Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
File:                     C17D911AD672A9E8EF418B68655CA512262D505A.mft (raw, json)
Hash identifier:          LLsY5RMcDdQE/7wQZKj8ZVCFjJBnzzdoYsl6bKxgd28=
Subject key identifier:   C8:90:C2:52:7D:D8:32:07:65:6D:77:60:22:5E:84:F3:03:B8:C1:96
Authority key identifier: C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A
Certificate issuer:       /CN=C17D911AD672A9E8EF418B68655CA512262D505A
Certificate serial:       7B9B1A12802E399CAECE7C63AA47BF56C28166C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 22:12:02 +0000
Manifest this update:     Thu 23 Jul 2026 22:07:02 +0000
Manifest next update:     Fri 24 Jul 2026 23:11:02 +0000
Files and hashes:         1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: 0+S90gnBbogSaKTlt2isB6tdizuU0JZG2EtWgwTn2ys=)
                          2: C17D911AD672A9E8EF418B68655CA512262D505A.crl (hash: 44WnbO4n6bPo4InlixGbV0NVo1UR3LLbfvSw7Bf2zBQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl
                          rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9b:1a:12:80:2e:39:9c:ae:ce:7c:63:aa:47:bf:56:c2:81:66:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C17D911AD672A9E8EF418B68655CA512262D505A
        Validity
            Not Before: Jul 23 22:07:02 2026 GMT
            Not After : Jul 24 23:11:02 2026 GMT
        Subject: CN=C890C2527DD83207656D7760225E84F303B8C196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:e5:bd:f6:d7:47:d4:0d:65:00:a6:d8:bc:
                    30:bb:ea:e2:c3:cb:35:f5:6e:91:2d:f9:8f:bc:66:
                    52:af:eb:b3:b7:e5:96:91:0c:68:20:c4:fe:92:62:
                    a9:df:32:f3:21:f0:08:7d:63:15:31:fc:77:57:d1:
                    aa:6c:4c:68:a6:d2:e8:66:02:24:8f:ff:94:0b:2f:
                    6f:f9:6e:61:e9:3f:d0:6e:b7:f4:cf:aa:b3:56:63:
                    8a:a0:d4:25:19:2a:e6:09:68:67:4c:f2:f0:cb:6f:
                    23:3e:e8:59:31:45:a1:a9:5b:aa:40:49:83:9c:13:
                    ab:fe:fc:af:2e:fd:a0:d7:8e:29:46:4e:c5:c2:99:
                    55:92:78:df:9e:c1:17:6d:7d:ef:bc:c6:b6:3c:4b:
                    d5:1b:76:5f:cb:87:9f:07:1d:1c:92:5e:91:cf:31:
                    45:e8:6e:a2:43:6a:f6:f0:33:44:a2:e5:bb:8f:9d:
                    44:94:90:59:a7:ce:9d:28:0e:38:81:84:e5:6d:7e:
                    a9:b7:cf:d2:83:a4:4e:0d:4e:09:bd:7e:91:5c:72:
                    a6:9d:0a:c0:2f:e6:93:34:63:e4:62:76:a5:0c:c8:
                    9b:33:71:0a:cf:2b:7c:a7:19:90:01:7b:df:e9:1b:
                    1a:82:2c:0e:67:b1:12:3e:e9:5d:36:85:46:95:33:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:90:C2:52:7D:D8:32:07:65:6D:77:60:22:5E:84:F3:03:B8:C1:96
            X509v3 Authority Key Identifier:
                keyid:C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:6b:53:e3:c3:e4:0e:b4:2f:48:46:62:24:0f:7d:2e:98:29:
         98:9a:e4:c6:43:e9:57:2a:58:69:46:64:ef:80:27:a9:17:1e:
         b4:e7:e0:d6:32:1a:c5:41:0c:2a:60:e7:fe:02:a6:c8:1d:07:
         9a:48:bc:52:dd:be:24:fe:7d:30:47:ee:4b:11:12:9c:13:3e:
         ae:9c:e4:1b:7d:43:39:76:21:75:33:42:57:4d:21:cc:92:cd:
         30:92:38:a4:60:b8:a7:c0:2b:8c:d2:be:88:a6:eb:c0:8c:53:
         da:60:40:85:7d:5f:92:4a:e6:1e:6b:f4:a2:66:b3:1e:5e:55:
         a6:87:1a:3f:52:ac:0b:2e:49:0d:91:3e:f8:72:b4:8f:76:9c:
         8e:f4:f9:d1:40:04:24:12:0e:36:6d:75:4b:e2:a8:fe:5e:35:
         ba:94:2c:c7:c6:bb:44:8b:61:a8:da:8e:7e:a0:18:5f:92:69:
         84:73:4f:91:8f:84:be:18:fa:b5:92:cb:76:e8:3c:98:76:88:
         21:d1:fe:7f:57:06:b4:2b:be:e0:88:5e:e7:25:d2:0b:0a:56:
         7e:c8:1a:a4:80:83:ab:97:5f:f0:ad:03:67:12:a9:85:d4:07:
         2b:d8:dd:cd:cc:06:2f:d6:8a:80:94:5f:a2:3f:3a:4a:ec:72:
         bc:ea:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:22 2026 by rpki-client