Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
File:                     A241AC704BB26D3BB01102643E819AF4873EBFF4.mft (raw, json)
Hash identifier:          9YOr0aYXA5a3dDb2EiHMfbvhpR6dDiN/+7IBDPVrKhw=
Subject key identifier:   85:9C:FE:DD:B1:C8:83:D8:32:28:F4:48:64:3D:0E:34:67:D8:86:E6
Authority key identifier: A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4
Certificate issuer:       /CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
Certificate serial:       425A048A9057974A2F0673EB894F8D9362BE9E2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 21:56:45 +0000
Manifest this update:     Thu 23 Jul 2026 21:51:45 +0000
Manifest next update:     Fri 24 Jul 2026 23:50:45 +0000
Files and hashes:         1: A241AC704BB26D3BB01102643E819AF4873EBFF4.crl (hash: doTK8IaUVLD9fMZjR0s8wcZdfX72N/7PCzwJtT+vySw=)
                          2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: A0dq7gCpUZizRlTZxmyyhDpzPzM9JT/yiUa6QfFC4Os=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl
                          rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5a:04:8a:90:57:97:4a:2f:06:73:eb:89:4f:8d:93:62:be:9e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A241AC704BB26D3BB01102643E819AF4873EBFF4
        Validity
            Not Before: Jul 23 21:51:45 2026 GMT
            Not After : Jul 24 23:50:45 2026 GMT
        Subject: CN=859CFEDDB1C883D83228F448643D0E3467D886E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:23:a8:d8:df:56:c3:2c:bb:1d:db:74:c3:
                    a5:2d:98:1e:45:8a:b0:a9:a7:6a:31:ee:a2:71:98:
                    46:0e:fe:ec:b4:e7:74:8f:0b:6b:b8:12:a5:d8:24:
                    86:db:71:2e:a5:1d:5a:2c:e8:48:04:96:e2:9b:fd:
                    ef:fb:4d:38:c3:a8:5e:d1:d9:f7:cf:22:4c:b1:ae:
                    e8:ee:25:dc:a5:35:93:29:2a:ad:ef:a0:67:dd:af:
                    46:64:5f:17:c6:e4:d5:c5:9e:c4:e9:1d:aa:9a:73:
                    d6:78:b9:14:10:92:f5:e8:55:f2:67:d5:a5:46:77:
                    fe:ce:d9:d8:d3:d9:29:b0:95:20:dd:28:48:90:70:
                    a6:e1:a5:e7:41:81:19:23:1d:7a:44:5b:35:ae:02:
                    4b:e3:14:70:c8:fb:b3:e5:83:8f:54:b9:46:3a:0d:
                    bd:51:9d:c6:43:d8:ed:6c:5c:49:99:16:fc:63:d2:
                    66:4e:ad:f3:c4:43:fa:6d:d2:d1:b3:2c:ef:17:96:
                    4e:33:cb:91:23:de:94:47:d2:bf:b9:8d:49:45:5e:
                    b4:6d:81:f1:9c:a7:df:4e:39:f5:de:87:08:5d:bf:
                    6f:7e:c3:59:cd:26:6d:5d:c3:02:a5:49:14:13:39:
                    62:fc:55:c0:00:37:02:28:e7:e2:ab:3f:e5:62:7e:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9C:FE:DD:B1:C8:83:D8:32:28:F4:48:64:3D:0E:34:67:D8:86:E6
            X509v3 Authority Key Identifier:
                keyid:A2:41:AC:70:4B:B2:6D:3B:B0:11:02:64:3E:81:9A:F4:87:3E:BF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A241AC704BB26D3BB01102643E819AF4873EBFF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/A241AC704BB26D3BB01102643E819AF4873EBFF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:ad:28:f8:64:03:4f:c6:fe:51:6c:2e:5f:0e:b9:82:3f:
         b0:39:fb:91:59:57:d0:94:d7:99:b7:86:c2:dd:e3:39:4f:f7:
         d8:a6:f1:15:51:09:99:d0:d6:08:ee:db:3a:d6:35:b4:b4:d6:
         c8:90:3e:f7:30:d1:72:c2:c5:6c:20:f3:f4:78:31:88:77:51:
         98:4f:33:50:40:5f:22:8c:2d:57:7b:82:72:fe:65:59:86:a8:
         0f:0e:86:0c:df:18:a8:71:7e:a5:86:74:7b:c3:4e:91:63:91:
         b6:48:1f:50:2b:15:b8:c6:57:7d:0c:e7:4f:41:42:63:41:e2:
         a0:03:0a:c7:17:a4:1f:87:cc:00:af:fb:5d:8d:d4:5d:15:59:
         ae:7a:12:33:4f:63:5f:19:76:76:16:be:7f:12:e4:f2:db:a9:
         e8:bb:86:b8:a5:d7:f2:ad:8b:a1:ce:2a:23:04:49:e7:38:51:
         a1:8a:45:dd:04:29:54:e3:c1:5b:16:4a:8d:b4:9b:76:55:3c:
         1f:6e:61:10:4c:5a:2a:5c:5d:f4:25:c3:0f:51:11:c7:0c:f2:
         f7:c0:0d:72:97:db:b0:c8:7c:96:83:38:91:86:07:fa:b9:71:
         c9:be:c4:d3:b7:43:a1:cf:b3:da:9b:96:df:df:da:9d:8b:ac:
         28:b2:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:40 2026 by rpki-client