Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft
File:                     BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft (raw, json)
Hash identifier:          7pzBgoVdHmCDgENbUAQJeJdQwvt/dTDIMLF2eqipgXU=
Subject key identifier:   B5:0E:E9:BF:B0:A9:48:7D:62:2D:82:08:54:24:08:0E:3E:9B:E7:4B
Authority key identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50
Certificate issuer:       /CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750
Certificate serial:       6DD99E2CB5632F6AF8F440C4CF519FED7E034320
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 13:41:47 +0000
Manifest this update:     Thu 23 Jul 2026 13:36:47 +0000
Manifest next update:     Fri 24 Jul 2026 15:22:47 +0000
Files and hashes:         1: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: bK2fsV+VK/o1aLXTk9/ke6JBkK1wOgjAm/5MH3N06d0=)
                          2: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: GxX5lfBpXcjqMmca1p8RO5KpzC5umjRU6XwnA7zvfuQ=)
                          3: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl (hash: m0s9YXt/WEvlAVAIKuoj186KOkFbXBshC0w+cLpQ2M4=)
                          4: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: P+tA2MRxWl0o3RHVswwy2Vb5fc9y+6/a967dCUK4/QA=)
                          5: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: 1yaaJ9G5o/7m18fGAiY33Sl2tkngDENHDH33T1CdcHc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl
                          rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 15:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d9:9e:2c:b5:63:2f:6a:f8:f4:40:c4:cf:51:9f:ed:7e:03:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750
        Validity
            Not Before: Jul 23 13:36:47 2026 GMT
            Not After : Jul 24 15:22:47 2026 GMT
        Subject: CN=B50EE9BFB0A9487D622D82085424080E3E9BE74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:6b:b6:69:c7:72:a5:b4:a1:7a:86:fd:b1:
                    f6:69:ab:ae:a4:3b:55:d5:d8:f4:01:19:7f:e4:14:
                    5d:1c:e2:9f:92:d3:ad:51:2e:e9:c0:da:07:d3:d7:
                    84:e2:70:81:4f:71:7d:50:50:c9:b9:7e:09:c1:cf:
                    b6:0f:5d:3e:b1:47:43:97:c5:2b:dd:55:08:d9:93:
                    01:4f:39:e6:e2:96:b2:4f:04:40:22:6c:91:f0:9f:
                    dd:22:1d:2d:54:bb:ad:9d:2d:65:8a:5c:e4:5b:4b:
                    ea:ff:0d:0e:a7:c2:c8:18:a3:89:a9:e5:37:77:ce:
                    f3:ae:e4:d1:70:9b:0f:44:20:80:86:df:98:08:81:
                    67:ab:ff:4e:33:e2:6f:6a:cb:64:1c:e8:e6:6b:f0:
                    3b:7a:3c:c3:9f:9e:03:72:bd:21:01:e6:b6:60:41:
                    2d:29:51:f0:ba:75:3d:89:ae:5c:ba:f8:8f:6b:b4:
                    ce:88:68:62:80:f8:5e:ca:24:ce:18:53:f4:9e:8a:
                    ee:ed:04:fb:c0:67:ef:a1:00:15:83:39:c7:3c:2b:
                    9e:93:57:90:e5:29:5e:05:70:c6:49:77:54:f8:78:
                    59:76:4e:d1:a3:e0:73:35:ea:e7:26:51:04:e6:12:
                    1e:30:e0:75:b1:fa:b3:61:aa:ba:15:29:2a:e1:6a:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0E:E9:BF:B0:A9:48:7D:62:2D:82:08:54:24:08:0E:3E:9B:E7:4B
            X509v3 Authority Key Identifier:
                keyid:BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:a4:4a:35:8e:61:99:a8:8d:5c:70:74:13:1e:ba:13:c8:
         1c:aa:8c:3a:a7:77:c6:d9:4d:76:f3:a9:9c:c5:ea:84:28:14:
         c7:e2:e9:fa:ad:69:55:e2:c1:ef:10:de:9b:9b:00:ce:71:b4:
         86:44:31:f6:15:fe:96:09:39:b5:ca:d6:ab:42:b3:b3:5c:d8:
         14:07:53:eb:18:0e:52:75:84:c7:8b:de:e3:5b:90:d7:30:06:
         83:5b:67:f7:4a:00:db:b6:07:e5:88:07:30:8c:84:c5:09:e3:
         d7:10:3d:23:8e:38:ed:8c:93:e6:81:33:bf:e1:d9:8d:43:8c:
         b0:45:f2:e3:71:5f:49:26:62:a4:c2:59:d6:88:b0:44:78:a7:
         3c:ef:93:71:af:cc:5c:8e:42:41:89:1c:f7:55:d4:bc:44:52:
         72:61:58:53:05:89:af:e5:9b:d3:d3:64:c0:9a:ec:0f:73:d4:
         c8:ec:aa:af:3c:6d:50:fc:6d:ae:17:d1:7d:fd:02:8b:06:dd:
         c5:23:2b:d0:ce:4f:50:e4:c9:6a:40:26:8f:38:1d:97:f9:f8:
         1c:36:12:9b:71:90:4f:9f:82:dd:db:c4:d0:25:8c:4c:96:e8:
         5b:21:38:7c:d4:fe:b1:ef:72:68:0b:15:85:21:a6:1c:93:f2:
         f4:0b:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:43 2026 by rpki-client