Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
File:                     883664DA613C9067C8155436693AEF1A82B3B1A7.mft (raw, json)
Hash identifier:          C+YezvYZKt67rCvt5lSBzDH3+4Au22pGsbKXHEfzzcY=
Subject key identifier:   05:DB:16:39:2A:05:7F:1D:6A:7D:CD:9F:3C:22:7A:C8:6B:50:7C:C9
Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
Certificate issuer:       /CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Certificate serial:       2FC5B1A3842F26C4B171BD124F5988F5EA7BD3DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 04:45:16 +0000
Manifest this update:     Fri 24 Jul 2026 04:40:16 +0000
Manifest next update:     Sat 25 Jul 2026 06:23:16 +0000
Files and hashes:         1: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: lsAH30jSOhgM8OAAJtXdQCjaCWk5sZqIYZ6QuMuRymM=)
                          2: 883664DA613C9067C8155436693AEF1A82B3B1A7.crl (hash: oMB30n6qy0SzBsjiHOpRS66qfq0wAR/D+1Q+tcBQMKQ=)
                          3: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: ETbLJXXcJM3Uqzm41+hqN5GkUeg2ajdJtzrh7tkT7pM=)
                          4: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: Yz7WTJdxRW1CYrN9boz8edyp4I9Scuuedk3B0vEsAGc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
                          rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 06:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c5:b1:a3:84:2f:26:c4:b1:71:bd:12:4f:59:88:f5:ea:7b:d3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7
        Validity
            Not Before: Jul 24 04:40:16 2026 GMT
            Not After : Jul 25 06:23:16 2026 GMT
        Subject: CN=05DB16392A057F1D6A7DCD9F3C227AC86B507CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:64:98:97:61:df:c8:8c:f9:49:73:1a:1f:93:
                    0b:a2:1f:b3:69:dd:2d:18:55:b2:48:2f:31:11:fb:
                    52:a7:3b:a6:d7:b8:79:06:d1:80:2c:c5:00:f1:ae:
                    90:37:b8:66:f4:bb:4a:9b:8b:9c:59:c6:59:a8:45:
                    2f:13:e3:c8:c0:a9:24:12:a9:da:53:7b:05:7b:95:
                    a5:d1:0d:0f:6b:7a:c1:01:cd:ea:92:10:4d:34:7b:
                    a8:89:53:7a:58:bf:a6:e4:f8:b9:76:36:2e:10:ec:
                    06:e8:85:38:3b:9b:e8:4f:59:04:5c:ef:df:c9:71:
                    5e:7d:0f:2c:90:fe:f0:30:e7:77:38:55:7b:07:ca:
                    b6:e4:c7:ed:62:87:c0:e4:53:d2:86:66:56:21:05:
                    a6:03:9e:e6:bd:09:73:79:0c:7a:01:b0:95:8d:e7:
                    c4:4d:d7:2b:2f:b2:b1:59:33:37:34:0a:b1:30:05:
                    59:bc:34:ea:18:7c:8d:e1:d2:b7:20:8f:c9:ad:1d:
                    84:64:38:a3:89:8b:9f:d6:fb:4d:50:c8:8c:dc:49:
                    b1:4b:90:6f:b9:28:ef:f5:d9:06:b0:bc:20:34:02:
                    52:7f:16:d3:87:8f:2b:f1:dd:29:f6:fa:60:52:f3:
                    97:98:ce:87:b7:b7:08:93:35:ad:b1:3c:31:7f:71:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:16:39:2A:05:7F:1D:6A:7D:CD:9F:3C:22:7A:C8:6B:50:7C:C9
            X509v3 Authority Key Identifier:
                keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a3:93:70:dc:25:44:65:68:0b:d6:e3:4a:37:e2:53:21:cd:
         ca:62:4c:a9:b5:b1:9e:6d:e9:7e:d6:5f:3c:e3:8c:e0:f9:85:
         a9:50:39:d8:be:00:6f:69:fd:95:41:22:27:c1:cf:de:24:02:
         f9:e0:4f:bc:b2:d6:27:b7:5b:81:1c:13:82:fd:7c:98:35:cb:
         82:04:ef:30:09:fc:46:c9:5a:45:24:35:75:6b:95:6e:5b:19:
         13:23:e6:af:84:f1:f9:f3:84:43:ec:36:c7:47:8b:77:3b:7c:
         1a:5f:dc:22:f7:bb:e1:15:48:88:c9:fc:f6:f0:66:b4:b4:bd:
         3d:8c:21:aa:46:51:86:3a:3e:cc:7c:0a:68:8f:74:29:15:98:
         1e:17:85:4a:93:3b:89:e8:2f:ba:b9:bf:52:a2:c9:72:d8:ca:
         36:bc:98:52:08:34:fb:e6:a7:cf:05:ef:33:07:10:b2:c9:98:
         7c:1a:a2:81:aa:d2:d3:17:8d:f4:d6:17:99:e4:51:52:45:c0:
         9f:c0:b1:88:82:54:cb:2a:bb:1f:2e:6b:bc:c0:13:06:ac:da:
         f6:13:55:ff:b9:4b:30:cf:3c:b1:65:10:41:f6:db:e1:af:89:
         44:22:20:da:d7:79:86:60:1e:65:b2:fb:64:27:fa:4e:ec:1b:
         c9:a8:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:34 2026 by rpki-client