Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
File:                     91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft (raw, json)
Hash identifier:          icByAGtMktiV6aADfYqWF3WAyYsfpKIYzklMC5jZEn4=
Subject key identifier:   75:6A:09:0D:8E:B0:30:2E:22:13:EC:C0:5C:DC:16:A0:88:CF:97:58
Authority key identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92
Certificate issuer:       /CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92
Certificate serial:       028BFB51747B92F32A32553DD222CD4AEEF727D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 00:39:56 +0000
Manifest this update:     Fri 24 Jul 2026 00:34:56 +0000
Manifest next update:     Sat 25 Jul 2026 01:54:56 +0000
Files and hashes:         1: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: yk1O5C1BOxz+IbSF0vGTgF2z9BWG6BcqwgclHoMMF8k=)
                          2: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl (hash: mq8DluNS7RiC0q6emcVPEmX41pgiYvMi7IDOdpEGnOI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl
                          rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8b:fb:51:74:7b:92:f3:2a:32:55:3d:d2:22:cd:4a:ee:f7:27:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92
        Validity
            Not Before: Jul 24 00:34:56 2026 GMT
            Not After : Jul 25 01:54:56 2026 GMT
        Subject: CN=756A090D8EB0302E2213ECC05CDC16A088CF9758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:f1:ea:e3:76:44:3e:dd:4d:8e:d1:1e:9d:
                    b6:90:2d:c0:c2:84:56:4e:dc:1b:6b:37:09:d1:2b:
                    aa:34:8e:37:9b:4d:22:04:1f:74:9d:74:fe:ad:58:
                    eb:07:5d:ff:ac:ba:07:14:1c:23:81:8d:65:cd:a0:
                    f3:c4:5c:a0:35:30:89:00:d4:44:cf:05:25:9f:95:
                    8a:f6:09:23:01:16:92:e7:cd:83:81:0f:77:05:e8:
                    d0:b5:e0:fe:e4:13:5a:8a:2a:26:26:9a:79:72:4b:
                    25:d5:66:84:d9:b8:13:28:b5:92:8d:3e:68:d7:57:
                    41:85:ce:03:3e:cb:20:4f:ca:d0:d7:23:41:51:fa:
                    02:ec:18:a7:86:39:4d:24:e0:fe:73:0d:a8:42:b3:
                    fe:08:47:37:0a:c9:fe:88:99:1b:ea:61:15:67:32:
                    d2:8a:9c:7f:a9:f7:85:58:cf:39:9a:04:90:e6:9d:
                    9e:07:67:91:7e:6a:34:97:c1:c6:ea:79:ee:da:ba:
                    11:1a:0d:af:10:64:5b:47:c8:60:05:67:4a:8e:67:
                    33:c0:7b:c2:a7:99:be:b6:8f:d5:be:cf:77:1f:51:
                    2f:db:28:d9:97:42:3d:84:04:d3:70:06:48:09:9f:
                    9c:f8:02:9a:1b:98:77:98:66:3b:8d:f9:c3:10:a4:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:09:0D:8E:B0:30:2E:22:13:EC:C0:5C:DC:16:A0:88:CF:97:58
            X509v3 Authority Key Identifier:
                keyid:91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7f:4b:1a:98:49:d2:2f:13:39:39:de:15:a3:99:25:30:01:
         38:5a:64:24:06:1a:5b:df:f0:4a:94:ee:24:19:a1:85:b1:52:
         27:47:e1:af:22:ab:c6:f7:20:c4:31:36:92:2f:d9:50:56:65:
         48:1b:3f:10:0a:9f:dc:03:ca:7d:f9:07:00:12:70:72:82:b9:
         2f:d9:48:46:3a:d9:c4:87:cc:d5:7e:a6:a2:1b:82:79:f9:44:
         ee:a4:a4:01:9a:9c:85:26:78:9c:2e:da:58:48:88:10:e4:5c:
         63:4d:86:00:8b:6b:66:a2:58:1d:46:f6:b7:38:31:55:fb:2a:
         17:cc:8b:b6:b5:95:af:44:29:fd:4c:d3:e7:60:22:a6:f1:09:
         0c:ac:eb:5c:46:48:97:19:5c:92:ba:fb:58:7e:38:d5:12:3b:
         d7:04:0f:13:c6:b4:23:c6:c9:a0:c3:1e:55:0e:9f:d4:0d:fa:
         1e:d4:90:37:8b:3c:49:99:0d:8f:1a:a0:60:8d:88:2d:75:f6:
         2d:d2:ed:81:da:75:0c:c2:30:e5:46:12:94:08:66:4f:f6:41:
         11:a5:5c:47:62:5f:6f:8a:02:ab:41:ee:96:c4:7f:44:c3:0d:
         aa:1a:9d:e1:39:67:72:42:ba:8c:bd:e7:92:5d:bd:49:93:e8:
         05:41:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:21 2026 by rpki-client