Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
File:                     53A00628F6956E756C477A3B4A12344C34B5F1A8.mft (raw, json)
Hash identifier:          GJGwFczzW1TLaMf/3zB7DeCTjlXZnKaoWnf3ajXxxPg=
Subject key identifier:   F3:DE:E8:13:AA:78:24:99:9C:19:A1:38:C8:82:92:5B:37:B5:58:52
Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8
Certificate issuer:       /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8
Certificate serial:       36067E9473E2C0CF3560532EA73280DBD3E7085B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 22:57:48 +0000
Manifest this update:     Thu 23 Jul 2026 22:52:48 +0000
Manifest next update:     Sat 25 Jul 2026 00:21:48 +0000
Files and hashes:         1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8=)
                          2: 53A00628F6956E756C477A3B4A12344C34B5F1A8.crl (hash: HATSyprcUAzp5U1bkQ9cSoFfXcZ4xQMCiVKdlSXXbfs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl
                          rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:06:7e:94:73:e2:c0:cf:35:60:53:2e:a7:32:80:db:d3:e7:08:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8
        Validity
            Not Before: Jul 23 22:52:48 2026 GMT
            Not After : Jul 25 00:21:48 2026 GMT
        Subject: CN=F3DEE813AA7824999C19A138C882925B37B55852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:83:3e:36:b6:36:1f:00:fb:2a:37:99:70:fd:
                    b7:67:48:dd:de:e6:d2:74:da:2c:9f:31:13:87:6a:
                    ae:4b:b5:2b:99:aa:2f:b9:ad:00:66:02:39:79:a5:
                    b2:7a:bd:9c:2c:f6:67:23:e2:f8:a1:f4:5d:ad:5b:
                    c1:65:3e:35:5d:fd:3b:2d:34:6d:92:f8:ad:a6:3e:
                    8b:05:07:16:11:a0:1c:19:6a:f5:b8:7b:02:91:7e:
                    d6:a0:ad:1f:91:5d:f7:c9:4c:9f:35:48:89:91:5e:
                    93:91:a2:83:69:f1:2a:d7:aa:bc:2a:63:7a:69:e9:
                    0e:c0:21:99:38:b6:f8:73:ea:4a:3f:b7:3b:da:68:
                    6d:f6:49:74:6e:80:03:25:33:76:bd:e2:fc:0a:bd:
                    98:76:cc:9b:47:49:2c:c2:e2:ad:d3:28:8d:5c:4e:
                    0f:6a:34:77:b7:bb:0c:cf:22:a1:4a:57:cc:96:23:
                    04:40:d7:22:1c:9a:a0:7d:6c:48:b3:56:cd:db:14:
                    32:48:4c:5d:dd:10:c4:22:6c:dc:07:e3:d9:96:31:
                    29:24:1e:a1:6f:83:6e:c9:7c:a1:93:50:fd:6d:27:
                    14:ad:2e:b2:75:fa:3a:51:9f:57:9c:27:c2:d3:a0:
                    41:52:21:32:ce:ad:af:27:49:d3:e3:9f:f6:79:45:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DE:E8:13:AA:78:24:99:9C:19:A1:38:C8:82:92:5B:37:B5:58:52
            X509v3 Authority Key Identifier:
                keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c3:0e:2d:16:41:9d:68:7b:04:f1:8e:3f:75:45:ae:3b:cb:
         d4:98:ae:13:62:b0:9b:88:8b:50:1a:0d:5f:2e:a0:68:6b:c6:
         59:97:e8:fd:81:d6:f5:1e:da:0d:75:79:0b:51:7f:68:b4:94:
         da:e1:3c:10:a6:be:64:9d:90:6f:cd:05:2d:ba:10:1c:4d:1b:
         8e:6c:7c:4f:3d:18:09:6f:38:03:9b:87:8f:64:0d:c5:0a:8e:
         b2:27:7b:fd:8b:93:5a:7a:c6:63:c0:4c:2c:12:6e:25:98:60:
         ef:0f:46:35:cb:b6:7d:62:46:2f:63:53:e2:74:e8:d7:8d:a5:
         00:8c:c3:0f:4d:a0:3c:c6:02:09:30:28:3a:d8:c3:38:92:7e:
         e4:cb:ef:11:72:7c:51:06:38:d4:93:34:d2:60:8b:ed:4c:19:
         31:96:5e:24:4e:eb:34:e6:02:95:95:c1:67:da:53:84:62:84:
         cb:d1:dc:6d:79:86:b0:67:7e:60:ad:48:d1:c0:48:4d:6a:0e:
         6b:a3:f2:bc:98:af:61:03:e1:dd:45:74:33:b4:38:bd:eb:14:
         10:de:37:b7:5a:2f:3b:ca:df:35:e3:f4:0b:1c:44:04:88:85:
         c9:6b:4d:73:7e:e3:63:ce:2e:5d:3f:fa:57:12:30:c8:b3:6e:
         b4:aa:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:08 2026 by rpki-client