Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft
File:                     8B43E14BD4588C4904A641356A5D07D628190CAB.mft (raw, json)
Hash identifier:          /j7VrczWlJ6iBLyt4fEBiSYuGKIezky2Z4J2RTS+Rgk=
Subject key identifier:   71:B4:C6:F1:D0:FF:FF:FF:47:C0:84:CA:71:06:36:BD:96:89:C0:8F
Authority key identifier: 8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB
Certificate issuer:       /CN=8B43E14BD4588C4904A641356A5D07D628190CAB
Certificate serial:       3E45DE04E0A9D419837CB0143357E9E5335C6703
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 21:41:32 +0000
Manifest this update:     Thu 23 Jul 2026 21:36:32 +0000
Manifest next update:     Fri 24 Jul 2026 23:37:32 +0000
Files and hashes:         1: 8B43E14BD4588C4904A641356A5D07D628190CAB.crl (hash: iseRY9EVJPIXTXnRAlmLuwx/SpGBWzqwnnmPHWhhpBk=)
                          2: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: 0flsrdaSAjsWCJEWyeVcLLzCVtlFqOFqVNzD5e/gcuA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl
                          rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:45:de:04:e0:a9:d4:19:83:7c:b0:14:33:57:e9:e5:33:5c:67:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B43E14BD4588C4904A641356A5D07D628190CAB
        Validity
            Not Before: Jul 23 21:36:32 2026 GMT
            Not After : Jul 24 23:37:32 2026 GMT
        Subject: CN=71B4C6F1D0FFFFFF47C084CA710636BD9689C08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:e4:bc:ea:d0:42:13:bb:05:b2:62:49:d6:
                    a7:57:3a:39:02:a0:89:70:a7:8e:52:2b:60:c2:6c:
                    77:12:56:2d:b6:ab:d8:cf:d0:f6:a1:1f:e0:ba:6f:
                    1a:18:f6:bc:10:37:77:f9:35:2a:99:04:c9:71:6f:
                    7d:42:b5:df:27:50:43:7a:2a:51:1a:2e:37:70:30:
                    20:fc:d7:4b:58:79:14:5e:ed:17:4d:04:00:ad:ed:
                    3b:ea:49:63:f2:91:c2:b9:51:85:5d:f0:08:83:e5:
                    42:9c:ca:d8:7a:3c:cf:1d:a7:31:25:8f:f3:81:5b:
                    3c:78:8d:88:b7:30:b2:86:c2:9e:0b:29:fd:72:62:
                    be:a0:7c:f8:2d:01:2a:3d:36:8a:c0:17:de:e0:2a:
                    e8:ad:62:c2:30:b0:12:55:1c:c9:5b:ef:ec:82:45:
                    6f:01:0a:a9:5b:7f:ce:74:75:52:c7:98:b1:f0:01:
                    a2:f9:3f:dc:dd:7e:49:54:a9:ce:ac:66:1f:f7:b8:
                    82:05:5d:10:ff:11:73:ba:b9:a9:a1:57:be:0b:22:
                    80:a8:1f:40:10:42:04:ff:21:f6:e5:8e:09:a4:28:
                    7f:fb:c5:50:c3:2b:3b:f1:35:d3:ba:3c:24:9e:d5:
                    89:07:50:96:a7:c8:b5:3f:20:5c:12:d3:74:4c:2e:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B4:C6:F1:D0:FF:FF:FF:47:C0:84:CA:71:06:36:BD:96:89:C0:8F
            X509v3 Authority Key Identifier:
                keyid:8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7d:06:e8:db:73:81:99:36:ee:52:38:a7:2a:72:4b:3f:72:
         0f:05:5a:c2:69:c3:65:ef:a1:cf:bd:f9:be:7f:fa:17:ef:78:
         f1:3e:ff:57:aa:5d:10:f9:34:65:14:9d:18:f9:8e:47:44:17:
         b0:9a:b3:0b:a3:6c:ce:e3:a7:7f:f5:c4:3e:a1:11:42:82:67:
         52:fe:20:13:b5:77:6f:ba:39:dd:ac:fd:08:64:1d:51:9a:bc:
         04:34:55:52:5a:5c:3f:f0:3c:6b:19:2b:5b:70:3c:8c:bf:5a:
         ba:7e:08:e3:97:e7:c9:38:23:6c:8e:8f:56:63:8f:c3:fe:15:
         2f:ff:cf:1e:79:2e:c6:2a:63:35:6f:07:66:1c:3c:a7:0b:bc:
         ba:fc:b5:bb:fb:df:78:b5:4b:33:0a:14:f6:21:c2:af:75:2f:
         04:08:ae:f2:40:76:54:0e:74:e1:15:d7:00:73:41:04:4b:6f:
         ae:8e:2c:8d:d9:6f:40:7d:a6:e1:8e:61:54:0b:d9:11:0a:10:
         20:96:18:8d:31:5e:94:4b:05:c8:8f:60:ff:36:08:7b:8e:fb:
         b3:bf:f3:38:15:56:ab:42:a9:32:50:b6:c7:b3:fa:79:c1:53:
         d1:ae:9b:2c:cc:28:83:d2:fd:02:e7:ea:16:18:d5:20:b9:2d:
         2e:e1:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:37 2026 by rpki-client