Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft
File:                     CAEDA7AE02DCD4B182D96F433016148B66C99993.mft (raw, json)
Hash identifier:          kS9cRX742ttMbV5NkXPsws5Y0uBLCFFvDOGpvf7O0sI=
Subject key identifier:   28:E1:79:36:B8:E8:D8:60:B4:86:74:33:1B:E9:77:CE:F6:EF:51:81
Authority key identifier: CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93
Certificate issuer:       /CN=CAEDA7AE02DCD4B182D96F433016148B66C99993
Certificate serial:       02DB5C1FE638C6006AB12A69E6C7AF613C63AE5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 13:11:08 +0000
Manifest this update:     Thu 23 Jul 2026 13:06:08 +0000
Manifest next update:     Fri 24 Jul 2026 16:04:08 +0000
Files and hashes:         1: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: dGWYPEIN0OvivsS5tklp+El8kTIto83bjZq7fW6iScg=)
                          2: CAEDA7AE02DCD4B182D96F433016148B66C99993.crl (hash: qHlxyR1uq8rw9ER48T89xz2cI3XVvhWWSYcY/bMx3BM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl
                          rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:db:5c:1f:e6:38:c6:00:6a:b1:2a:69:e6:c7:af:61:3c:63:ae:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDA7AE02DCD4B182D96F433016148B66C99993
        Validity
            Not Before: Jul 23 13:06:08 2026 GMT
            Not After : Jul 24 16:04:08 2026 GMT
        Subject: CN=28E17936B8E8D860B48674331BE977CEF6EF5181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:c7:2b:06:f9:6f:50:e7:5a:e5:da:78:c8:
                    a1:55:29:1c:8f:a1:5c:56:17:86:a7:25:5d:b6:8b:
                    fb:4b:a1:e9:7a:78:24:e4:bb:9b:5e:39:dc:c4:f7:
                    03:0a:0a:f5:0d:de:a9:ce:95:57:18:80:3a:7a:d2:
                    7e:65:12:c4:8a:08:12:e5:63:b3:a6:d4:c1:71:11:
                    da:1b:6f:d0:23:8c:fd:ec:e4:b7:11:7b:3d:3f:2e:
                    24:76:b7:66:5e:41:d1:c5:95:f5:36:6c:1e:86:fd:
                    5e:00:c9:61:42:72:80:c8:7e:4f:72:23:d6:88:f3:
                    0c:c2:b4:9f:d6:ea:e7:6c:5c:25:df:00:6c:ba:ca:
                    95:af:7c:9b:cd:ba:c0:13:7c:02:8e:fb:94:9d:75:
                    80:f9:e6:5c:81:6a:c2:11:b2:7d:7a:1a:c6:10:14:
                    49:15:32:da:4d:d2:28:43:93:bd:1e:eb:ab:78:c5:
                    35:ca:56:a2:27:71:82:38:20:75:e1:18:f9:1b:2e:
                    d4:cc:9a:e4:53:ed:fd:79:ee:18:44:04:e9:12:31:
                    6a:24:f1:1e:9a:c3:37:64:8b:e2:11:98:76:70:05:
                    f6:6f:37:c7:33:ce:2b:49:97:f2:75:2d:80:41:9f:
                    0d:e6:d1:69:38:61:e7:ca:6b:86:78:fc:de:d8:1b:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E1:79:36:B8:E8:D8:60:B4:86:74:33:1B:E9:77:CE:F6:EF:51:81
            X509v3 Authority Key Identifier:
                keyid:CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:1b:4b:94:48:e1:50:e3:d7:e9:e1:80:20:b6:68:70:f7:69:
         14:94:fc:ca:f7:2c:59:6c:db:e5:0e:d8:8c:1e:ed:e4:1c:6a:
         00:50:89:80:9e:17:5a:db:2e:cc:b9:d1:41:ef:d3:7d:66:60:
         88:fb:02:19:d1:2d:47:df:76:d5:8f:e8:69:14:19:51:11:c9:
         46:46:6d:c0:bb:b3:de:80:0b:40:c9:1e:29:25:07:3c:ac:85:
         ec:2d:aa:a3:b8:93:6c:4d:3e:06:57:a4:a4:ed:b4:01:47:d2:
         4e:7f:6d:33:04:1e:5b:51:94:bc:82:36:be:04:1c:83:f9:f6:
         27:84:53:c6:1c:3a:2e:7a:68:76:3a:4d:5a:bc:67:bf:63:0d:
         24:57:95:fc:ec:87:da:d6:4b:4b:33:9b:55:72:ba:ed:80:16:
         93:6c:46:90:76:32:53:50:a9:f3:2a:1e:95:60:80:79:d9:7d:
         5b:10:2c:d1:4c:0c:39:4a:c7:37:74:38:0c:59:85:cb:99:dc:
         af:2f:25:f0:be:3d:f7:05:35:93:d5:77:62:79:61:67:d5:cd:
         9c:2a:af:7f:3a:b3:44:21:a7:73:3d:ad:9e:3c:0e:6a:95:89:
         f8:4b:ff:f1:38:95:7f:ef:96:a5:e8:27:e0:c6:39:aa:e8:f5:
         bf:af:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:40 2026 by rpki-client