Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
File:                     340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft (raw, json)
Hash identifier:          dwMyjdidaUKatZLBzsgLlA+EDAEJhjX7Vkh8cckQjYk=
Subject key identifier:   31:CD:02:7B:6F:18:B1:E8:C7:2D:4A:6A:68:27:54:E8:5B:D0:C2:69
Authority key identifier: 34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F
Certificate issuer:       /CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
Certificate serial:       433F54F0C92D45B1A68D5A066135EC61CAE1879F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 07:43:54 +0000
Manifest this update:     Fri 24 Jul 2026 07:38:54 +0000
Manifest next update:     Sat 25 Jul 2026 11:29:54 +0000
Files and hashes:         1: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: QuJkYaezAKdTxcWr+l4aySjRA4vLncuY75qiXrBgtBM=)
                          2: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl (hash: oEtl1kQSHvHLyaBse9GcquznLGuXrNA8qsjJf85v/zE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl
                          rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3f:54:f0:c9:2d:45:b1:a6:8d:5a:06:61:35:ec:61:ca:e1:87:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
        Validity
            Not Before: Jul 24 07:38:54 2026 GMT
            Not After : Jul 25 11:29:54 2026 GMT
        Subject: CN=31CD027B6F18B1E8C72D4A6A682754E85BD0C269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:6b:f2:10:83:f9:17:88:3e:b1:85:12:18:
                    38:d0:4c:c2:b2:18:f1:88:bf:46:69:f1:be:4d:84:
                    39:02:83:eb:57:1d:a8:a8:d4:36:e6:ac:e8:a9:1d:
                    03:3e:01:c9:32:37:5d:0c:d0:6b:31:c8:3b:05:3a:
                    b5:5b:a2:d7:a2:21:e8:2b:13:77:b1:e8:b6:51:96:
                    78:42:d2:e9:70:79:2b:d4:bc:9f:fd:ac:aa:19:be:
                    b4:68:b2:59:bc:78:d8:b4:9c:33:88:07:a5:2a:92:
                    05:5f:82:f0:05:da:3a:85:0f:56:32:e1:ca:11:ec:
                    fb:7e:23:94:1b:71:60:b3:8d:57:18:61:d6:f5:41:
                    c7:a5:20:ae:48:5b:9d:f5:78:06:37:72:24:ca:b9:
                    a6:f9:33:50:01:11:05:6e:ea:96:5e:84:e4:d2:7d:
                    d6:9d:a5:36:89:33:b9:5d:a3:e8:c6:0d:85:98:e6:
                    8f:36:4e:15:10:b3:1e:6c:3a:ae:8e:e5:0f:98:ab:
                    0f:27:be:db:c1:c6:f1:eb:a4:8a:de:78:96:e7:9b:
                    02:91:be:7f:3f:27:97:81:ff:a1:c1:3d:7d:ad:20:
                    1a:34:a9:33:96:4e:45:96:32:ef:f2:0d:77:cd:de:
                    69:f0:1a:90:ae:b2:c9:43:26:9c:17:75:10:64:40:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CD:02:7B:6F:18:B1:E8:C7:2D:4A:6A:68:27:54:E8:5B:D0:C2:69
            X509v3 Authority Key Identifier:
                keyid:34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:74:49:5e:42:d3:ff:83:87:48:83:3a:a1:c9:70:8f:e1:cb:
         6a:3b:70:6a:02:d4:ec:7c:e3:9f:5f:e8:17:07:7f:1e:e8:cb:
         43:dc:76:67:22:44:89:ae:f3:ad:f0:c2:85:a4:b4:a4:bf:86:
         1c:c9:dd:a4:80:eb:50:0f:51:3d:63:96:16:f8:ea:86:39:5e:
         67:00:3b:a6:ba:d6:c3:30:4d:ff:72:51:0d:f0:90:5f:66:6a:
         b4:0f:79:24:81:ee:8d:8a:c5:98:b2:db:38:94:01:d0:94:f5:
         b6:59:96:19:73:16:f9:b7:c4:8b:52:a6:7e:85:c7:f1:e1:48:
         70:1d:3b:ac:1a:45:5e:09:42:91:50:50:52:23:1a:5e:4d:5b:
         a8:47:a6:5f:2c:e0:cf:cc:41:b8:b8:0d:37:5b:c5:e1:2c:7d:
         20:60:f4:1a:d8:65:ca:a2:85:b7:36:2c:40:ce:67:ee:11:c1:
         a5:a2:31:8a:2c:87:be:86:ec:20:19:9a:11:01:ed:cd:37:15:
         50:c0:77:b2:de:9c:08:14:88:d3:f8:a5:eb:69:dc:ba:e4:4f:
         b9:39:e1:12:6d:19:4a:85:a4:90:ab:b0:dc:b7:0c:f3:f4:bd:
         b6:73:09:09:71:3d:14:41:cc:5d:48:ab:82:c2:a9:65:61:8f:
         8e:65:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:13 2026 by rpki-client