Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft
File:                     B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft (raw, json)
Hash identifier:          lEqdOYFRCroBFLL1OiLQV+PiE/aIj+ag+zPVvIUUrUw=
Subject key identifier:   7D:E3:AC:2A:8B:A7:90:0D:4B:A8:13:85:26:D3:FD:FB:71:E3:9E:32
Authority key identifier: B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89
Certificate issuer:       /CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889
Certificate serial:       0FBEF5CAFC8F72834A236ED0AB67A8631696A73E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 00:04:08 +0000
Manifest this update:     Thu 23 Jul 2026 23:59:08 +0000
Manifest next update:     Sat 25 Jul 2026 03:08:08 +0000
Files and hashes:         1: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (hash: huLq2YMQLck+XmMqgf5+tIkuWDJY1pNSg4kGrXts0QE=)
                          2: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (hash: mPIkuQVE9R3LTUTej85wxcqgd13oKy/e6VbDwXPFIhY=)
                          3: B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl (hash: T3ZdK1tasZZsI2FndPk44YjHfxHK+U9Se/5v5Ab5Kmc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl
                          rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:be:f5:ca:fc:8f:72:83:4a:23:6e:d0:ab:67:a8:63:16:96:a7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889
        Validity
            Not Before: Jul 23 23:59:08 2026 GMT
            Not After : Jul 25 03:08:08 2026 GMT
        Subject: CN=7DE3AC2A8BA7900D4BA8138526D3FDFB71E39E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:db:c7:1e:bc:b7:54:6e:76:92:9f:c5:ba:
                    b6:31:09:df:08:74:ad:78:cd:b6:2f:4a:d6:e2:16:
                    a2:25:03:1c:be:2b:ee:99:0b:95:c1:7b:c6:ee:f8:
                    ee:bc:bc:5a:df:bb:3d:97:ae:d0:05:9d:d6:f7:65:
                    ef:5f:9d:75:6a:d9:d2:24:55:23:4f:78:68:08:66:
                    2c:0d:c0:21:a0:a1:0c:46:c3:0d:35:14:1c:53:d4:
                    06:2d:97:a6:45:a9:76:4a:e1:c2:54:57:45:e1:d5:
                    a9:c1:51:67:ab:4f:7a:f0:0b:5c:ae:89:3a:e5:66:
                    8d:b4:92:58:8e:d4:59:fa:12:57:fb:85:69:fc:4a:
                    87:c2:95:05:83:4e:7a:a0:f4:e6:a4:b1:2f:9d:77:
                    19:a4:48:81:25:18:c3:b3:7c:1f:85:42:aa:40:f7:
                    f3:4e:d0:09:1b:98:5f:34:43:4b:48:fc:b8:00:73:
                    df:74:23:e9:ae:49:37:31:91:9f:41:c3:1b:df:39:
                    3d:cb:f6:c0:6a:4a:84:07:51:a0:99:9f:d4:62:9f:
                    c8:b7:a6:73:25:d4:30:97:63:19:15:e6:9b:30:a4:
                    70:9b:da:14:bf:b0:72:9f:8a:ab:8c:04:de:90:20:
                    c2:78:dc:57:5e:1b:a7:97:77:bb:60:57:4a:e4:ce:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E3:AC:2A:8B:A7:90:0D:4B:A8:13:85:26:D3:FD:FB:71:E3:9E:32
            X509v3 Authority Key Identifier:
                keyid:B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:bd:a5:4e:48:4f:02:5b:69:55:14:10:8f:2a:d4:20:a1:d2:
         b0:d8:fd:1e:77:43:ee:e1:32:0d:10:8b:88:2f:a9:77:a1:e3:
         ec:6e:8a:ab:64:71:88:60:5d:c8:56:5d:b6:a0:d8:2c:ac:b7:
         04:f6:0b:2c:11:6b:20:ad:e5:c7:39:74:e3:f5:08:91:7a:c4:
         8c:18:44:75:ef:3e:de:98:37:d2:8c:41:67:20:4d:43:e1:72:
         4c:42:6c:3a:63:60:0e:5a:e7:96:03:0b:a8:ea:81:cc:d2:d0:
         ab:df:ea:35:a3:b8:4a:58:21:43:e0:19:f7:e3:7a:b9:0a:e2:
         15:e8:58:3d:2e:b4:f9:05:88:35:b7:17:8c:fb:ab:0a:31:a0:
         5e:3f:e2:2b:a8:65:8d:99:dc:bb:17:bf:91:7f:80:a9:ed:db:
         5c:ca:36:0b:16:6f:5b:4b:c6:e3:b7:2a:4c:bd:ae:71:d8:77:
         22:65:86:82:41:14:21:f9:11:3f:eb:8a:a7:02:44:13:b8:e7:
         49:59:af:53:ce:32:0f:a8:1e:ae:c2:a0:4b:b7:71:e1:0c:0a:
         81:d6:b7:36:92:7f:6e:f6:e7:4d:0f:4d:b8:55:36:c9:a9:92:
         14:06:d7:0e:5b:7a:0d:ca:9b:77:64:bc:52:93:16:7f:03:71:
         c1:08:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:37 2026 by rpki-client