Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft
File:                     8F6B228755F970273B8D779247A1AE56FE0C9587.mft (raw, json)
Hash identifier:          3gBrglma1agQJRoxvg7YVna+ShwavNeHyHN2DBPU2GE=
Subject key identifier:   83:DC:70:5B:8A:F7:F5:CF:79:6B:70:61:1B:90:E1:75:F6:C7:EC:33
Authority key identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87
Certificate issuer:       /CN=8F6B228755F970273B8D779247A1AE56FE0C9587
Certificate serial:       07BD794B83D31D0E971D73EF26EBF882BF6FB207
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 18:58:17 +0000
Manifest this update:     Thu 23 Jul 2026 18:53:17 +0000
Manifest next update:     Fri 24 Jul 2026 20:31:17 +0000
Files and hashes:         1: 8F6B228755F970273B8D779247A1AE56FE0C9587.crl (hash: jqdioDtlgOqaZFANM+7N1TL66M/6cuhu6QMW59y/D8s=)
                          2: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: ZGy+loCXTZu4lKXZ9Xy1tyQd/a/a5ZNJkzDyvD+H2Qo=)
                          3: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: Xy8vvuZlhVSnjTAKWEI2yBt5W17a07XY3wxdN0sfnOc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl
                          rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bd:79:4b:83:d3:1d:0e:97:1d:73:ef:26:eb:f8:82:bf:6f:b2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F6B228755F970273B8D779247A1AE56FE0C9587
        Validity
            Not Before: Jul 23 18:53:17 2026 GMT
            Not After : Jul 24 20:31:17 2026 GMT
        Subject: CN=83DC705B8AF7F5CF796B70611B90E175F6C7EC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:d9:6a:59:4c:93:e0:f9:c2:01:85:ed:26:
                    78:ff:e4:85:96:ed:06:0e:f9:26:d6:bd:e0:14:56:
                    51:5f:a3:8a:b4:f5:e9:b3:fc:77:d5:98:8f:e4:4d:
                    cc:08:8f:7b:f8:df:94:7f:65:45:c6:1e:38:c4:ff:
                    26:88:94:85:62:1d:d5:45:da:f2:4a:d1:ec:cc:e7:
                    02:94:f8:fa:71:4c:f9:cb:e4:ad:76:14:18:76:cd:
                    8c:0c:01:4c:0b:29:8f:fa:93:b9:31:91:d2:ec:5c:
                    c4:7b:3c:c2:de:51:8b:0d:79:43:a8:bc:bb:59:31:
                    b6:05:6e:86:b6:e0:2e:99:34:0d:0a:b8:62:c9:2f:
                    4e:cf:f5:51:e8:57:d5:c2:35:65:b7:d9:29:cc:73:
                    29:1d:83:c9:62:b6:81:01:43:0c:0b:3e:6f:81:d9:
                    05:dd:6a:1a:b5:86:d3:d3:53:d0:8d:c1:df:b4:8b:
                    75:48:60:b5:dc:e0:d7:f7:bc:5f:c2:f7:2b:99:98:
                    fb:8a:8b:39:a6:c3:73:1e:3c:b3:ac:a0:75:df:77:
                    75:97:47:39:c0:71:ec:5f:b5:32:1c:2f:48:12:a0:
                    b2:11:3b:3b:00:c5:a5:24:8e:39:5a:af:92:7a:4c:
                    95:4f:6e:e1:27:80:6e:97:7e:0f:8d:c1:8d:6f:7b:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DC:70:5B:8A:F7:F5:CF:79:6B:70:61:1B:90:E1:75:F6:C7:EC:33
            X509v3 Authority Key Identifier:
                keyid:8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:40:71:67:60:4e:64:8c:53:5c:a2:d0:d3:2f:78:06:1d:d9:
         de:7e:f1:ad:bb:f6:e2:7c:6e:45:2c:cc:a2:2a:84:3c:ce:06:
         8d:f8:52:35:4e:bd:4c:b2:56:28:b8:db:0c:aa:85:53:a0:c5:
         e2:81:6e:92:d1:ea:c1:13:54:2d:4e:4d:22:ca:6b:f2:e2:62:
         94:ba:96:6e:e6:64:16:73:51:49:44:ac:e6:c1:3a:84:55:c6:
         4c:78:7c:c6:8e:db:0d:4e:5b:8d:74:12:77:76:47:59:36:b7:
         2e:ee:29:5e:6e:67:2f:c7:71:d9:6f:24:e6:41:37:6e:3e:77:
         b3:fd:a5:98:ff:5b:e6:24:15:f6:5f:ba:68:33:10:ac:6d:e8:
         9e:c4:98:6f:4e:94:1f:5a:4c:f5:60:97:79:03:2b:60:19:b3:
         61:a3:e4:45:fe:ce:6e:a4:b1:a0:f0:44:a6:54:af:f6:d7:2b:
         83:6a:62:74:40:75:da:18:ac:f3:d1:66:9f:5b:3a:b2:15:f2:
         e5:f5:3d:9c:c6:02:75:6d:84:1e:46:5a:4b:35:14:2c:63:95:
         67:69:46:f4:30:40:59:eb:41:97:f7:1d:de:91:e0:ef:04:2e:
         30:92:5f:02:dd:fa:fb:c2:b3:26:07:fc:48:bd:14:6b:57:f2:
         8e:9b:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:50 2026 by rpki-client