Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
File:                     5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json)
Hash identifier:          atRHYCB2YjJ2eXjm3+UbTjKsQ3Kb7bdVbfjspyP32Fw=
Subject key identifier:   76:0B:D9:4B:AF:C9:00:D1:AF:04:42:3D:22:33:60:EC:B6:78:DD:2A
Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
Certificate issuer:       /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Certificate serial:       2155F8A415E352BCCB338129E8BB1FC159B330A6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 13:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 12:55:53 +0000
Manifest next update:     Fri 24 Jul 2026 13:58:53 +0000
Files and hashes:         1: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=)
                          2: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=)
                          3: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: vnZlaK4rHIF7zmxYA5RVvR3lPzDA3pRCVF8KlBwoPyk=)
                          4: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=)
                          5: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=)
                          6: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=)
                          7: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=)
                          8: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=)
                          9: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
                          rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:55:f8:a4:15:e3:52:bc:cb:33:81:29:e8:bb:1f:c1:59:b3:30:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
        Validity
            Not Before: Jul 23 12:55:53 2026 GMT
            Not After : Jul 24 13:58:53 2026 GMT
        Subject: CN=760BD94BAFC900D1AF04423D223360ECB678DD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:4e:21:5a:77:a3:df:fb:82:e4:90:a0:fb:
                    ad:ca:12:e5:45:df:d5:23:9c:8b:eb:48:fa:6b:fb:
                    56:67:f4:e1:b0:a9:00:21:95:f3:0c:51:a9:56:7c:
                    de:d6:30:5b:2f:54:84:5f:81:35:73:4d:84:08:2f:
                    35:9e:80:b7:a0:9f:05:84:de:53:88:e4:3f:27:46:
                    f8:f9:c5:52:19:72:a0:d2:bc:69:9c:25:7e:77:f7:
                    db:d5:11:64:57:49:23:73:d3:5f:03:c7:27:94:0c:
                    1e:a6:3b:6e:cc:a7:bb:44:ab:29:96:b6:41:21:c4:
                    ed:d1:49:17:ce:29:7d:83:0b:51:a7:e3:7e:17:45:
                    bb:a0:d5:19:db:cb:30:5d:ba:2f:55:71:63:2d:71:
                    8f:41:5a:ee:93:bb:f7:a3:f0:53:b0:87:c7:f8:7a:
                    dd:2e:db:42:78:a1:6e:ae:7b:97:9f:ba:4f:07:32:
                    29:a7:c4:ca:b0:88:cd:ff:14:9c:e5:15:1e:80:30:
                    43:6d:a4:b3:3c:0d:9a:3d:17:aa:67:41:98:40:b8:
                    b0:8a:23:5f:c5:a3:8a:33:d0:ec:83:0a:e6:e8:fd:
                    dd:a5:89:49:c3:d0:ba:b9:c9:dd:30:af:0d:41:eb:
                    e5:ae:d1:68:a5:ed:b8:93:a3:5d:55:21:d6:5b:cd:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0B:D9:4B:AF:C9:00:D1:AF:04:42:3D:22:33:60:EC:B6:78:DD:2A
            X509v3 Authority Key Identifier:
                keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:1e:e0:5a:ff:92:d0:ed:dc:ef:4d:37:f2:8e:4a:23:05:
         fa:fb:4a:bd:2d:d6:d8:75:28:7b:8b:74:1c:b3:2f:ff:6e:03:
         0c:66:15:3f:55:11:37:30:dc:5c:12:0e:1c:ed:86:18:32:2a:
         02:f6:f9:3a:c1:1d:29:95:3f:08:50:a3:99:c1:a4:65:f0:f3:
         d1:44:f0:a1:1b:5d:d2:b9:e2:f4:01:83:27:52:01:59:2f:97:
         af:34:7e:10:ba:ae:6b:fd:f5:5d:46:4d:c5:ae:ac:8a:85:ea:
         cd:77:7e:69:1d:85:4a:c0:28:ac:c0:a6:f4:9f:f9:65:eb:e2:
         2b:10:ca:11:41:b1:61:c6:54:35:2e:e2:8c:2f:df:69:5b:a6:
         23:b5:75:28:7e:2a:a9:24:f9:15:6b:3b:e8:01:7b:17:de:6a:
         a4:28:e7:fb:78:70:39:ea:e3:62:f8:ec:4c:de:3c:e2:6c:a4:
         59:88:88:a4:ae:4b:1d:b6:97:33:03:72:f2:50:84:92:ff:10:
         d1:6a:b4:b7:1f:a1:1b:84:49:3a:17:85:3c:33:61:0a:e3:8c:
         53:b9:44:af:f7:69:10:93:cb:8d:0d:ee:de:99:b1:fe:dc:ac:
         d4:2f:62:c2:cd:15:4d:c5:87:45:8b:72:70:c5:b3:f1:e2:49:
         f7:9d:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:44 2026 by rpki-client