Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
File:                     9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft (raw, json)
Hash identifier:          tcOR7F/nqBGDGn5nBhX30fL0eivr6G+14JWJ4BnbXjI=
Subject key identifier:   5C:B3:73:8F:24:EF:8A:21:3E:05:A7:46:AB:ED:2A:7B:DD:B5:E2:01
Authority key identifier: 9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD
Certificate issuer:       /CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
Certificate serial:       4991FD7557E3A26E206D30365C6CF0F024F44AE1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 14:27:39 +0000
Manifest this update:     Thu 23 Jul 2026 14:22:39 +0000
Manifest next update:     Fri 24 Jul 2026 14:52:39 +0000
Files and hashes:         1: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: bTctqXrHoddHLmiHRZEAbvepwDnyNZuBmN3yjSF/QUg=)
                          2: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: eE9KfhHZMD39d40KbY7oSEFpRtTmkSjOZgjX7V3PP3E=)
                          3: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: ueytpOIHoXmrHTRXDms0z+mkyIFFMatKweHFitzqnbY=)
                          4: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: Yg7MUDs8e7RtjcON84BP67HQDd4RbJW/QQRbIefF+fk=)
                          5: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: evwEHBL+Efz58EUm4jU4ct9sLmawRVLDyaUcdYukI+g=)
                          6: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: XHc5XJ3BNfkaI/lsgwiIo3VZ/lOhS7oABSPc/TOM6ZY=)
                          7: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: wjQlJjUfkbt1n7Rc6SHSm1K1dY+H6SCMIIZnXPYbFUQ=)
                          8: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: 38Xm9PyU4xIsiex90hJwlQrnnXy77AnXzl8H3OHJdtc=)
                          9: 9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl (hash: uVcpvFFjs00s7wZKrfbNBpX5KGPg68egHhRU5vUmCYE=)
                          10: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: 7UHUG49KeSvdqIfX5Q2/sjN4aSqQC/7iFrJSNv+5Ax4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl
                          rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 14:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:91:fd:75:57:e3:a2:6e:20:6d:30:36:5c:6c:f0:f0:24:f4:4a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD
        Validity
            Not Before: Jul 23 14:22:39 2026 GMT
            Not After : Jul 24 14:52:39 2026 GMT
        Subject: CN=5CB3738F24EF8A213E05A746ABED2A7BDDB5E201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:26:fe:ec:f9:e8:49:2a:05:98:8c:f1:92:61:
                    6e:50:65:a7:a0:ea:df:cb:f9:cd:9c:5f:22:ff:19:
                    3e:55:9b:e9:51:90:06:20:09:72:4e:29:be:69:ce:
                    f4:6c:53:69:40:14:9f:a6:35:bb:57:79:fe:5c:53:
                    b5:d4:60:cf:04:ca:3e:42:ec:f1:58:d0:d0:55:0d:
                    01:4c:72:69:fa:b2:79:0e:d6:97:a9:d8:63:d3:96:
                    e4:e2:d9:84:48:a8:f7:28:87:7b:11:57:93:5f:18:
                    69:72:65:52:3f:84:9e:d7:b0:23:b3:61:83:34:4d:
                    f6:34:85:f5:02:0a:13:3c:bc:e4:3c:9f:34:3d:f6:
                    d7:bf:38:97:14:e4:e5:43:b9:1b:75:0e:8c:59:a8:
                    6d:df:b1:a0:59:81:64:6d:c7:b3:d9:9e:1c:a5:8c:
                    09:05:05:f6:68:5b:c9:8f:10:22:7a:27:3d:a2:bd:
                    b9:cd:cd:0b:16:f0:0d:a1:87:74:14:f5:2b:f7:a5:
                    e1:81:7d:33:f6:f0:b5:4d:c6:4a:67:f8:40:78:3a:
                    9d:24:1b:53:e2:1e:3e:5c:29:8d:1b:5d:30:36:0e:
                    ff:2c:00:82:40:07:68:8b:4c:ce:f6:9e:eb:27:5a:
                    b8:18:b2:3b:e8:6f:fa:4a:e2:e8:4a:28:f9:47:f5:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B3:73:8F:24:EF:8A:21:3E:05:A7:46:AB:ED:2A:7B:DD:B5:E2:01
            X509v3 Authority Key Identifier:
                keyid:9F:2D:47:C2:7A:04:66:64:7C:9A:8F:AF:24:6A:C8:5A:9F:2B:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/9F2D47C27A0466647C9A8FAF246AC85A9F2B1FBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:94:a0:4f:44:74:33:7f:43:55:d7:ac:9a:ba:98:f7:16:67:
         d4:95:09:0b:bb:2e:d9:ae:cd:ac:97:e7:61:bf:d3:b8:70:49:
         72:8f:a9:46:39:0d:59:f3:ab:90:0d:a5:24:fd:6d:72:b3:89:
         27:c3:98:ec:28:af:e2:d7:c2:b9:08:dd:c9:e1:50:33:fe:80:
         f4:b9:be:76:98:d0:9c:38:76:2f:2b:17:31:4b:67:04:70:5f:
         e6:be:eb:ee:a1:cd:ff:a3:1e:9d:5e:a4:4a:d6:f1:dd:60:0b:
         fd:b2:98:6e:60:aa:1a:aa:72:d7:2d:39:46:55:35:b7:f6:1a:
         89:82:ea:f3:02:54:05:a5:34:fa:fa:19:bc:af:cd:05:cc:14:
         6c:7f:18:10:e8:55:35:54:97:b3:a5:d1:0a:e6:13:5c:5e:cc:
         e3:6f:6d:80:e8:c0:e8:c0:ed:3e:ec:92:9e:45:01:f5:6b:a2:
         c8:11:c1:3e:6c:f7:0f:9d:57:0e:e8:4f:dd:98:93:92:e1:a4:
         ff:42:b3:10:a4:a9:69:52:2c:eb:b1:9f:84:f4:70:d5:3d:f7:
         0f:48:9c:8b:5e:98:79:78:5b:52:c4:30:c5:77:ef:2c:71:eb:
         e9:2f:42:ea:72:77:bb:ee:fc:e5:62:6b:60:70:4e:91:a8:b7:
         f9:07:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:15 2026 by rpki-client