Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft
File:                     A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json)
Hash identifier:          CWCopwrDb6aUclDvOJpA9ZP8P7QDTy1Lb0nj59X7J3E=
Subject key identifier:   B5:C0:FD:07:13:9D:47:B8:9E:DE:3F:ED:60:77:99:EB:4C:77:96:DB
Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5
Certificate issuer:       /CN=A9E3887289ED85663942126250F7D66CD58FE1F5
Certificate serial:       1A72D4E7F6F04F3FD24714737F953CF034F261CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 07:43:55 +0000
Manifest this update:     Fri 24 Jul 2026 07:38:55 +0000
Manifest next update:     Sat 25 Jul 2026 08:50:55 +0000
Files and hashes:         1: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: fHIU6/48FDBn9xIfqLS5W/9CtLCgCwRYcbJ5GmLo+l4=)
                          2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl
                          rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:72:d4:e7:f6:f0:4f:3f:d2:47:14:73:7f:95:3c:f0:34:f2:61:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5
        Validity
            Not Before: Jul 24 07:38:55 2026 GMT
            Not After : Jul 25 08:50:55 2026 GMT
        Subject: CN=B5C0FD07139D47B89EDE3FED607799EB4C7796DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:48:e8:e3:37:3c:71:e5:0b:57:ed:98:33:
                    ea:6f:02:a8:ff:a4:89:85:a9:ff:32:29:91:5d:d0:
                    2c:78:63:ef:f2:43:7d:eb:1d:d7:85:0e:56:a1:6d:
                    6d:45:a4:41:f7:32:e3:58:c0:ff:6d:64:c3:af:de:
                    4e:59:97:ef:01:a5:27:ea:79:60:96:92:09:30:ee:
                    46:45:28:3a:80:5c:f8:6e:0b:9f:61:39:3c:be:40:
                    6f:ec:5f:ad:4e:18:9b:2e:a0:d7:ac:e8:e3:6c:02:
                    ad:2d:ad:d3:7b:54:b6:09:d4:e0:b4:4d:93:e6:c5:
                    7a:a8:3b:3c:cd:81:17:ee:24:da:4f:1e:dd:8a:f2:
                    4b:b6:9c:b9:d3:3e:86:b5:c9:fb:3d:ae:ab:23:47:
                    01:3d:cb:08:69:13:12:05:32:2e:52:b4:58:68:0d:
                    af:e9:87:26:a9:ac:7d:07:ee:d7:11:e7:ec:1e:51:
                    c3:d2:db:7a:8f:23:0a:9f:41:4c:c1:22:c3:90:e4:
                    83:8c:cf:02:87:e9:e6:fb:3b:80:79:c8:e0:89:ff:
                    c9:b5:5f:a2:cc:c5:6b:14:56:b5:9e:32:7f:62:01:
                    38:ee:88:b4:23:f6:9c:57:61:67:59:9b:56:ed:e1:
                    1e:fa:32:4a:31:04:0e:ce:78:e5:31:39:70:e1:c6:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C0:FD:07:13:9D:47:B8:9E:DE:3F:ED:60:77:99:EB:4C:77:96:DB
            X509v3 Authority Key Identifier:
                keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5b:69:35:6f:a1:eb:a4:5c:6a:79:2b:24:9a:93:8d:73:ed:
         ea:54:26:c3:ce:5d:c2:b8:c2:c5:c4:16:3f:59:65:7e:ea:1f:
         a8:9d:66:d1:dd:41:02:99:ea:4f:f5:79:ac:9c:ae:c0:ed:99:
         22:5a:72:40:53:e1:70:68:40:99:c9:40:f3:24:21:db:d3:5b:
         cf:fb:dd:86:c0:c9:59:a1:80:f4:1b:02:72:80:d0:4a:df:19:
         61:09:38:34:c0:10:1b:72:1a:e0:82:ac:b9:9e:b7:d3:5e:70:
         0b:4e:e4:93:23:0a:e7:b3:2c:5c:09:64:fc:db:8b:c1:ae:08:
         08:40:63:55:2e:0f:87:d3:81:18:87:91:5f:1b:5a:06:7f:1b:
         55:4d:0a:0a:ce:71:57:53:54:b8:81:80:45:67:97:bc:6e:00:
         e9:12:78:2a:3c:e2:17:d5:20:9c:04:4f:55:40:30:49:9c:75:
         07:d1:0f:6e:72:e2:f5:da:69:1f:62:5e:95:5b:6e:50:4a:1c:
         45:e1:2f:d1:fa:62:a1:5b:77:d4:3a:40:f3:34:e0:88:85:7e:
         21:26:15:68:12:6f:f6:36:e6:e1:13:e8:2e:54:e7:76:d0:e2:
         25:7e:10:98:7c:f2:34:05:92:ac:3c:67:5d:d9:60:57:f5:7f:
         87:60:e7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:20 2026 by rpki-client