Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft
File:                     87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft (raw, json)
Hash identifier:          KJXCYZpIkjHZ7tXfKG36mNSZ2kwoVA9Lm6DsOM4wFKc=
Subject key identifier:   17:3C:75:2B:5A:59:3E:FE:0E:8E:6F:58:D7:A3:D3:4E:16:20:FC:4B
Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C
Certificate issuer:       /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
Certificate serial:       15802DAE5FE2F5D4F0AFFD90E99A1C27C749E33D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 10:22:46 +0000
Manifest this update:     Thu 23 Jul 2026 10:17:46 +0000
Manifest next update:     Fri 24 Jul 2026 11:19:46 +0000
Files and hashes:         1: 3132322e34392e3232382e302f32342d3234203d3e203338353232.roa (hash: 4cU77f0ZXamnF8DHTiKJUAABgb6TzKnx01pHiqRLsFw=)
                          2: 3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (hash: d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=)
                          3: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (hash: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=)
                          4: 3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (hash: P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=)
                          5: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (hash: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms=)
                          6: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (hash: YwK9zKWhCwEUulSxU5g8clKq/6rfBd7sqbMSAqcQZGU=)
                          7: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl (hash: 8QwxlUloKc83QH/3lHldRYFOWV8+3bcdlA87EVfslW4=)
                          8: 3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (hash: dG3U2jGBDUThXsk32C3onzKHpV2boaMdLu/JAX5mj2U=)
                          9: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (hash: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl
                          rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 11:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:80:2d:ae:5f:e2:f5:d4:f0:af:fd:90:e9:9a:1c:27:c7:49:e3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
        Validity
            Not Before: Jul 23 10:17:46 2026 GMT
            Not After : Jul 24 11:19:46 2026 GMT
        Subject: CN=173C752B5A593EFE0E8E6F58D7A3D34E1620FC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:d3:b0:09:c6:00:e9:af:b1:67:a9:be:e4:
                    0a:71:64:22:9e:1a:4b:b0:bd:7c:77:c8:32:2a:d6:
                    05:20:e4:ea:f4:ae:2a:e4:17:38:cf:17:cb:37:7f:
                    bb:de:c1:d2:80:64:d1:77:87:94:fa:3c:a6:ad:bd:
                    60:05:12:9a:e7:dc:4e:85:80:3a:69:75:36:78:ce:
                    05:38:cd:36:aa:ad:00:b8:8c:08:fc:20:d1:7f:fb:
                    3e:34:04:3e:03:85:43:24:37:56:e2:11:76:84:6e:
                    f1:c9:f0:d8:25:9c:83:95:f8:e2:44:7c:6b:c0:ba:
                    5a:46:cc:0a:08:11:55:c3:05:0d:f7:a5:7a:85:d2:
                    ab:67:ca:a3:81:68:cf:93:86:8c:ac:c7:f9:82:a2:
                    93:0d:a9:f9:2f:f5:d3:42:ab:8e:86:c6:59:86:6e:
                    73:df:90:28:25:1f:53:5e:d9:d5:8b:eb:c2:6f:67:
                    de:43:d5:56:26:81:f3:d5:16:36:49:9b:74:6d:31:
                    b7:58:0c:85:e9:50:73:fd:a0:68:39:ad:1c:a6:35:
                    21:4e:28:9e:24:04:92:26:a1:0a:c3:07:01:bd:9e:
                    2f:bc:68:60:60:da:c0:e1:c6:27:9d:b2:a8:ef:a7:
                    de:8d:04:e4:fd:cf:fa:5f:d1:d8:12:a6:89:8c:68:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3C:75:2B:5A:59:3E:FE:0E:8E:6F:58:D7:A3:D3:4E:16:20:FC:4B
            X509v3 Authority Key Identifier:
                keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:0b:ef:6c:1b:43:bb:5d:50:a1:a9:c7:f9:87:c5:56:7b:bb:
         4b:46:d2:da:47:91:1d:3f:7d:0d:4b:f8:20:07:0a:a8:06:16:
         e9:b1:2f:00:ce:7c:6f:0e:18:c0:7a:23:bb:01:4f:dc:bc:9c:
         7a:60:92:0b:52:a5:09:f4:74:c1:d0:7a:1c:3e:06:c4:c5:f4:
         32:1b:ea:09:2a:9e:b9:84:7e:02:c3:a5:96:ad:c9:d3:17:d5:
         e7:c4:39:8f:35:75:0b:89:fd:5a:96:67:40:df:17:0f:8d:79:
         4f:da:1d:26:35:0a:3d:ce:fc:e5:59:70:5e:b9:91:79:43:ed:
         c4:26:92:34:25:86:cd:e4:43:67:50:df:75:98:ed:7a:92:c8:
         10:ad:e9:3c:e9:f9:a7:17:cc:2d:2d:ae:c4:26:cb:90:a3:bc:
         2e:46:1e:de:55:5e:f8:35:22:9b:77:1b:e1:82:40:d6:16:c4:
         15:60:22:c0:2f:0a:ca:61:6d:bb:3d:3e:b0:61:d2:70:89:bf:
         18:6b:53:6d:f4:16:45:d7:2d:ca:b2:2b:cf:85:67:19:9a:48:
         e5:f8:57:cf:fc:75:d8:5a:00:08:14:d1:4e:4f:3a:63:5d:98:
         c2:35:ee:69:ba:c2:44:5f:2b:f2:22:54:a8:a7:79:90:86:38:
         ad:d4:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:53 2026 by rpki-client