Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
File:                     6D171A25D57FF823724FB6208343D200F64CBBB9.mft (raw, json)
Hash identifier:          YEix3yNcJHNdh8AUk8gHUTh8AeWHk9baBXG+WYt5+CM=
Subject key identifier:   44:52:7D:50:29:17:CD:63:0B:67:92:47:38:BC:94:CF:CA:98:A4:30
Authority key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
Certificate issuer:       /CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Certificate serial:       472A1182174FEE4B78F32578021641EEE626299D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 23:53:58 +0000
Manifest this update:     Thu 23 Jul 2026 23:48:58 +0000
Manifest next update:     Sat 25 Jul 2026 00:12:58 +0000
Files and hashes:         1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: opRYiyX8Gzxcov3p6XrBWNKwC4F/IpDzv8/YLsBUDfE=)
                          2: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: 2UjxxTGC1nNXBGbq1J0Vw32Q3bb9jyytfhNHGdS8EJk=)
                          3: 6D171A25D57FF823724FB6208343D200F64CBBB9.crl (hash: zPwq/NzaH+RC1skm4LhJwCt/jaQlow6S7321SglPkFU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
                          rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2a:11:82:17:4f:ee:4b:78:f3:25:78:02:16:41:ee:e6:26:29:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D171A25D57FF823724FB6208343D200F64CBBB9
        Validity
            Not Before: Jul 23 23:48:58 2026 GMT
            Not After : Jul 25 00:12:58 2026 GMT
        Subject: CN=44527D502917CD630B67924738BC94CFCA98A430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:a8:bf:18:66:bc:c5:76:08:af:3c:4a:0e:
                    a2:f3:de:58:a5:08:f5:46:f0:a6:ce:0d:47:4c:4f:
                    3b:c8:fc:1a:58:62:cb:4e:08:6f:74:7b:aa:72:8d:
                    fe:be:f6:a3:42:ac:58:d1:c0:ec:0d:7f:97:0c:19:
                    5e:bc:92:ef:d5:93:59:ed:02:39:2b:45:81:f5:ff:
                    93:54:2d:84:c7:8e:c1:34:12:03:3b:57:14:78:ab:
                    99:75:c1:94:48:1e:22:c0:8a:9c:31:c5:e2:fb:b8:
                    09:c5:3e:13:7d:35:e4:ff:b6:c9:2b:fd:00:f3:10:
                    e6:80:2d:93:fd:32:ae:16:cd:6c:02:a7:58:0e:bc:
                    5d:63:fb:dd:ec:d9:02:01:bb:e9:11:ce:7a:c4:1b:
                    57:29:17:80:43:ff:5f:a1:63:df:70:ef:05:af:54:
                    61:c5:5e:52:c2:af:eb:c5:91:b0:ab:dd:a0:5b:92:
                    c4:fe:bc:3a:60:1d:26:ae:3b:11:7e:c1:d7:51:3e:
                    9c:2e:3d:c7:97:a6:c6:cc:5f:8f:18:8f:24:8b:69:
                    65:0e:55:c0:50:38:e1:94:4a:70:be:a5:87:f1:84:
                    df:7a:08:83:bd:18:03:0c:98:4f:65:72:b7:be:58:
                    34:3c:e1:84:f7:8a:c1:d4:10:20:64:bf:b8:97:fa:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:52:7D:50:29:17:CD:63:0B:67:92:47:38:BC:94:CF:CA:98:A4:30
            X509v3 Authority Key Identifier:
                keyid:6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:a2:ff:a2:4c:eb:2f:28:5f:ee:b9:80:b0:6b:39:32:36:
         8b:99:8f:df:2f:6d:57:7b:9d:b9:a6:8b:bc:4f:a9:4b:22:77:
         a5:66:7d:d6:54:4b:69:2e:30:26:d1:5d:21:94:12:28:61:c9:
         4a:33:1d:bb:39:80:56:6b:00:88:79:5a:01:9b:6f:ef:9c:d4:
         0f:0d:c3:1b:c8:2f:1c:1a:d3:33:bf:b9:10:fd:e0:72:3a:a0:
         c0:d7:8f:2c:03:96:4a:89:e4:53:0d:12:9e:d3:b4:22:ba:78:
         6b:d8:8d:30:74:ad:9e:56:60:e6:0e:ba:d8:99:21:5a:db:43:
         1d:b6:49:f5:46:35:83:e5:69:5d:85:b7:05:d1:ba:ff:f1:28:
         ad:3d:8f:c3:45:4d:0c:0a:c1:17:9c:98:0b:a0:65:e4:40:41:
         4b:27:73:77:cb:57:da:36:27:23:14:19:7d:24:dd:0e:0a:50:
         b2:5f:59:df:20:62:8a:6e:30:a6:66:14:b1:58:5d:a9:85:59:
         3d:cf:d8:5a:a1:5d:f2:bb:e1:d8:c8:6e:7b:65:a6:f0:a0:8c:
         e9:8d:76:6c:5b:fe:f9:0b:fd:f7:e3:57:b3:e5:42:45:a3:16:
         e1:c5:e2:7d:d8:1c:c6:98:48:59:7d:51:77:19:52:2a:11:cd:
         b1:84:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:51 2026 by rpki-client