Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
File:                     7A8D4233922872A894E30E54D6874BEB416AD1DF.mft (raw, json)
Hash identifier:          tTHaA2xYXbbS+VX+mlJjtAK6x3w1cdZaf471a8UhhCg=
Subject key identifier:   C2:48:0E:43:4C:1D:92:F7:23:7E:CD:CC:8D:58:E0:E9:F0:EA:03:DF
Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF
Certificate issuer:       /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
Certificate serial:       40C9206A3D4AEDAD01188476D40CFA3B79604795
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 10:53:24 +0000
Manifest this update:     Thu 23 Jul 2026 10:48:24 +0000
Manifest next update:     Fri 24 Jul 2026 11:59:24 +0000
Files and hashes:         1: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tzOGo3sV/ZVReIoJFZdjUkPKBEoC+agfuEqkfoWV+Ls=)
                          2: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: +5SwlM0I3old/JoBe0NfTcGocHsW0SZgVouHkTzMlXY=)
                          3: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: ycDYVFKlKUcCLkCPbyJWINzJ+1wnaqTl8G/ven1iST0=)
                          4: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: pq7hgN0BYFvcOO4RibbiV4dskaN65Tn7+tm7b4Zi5ss=)
                          5: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: Cy4evdxsXDlUgI456OCJSgkPxKW0rsUBqO0gVv2Oj9E=)
                          6: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: QEaWwU/gLTd1+vXquoUrxupuBnvtpr2z+pW3ka5j1QM=)
                          7: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: dMDlV7U3rxrCZhn5tU+/e2gI+6rTenrp0BfONLsgL+w=)
                          8: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: xJh5WIaBaJDKe0gD95hGnS6h/QKLhblXUfBYm2CvOr8=)
                          9: 7A8D4233922872A894E30E54D6874BEB416AD1DF.crl (hash: 1Zu/ShIp5ZWyxyN8qpFs8eh4miFSqeRc7fLw4Pp6pR8=)
                          10: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: CU2pRJlByvKfQ/yJYZHsXqoQU8W2lpUHREOgbnxSIXI=)
                          11: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: sBqWwZZoNRCD+983cJNfmzhu/jryMMyC7TtCEQsfwzo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl
                          rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 11:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c9:20:6a:3d:4a:ed:ad:01:18:84:76:d4:0c:fa:3b:79:60:47:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
        Validity
            Not Before: Jul 23 10:48:24 2026 GMT
            Not After : Jul 24 11:59:24 2026 GMT
        Subject: CN=C2480E434C1D92F7237ECDCC8D58E0E9F0EA03DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:44:00:f0:41:13:34:a7:d7:fe:64:60:89:
                    9a:48:ed:4f:7f:ce:5e:db:0d:5d:43:26:d8:b0:2d:
                    5c:39:cd:5a:eb:5c:45:86:a6:eb:88:c2:33:f4:12:
                    bc:7d:48:88:1a:fd:f9:be:ea:06:17:fb:79:e3:39:
                    38:4e:7a:6f:58:1a:88:cb:2a:8a:8b:93:ca:be:56:
                    0f:7f:5b:a2:18:f3:3c:7b:b3:77:2b:e9:42:df:af:
                    95:3d:ec:11:11:cc:06:0c:0a:f1:46:76:51:27:18:
                    04:aa:79:7c:5e:c5:10:7f:e7:2d:21:b4:13:81:df:
                    c5:2b:1b:42:f5:0c:65:62:8a:cd:9a:bc:fc:e9:df:
                    13:1c:07:65:5e:7b:6f:c4:90:98:9f:d8:e0:8c:62:
                    1b:d6:71:bf:18:9c:31:28:c7:3c:5b:14:0a:fc:70:
                    11:86:83:cc:7d:f8:60:dc:19:be:ba:75:a1:8e:57:
                    5b:2b:cd:49:a6:56:a7:89:80:fb:d9:87:1c:d4:70:
                    b0:4e:8a:91:75:76:76:b5:97:20:a4:ce:fa:8c:3f:
                    56:e7:af:ea:d1:b3:ac:7d:bc:e0:a7:46:55:3d:5a:
                    f7:5c:bb:87:39:62:9c:af:cc:8a:de:5f:b3:3b:3e:
                    94:5c:4e:3a:32:f1:cc:1a:10:06:20:91:dd:52:de:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:48:0E:43:4C:1D:92:F7:23:7E:CD:CC:8D:58:E0:E9:F0:EA:03:DF
            X509v3 Authority Key Identifier:
                keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:04:fb:7b:24:8b:16:2c:22:55:25:0d:76:cc:1d:f7:d7:f6:
         3b:15:22:37:5c:f6:10:9e:ad:2a:23:7a:38:7e:33:ca:14:b8:
         61:1e:3b:ce:06:dd:4b:2f:ee:01:04:47:4a:8d:13:98:a7:c2:
         40:9a:f3:22:82:ea:55:d3:67:8f:46:87:62:d4:a1:28:58:77:
         df:5a:0e:17:03:a3:8e:52:5b:b9:e1:5e:74:f5:eb:8d:24:9b:
         55:ea:b9:4f:cd:73:84:ad:96:e4:22:5f:39:d5:e6:66:47:a7:
         34:52:a7:6f:18:36:75:5a:23:88:12:58:56:a0:a3:e5:fd:13:
         61:b7:a4:2c:87:bf:39:e5:94:cc:78:99:69:c5:b2:a4:e5:46:
         08:07:d6:c7:55:90:cd:8b:a0:2a:1f:04:1d:32:cf:98:40:db:
         a5:76:03:de:c4:93:07:09:b6:5a:fd:12:77:88:3f:08:10:d2:
         5b:6a:8b:47:9d:1e:4d:f3:3e:d3:d1:8d:b0:58:73:11:4f:cd:
         58:97:5f:92:9e:25:7f:39:19:af:b8:92:cd:04:48:64:fc:ea:
         a2:e7:00:ff:7b:9f:47:b6:92:3f:24:82:d7:43:0d:b4:bf:60:
         e8:b2:f4:86:d8:be:af:04:b8:09:69:90:e8:23:22:69:cf:6f:
         32:01:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:21 2026 by rpki-client