Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
File:                     2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft (raw, json)
Hash identifier:          /srrJZPVvTBsDZIIfBNdm3BhuwvQgXB3bbNRuN7DuZA=
Subject key identifier:   B7:26:7A:73:1D:1E:4D:B9:F2:37:03:F0:5B:2E:27:DA:4D:4B:90:54
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       3A512E81A504C06944DF5EBE6578E9122044FFC3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 11:18:57 +0000
Manifest this update:     Thu 23 Jul 2026 11:13:57 +0000
Manifest next update:     Fri 24 Jul 2026 15:15:57 +0000
Files and hashes:         1: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: 5mZLoNgZhTm39U7OL1mXB6ctYVQTzYRY8BBmuLpMg4Y=)
                          2: 3230322e37322e3230372e302f32342d3234203d3e203538333839.roa (hash: WHBbJGZmdQKaYyhDTGiF9nJvtfUgtNB8fOyt7IgLmpo=)
                          3: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: 08R8uow6CkDSzpj8I0I6g9tHwsOaR/O2coPRJDLApcU=)
                          4: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: q93DQl+hjXIQfrcVhu9DN0JHvkzY8J25CxthuhIjous=)
                          5: 2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl (hash: voM+TXsJqnY9pRgvtaQXcBfB2LvPMuNSCPGNyRgBYpY=)
                          6: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: rYb9medyxCLAhcgseCZT0SUDS0jCzHAqSI7lOKhEDGA=)
                          7: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: 0VsRrjsdIFJeamY9VCTKavELmYTFS3ilP2PUztX74Uc=)
                          8: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: x2waDxAivuzwEakd8DLbazFG/EZswmywlTtLdaU69e8=)
                          9: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: 8elAsNukKO5kSDzzuWo1Aj5s9RVKBqJn0R9tAyalsQM=)
                          10: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 8TVATmR1OegECSp2IvjWnV4bX9F7cZu1ILCCYkpbkRs=)
                          11: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: FGoSsoOOffTNyyww3u8Ke14hUh1FetMzPI2ZAfmyzQs=)
                          12: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: wJ0OIiNjTdldfLYb19hTKZ+fKESqf6C7MeF3YvJI8Ys=)
                          13: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: I7aNpMfH7ZHP4Lp/vWgPFU8KVrb9zX35ePeEEjLzIes=)
                          14: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: F2TMv35JZK5AIuzdcDqCbXvGPGE/OVFOpnP/LxPgY6M=)
                          15: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: iby8iV2U2RE+gf7SXobV11P3/zgUaZgIeET+QYf6T1o=)
                          16: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: SCHe3hYSRhgevYCfCBUBkvtKm+wlGx7OZOfJDoM+cQk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 15:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:51:2e:81:a5:04:c0:69:44:df:5e:be:65:78:e9:12:20:44:ff:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: Jul 23 11:13:57 2026 GMT
            Not After : Jul 24 15:15:57 2026 GMT
        Subject: CN=B7267A731D1E4DB9F23703F05B2E27DA4D4B9054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:19:e9:84:42:aa:db:35:3f:72:ef:4d:c6:
                    99:55:60:1e:40:28:e1:59:d9:ee:76:9e:ab:f1:a3:
                    9c:73:c9:01:95:9b:9e:04:8c:17:4f:5f:50:9d:99:
                    e7:7f:40:17:52:6f:37:e3:7c:16:50:19:a2:ac:c4:
                    b3:c7:59:60:22:a6:55:1a:d2:1b:e1:54:d1:48:3b:
                    72:17:c3:a6:8c:73:2b:7a:8e:3a:8b:cd:43:b8:af:
                    00:48:92:f0:39:39:60:d4:83:57:ce:78:5b:df:b4:
                    e5:d5:a8:af:91:f7:64:8e:c9:71:5a:1d:a2:8a:29:
                    61:4c:e3:7d:aa:b7:bf:3d:60:72:11:53:05:3f:ac:
                    87:f1:a0:ba:2c:60:b0:fd:5b:8b:1c:aa:95:d3:bd:
                    ae:5b:d5:25:90:ac:b9:57:ae:f3:13:fe:8e:34:bb:
                    fe:13:0c:5c:58:ae:27:62:41:22:e2:06:f2:fb:db:
                    bf:c6:16:4d:a0:b9:a8:4f:b7:51:2a:7f:90:f4:72:
                    af:1d:6e:fd:2b:c6:ab:b7:04:ee:ab:1e:a6:32:f5:
                    27:00:3c:b9:34:af:c4:9c:ad:93:aa:3d:9d:1e:48:
                    0f:af:a7:6c:05:3d:7e:ef:26:23:f9:31:67:bd:0f:
                    74:4c:73:93:fc:d2:ac:c8:14:5e:56:b0:6d:87:9f:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:26:7A:73:1D:1E:4D:B9:F2:37:03:F0:5B:2E:27:DA:4D:4B:90:54
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:4d:0e:62:87:a1:f9:7e:68:58:1b:59:7d:fa:e7:35:59:7f:
         45:78:85:d1:2b:e6:a1:39:cf:d3:0e:b4:cd:a6:e7:be:24:74:
         9d:91:8e:aa:98:8d:a6:34:19:9e:f5:b1:10:82:14:a9:4b:f2:
         ba:c9:1d:93:7a:a8:b1:86:03:51:32:f8:4e:2f:48:46:45:f8:
         d2:77:0f:a0:43:86:3b:e1:72:00:d2:3f:4d:2c:3e:21:f2:10:
         28:75:1c:8a:b0:53:63:02:07:9d:6a:b5:07:c9:0e:3e:e2:93:
         2b:6f:26:c1:ef:ab:70:7a:1b:f6:59:c7:a8:15:ce:e3:73:cb:
         d3:44:ce:64:91:3a:87:a4:c2:c5:bd:1c:44:90:c9:e9:8c:af:
         7d:60:e7:e0:91:13:b4:61:84:dd:46:10:13:78:58:e6:ef:7e:
         0a:09:67:ff:4e:eb:6b:42:83:94:d4:2e:34:23:dc:00:88:35:
         30:34:32:76:3b:62:a1:96:3a:39:77:0d:17:48:5a:20:b9:df:
         68:26:8e:a7:17:77:fa:c0:d9:39:f0:fe:8a:88:c3:2f:d1:d0:
         bc:83:2a:be:4b:96:df:a8:7d:34:b4:f4:f8:bd:1b:c8:cb:55:
         53:53:c0:70:ca:64:b6:e0:68:41:12:c4:e5:7f:78:1a:cd:c3:
         c6:2d:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:27 2026 by rpki-client