Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft
File:                     D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft (raw, json)
Hash identifier:          XRPRJjeYDsTnsGoHxh+fiDiXy1WgY9r3/MOgPZHqAOw=
Subject key identifier:   40:50:60:34:A6:60:E3:60:23:FC:5E:07:A1:91:C7:2B:C6:2B:90:AF
Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24
Certificate issuer:       /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524
Certificate serial:       52A09906E0A035571FA96DF78318371400415BB7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 02:52:45 +0000
Manifest this update:     Fri 24 Jul 2026 02:47:45 +0000
Manifest next update:     Sat 25 Jul 2026 04:58:45 +0000
Files and hashes:         1: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: B9uGziJoJ3vGf5NvgTMOSPQWAPSbs6/SbCQ1GHvUQS0=)
                          2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: bR+rHQrh2BbDBIEXZD76jtCgM3z29GB3K8OSA3PHxZ8=)
                          3: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: GMEzbs3Ig2nQxKeMH+leqKXvdoQrLyt3lFNSHrwIV3w=)
                          4: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl (hash: 6PMzF4O0qCvC1qVnq1hlvu0G3NKIcChuWACIEKJF6s0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl
                          rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a0:99:06:e0:a0:35:57:1f:a9:6d:f7:83:18:37:14:00:41:5b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524
        Validity
            Not Before: Jul 24 02:47:45 2026 GMT
            Not After : Jul 25 04:58:45 2026 GMT
        Subject: CN=40506034A660E36023FC5E07A191C72BC62B90AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:c3:b1:de:36:1d:5a:b1:0b:c7:5b:4d:04:
                    af:de:f5:05:9e:a8:2d:70:b9:10:ab:83:eb:ce:bb:
                    0c:58:16:9a:fc:14:44:b5:11:89:d1:e8:fd:47:4b:
                    ba:9e:29:7c:74:fa:93:d7:0d:32:d4:6a:11:e0:7b:
                    83:c6:63:e5:de:06:ff:27:24:99:0f:ce:17:f1:74:
                    f2:91:e0:ed:90:eb:d0:e5:80:0b:03:68:06:96:0b:
                    28:62:a8:63:20:c6:df:db:27:21:96:64:4b:cb:89:
                    46:4b:be:f7:f8:65:b0:56:6d:18:f0:24:ba:36:a8:
                    9f:d3:ac:7b:aa:53:fa:ba:07:41:87:ee:41:1b:47:
                    55:91:70:c8:e3:70:16:89:73:6b:9d:8f:57:a7:d4:
                    a7:1d:51:76:aa:5b:f5:4e:43:27:87:4a:04:e8:ba:
                    db:87:39:74:c0:88:b9:ae:70:c5:8e:73:99:31:24:
                    8a:d3:02:f6:1c:6a:2f:c4:66:d6:b9:e3:d0:72:09:
                    1d:5b:44:d8:2d:50:da:3b:27:52:71:34:08:a5:93:
                    5a:7a:2c:71:58:4e:60:03:05:5e:15:d2:7c:5e:6e:
                    96:37:35:93:22:cc:8e:c7:27:ec:8d:10:b2:b0:c3:
                    07:63:26:ae:4f:00:ec:15:76:f3:c2:b8:27:87:cd:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:50:60:34:A6:60:E3:60:23:FC:5E:07:A1:91:C7:2B:C6:2B:90:AF
            X509v3 Authority Key Identifier:
                keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:9e:d7:6f:11:fa:ce:66:2f:1b:9c:9f:50:a2:6f:7e:fb:
         17:11:42:26:9b:45:44:fd:f9:61:c6:c9:c5:5e:cc:d5:c7:75:
         b0:7e:c2:45:13:1b:cb:0c:de:76:ba:7b:59:39:41:b4:6f:23:
         a6:da:fb:62:97:1b:bf:12:ca:10:97:00:af:3a:c6:1c:9e:74:
         6a:28:12:59:fc:7e:21:32:01:34:1d:3f:f3:d1:75:62:d0:4c:
         da:48:15:35:b0:8b:cc:56:ff:52:cb:10:74:84:20:6c:dd:4a:
         30:bf:4e:eb:34:a4:c1:49:7c:33:40:f8:9b:d2:2e:19:d7:24:
         bb:9c:e1:58:a5:5d:ae:87:01:d1:2e:72:db:b4:36:db:15:fa:
         e4:60:af:d0:78:89:aa:2a:62:a0:50:c3:e0:45:1c:51:0d:7b:
         0f:25:49:41:f0:1c:8d:c0:d4:d8:83:77:f5:3b:02:5d:0e:26:
         95:16:31:dc:03:32:13:48:93:30:32:e7:82:b1:a8:f3:ff:12:
         55:60:2d:2a:f7:96:e7:18:b2:11:08:01:48:aa:f1:26:e5:d9:
         a3:84:5d:6d:23:77:df:5d:03:0d:06:47:2c:b0:75:3e:16:92:
         b6:9d:9f:e8:45:2b:48:75:e8:1b:66:b5:47:1d:d4:48:c2:38:
         4a:ed:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:48 2026 by rpki-client