Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
File:                     083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft (raw, json)
Hash identifier:          pMe0n0arRReQ3B8i7FfUuHIqlKCwssFZuIS7e3TdSqo=
Subject key identifier:   7E:6E:1E:55:60:37:F5:94:C3:F7:0A:5C:EB:0D:B3:01:15:D9:F7:29
Authority key identifier: 08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5
Certificate issuer:       /CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
Certificate serial:       19E866C8FA553DAD527FBFDC65AA1B68CBEBEB64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 13:06:01 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 16:05:01 +0000
Files and hashes:         1: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: Udq8GlzFIm/AvhcPc0cFCkf4+tnJ7nB5V9VbIrMM5Xs=)
                          2: 083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl (hash: qLYK+Rkc2o0s+8tusZ4tx8badDmlXgpZjkSBZ4Z8mtM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl
                          rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e8:66:c8:fa:55:3d:ad:52:7f:bf:dc:65:aa:1b:68:cb:eb:eb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=083743FDAF0807CCD8D2D3B936DE091676CAFCB5
        Validity
            Not Before: Jul 23 13:01:01 2026 GMT
            Not After : Jul 24 16:05:01 2026 GMT
        Subject: CN=7E6E1E556037F594C3F70A5CEB0DB30115D9F729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:a0:ef:c7:4b:43:c1:0c:1f:fa:02:b1:07:
                    c3:b7:b9:f6:f5:53:48:94:79:d3:32:55:4a:d4:0f:
                    a9:87:05:54:a3:8d:37:e9:3e:b2:d8:77:e3:8c:a8:
                    4c:43:90:50:1d:b3:d6:de:10:fc:55:f8:b6:e7:d0:
                    e2:51:bc:1b:d3:23:da:9d:81:dd:d7:37:43:dc:ed:
                    bd:51:2f:6e:f2:a8:6e:e6:c1:3e:31:42:a1:7b:82:
                    14:3c:2e:10:01:5d:87:43:da:7b:d9:b0:db:3f:b9:
                    a1:c8:f0:8f:78:53:38:5c:50:33:84:10:1a:09:4b:
                    53:67:00:72:de:4d:37:88:41:53:df:d9:83:1e:9c:
                    6c:9f:04:fb:3f:54:5c:84:da:56:ec:34:c5:4d:a4:
                    3b:64:c1:22:65:07:bf:76:24:0c:5b:ce:7c:a5:5e:
                    49:a6:1c:4c:66:c9:22:94:1c:74:8f:bb:e9:a4:94:
                    96:80:70:16:87:2d:09:f4:ba:3a:d9:28:fd:a4:bd:
                    ba:84:e5:f4:96:03:92:4e:f0:72:08:15:31:cf:4f:
                    90:0b:1f:dc:87:eb:31:99:f5:11:50:ab:67:31:63:
                    4d:ab:b2:26:89:1d:41:31:63:4e:28:3d:26:5e:49:
                    f3:25:7f:a5:02:e3:85:81:32:45:0e:2d:44:56:de:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:1E:55:60:37:F5:94:C3:F7:0A:5C:EB:0D:B3:01:15:D9:F7:29
            X509v3 Authority Key Identifier:
                keyid:08:37:43:FD:AF:08:07:CC:D8:D2:D3:B9:36:DE:09:16:76:CA:FC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/083743FDAF0807CCD8D2D3B936DE091676CAFCB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:30:b5:27:99:05:8a:50:22:7c:e3:e5:07:de:31:f3:50:c6:
         6b:7f:1a:57:58:49:9a:cf:32:ef:c5:2f:79:b3:b7:57:b1:f8:
         21:ea:e0:77:79:76:bb:cb:76:48:97:61:04:9e:c2:93:6a:4d:
         3d:fb:69:ab:22:3e:51:82:51:97:27:29:66:bf:1c:df:76:8d:
         27:04:82:71:06:ea:7a:09:f9:e9:77:dd:80:67:c9:0c:b7:bb:
         dd:28:e2:83:b8:9c:a6:ff:60:f5:f2:a2:3b:12:69:0f:01:71:
         50:03:82:0b:5c:b5:75:3e:20:f9:9d:78:de:4d:d3:93:cd:15:
         1d:14:f5:17:55:15:f6:c6:15:a5:97:a6:ef:ff:08:45:97:30:
         29:b8:29:c8:fb:2a:72:25:77:8a:5a:56:58:10:81:44:99:62:
         28:e0:6f:4d:2a:5b:8c:cc:f2:10:49:84:0c:a3:ae:e2:97:71:
         00:9e:99:75:6a:62:62:d8:0d:c3:9c:c6:ff:b9:c7:66:e7:43:
         8a:85:84:cb:a0:b2:9f:94:18:79:3f:0d:1e:ba:f0:eb:8e:cf:
         f0:45:f1:26:59:e3:4a:ad:84:16:b7:96:a6:c0:b9:6a:3d:4c:
         f4:0f:b5:81:4d:dc:e2:10:37:8d:ce:30:9b:26:e6:f3:05:dc:
         85:6e:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:04:58 2026 by rpki-client