:4e:
                    47:53:8c:83:cb:63:04:f9:3b:63:4f:ed:97:95:33:
                    6e:bc:d5:da:65:81:1c:b7:7a:02:43:f2:5b:89:a1:
                    f0:24:ae:e8:b7:67:0b:c0:18:a0:cf:7d:af:fb:07:
                    aa:19:ff:d5:e9:d6:0b:60:be:21:4b:e6:ba:7d:f8:
                    44:ac:1e:9e:c6:fd:9a:4d:7b:da:dc:f3:80:ae:ba:
                    15:f8:3a:95:c4:d3:a7:76:5b:b0:c7:49:13:35:14:
                    48:69:de:a7:3a:e8:2c:d1:b1:f2:c5:a9:bf:da:c5:
                    75:e9:fd:38:3c:6e:07:26:23:c7:b3:09:9a:b8:58:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8B:DE:41:E5:8C:06:10:5F:C8:20:2E:E0:07:C0:65:F4:35:97:80
            X509v3 Authority Key Identifier:
                keyid:DB:23:84:9B:CF:63:AE:71:9E:7B:E4:FE:89:38:5D:16:67:73:A8:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB23849BCF63AE719E7BE4FE89385D166773A883.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/DB23849BCF63AE719E7BE4FE89385D166773A883.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:37:f4:ea:77:a6:60:70:0d:c1:ef:c3:1c:cb:bb:01:d1:dd:
         fb:24:f5:4b:bf:36:4c:98:79:1e:b1:27:6f:88:4f:c8:3c:d5:
         09:69:5e:93:d1:4e:a7:e4:b8:ab:86:2b:49:17:b2:87:b4:2c:
         19:02:40:58:eb:5f:8e:21:0a:77:cf:f2:49:20:2e:c4:27:64:
         74:e9:8b:b8:85:83:f3:57:74:f4:37:91:7c:8b:47:7a:eb:88:
         85:62:9b:1d:88:fa:c7:d7:4e:95:08:95:c7:0d:24:1c:c0:c9:
         02:8d:3f:24:d9:86:8d:96:29:4f:92:d3:91:c6:44:b0:da:f7:
         d4:11:96:20:47:82:16:d1:98:31:58:50:de:0e:d0:69:66:5d:
         95:c8:a8:3b:b7:ea:18:c3:27:87:ba:f7:e3:61:8e:61:b0:ae:
         74:81:5a:d0:03:e2:d5:07:ad:91:17:3e:18:67:f7:04:d3:e0:
         71:e0:1e:3e:0d:ac:a8:21:7f:29:e9:d9:c8:6f:0a:87:ee:37:
         63:f9:36:27:7a:fe:b6:a4:16:98:ed:77:72:4f:92:1d:ca:84:
         06:b3:92:87:a6:cc:e4:90:54:31:8b:af:0e:3d:b5:e6:21:0a:
         17:8f:25:7a:11:72:8b:b0:1e:88:dc:68:9e:7f:e7:7b:f8:72:
         04:fd:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:49 2026 by rpki-client