Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
File:                     B9E54455BBADEE4051F79D907B7453E95F13B467.mft (raw, json)
Hash identifier:          2oaD+IA8i5yZKTCG94n+2o0RgIUgJqOZByCbGeJcXeM=
Subject key identifier:   5A:1D:B4:6E:A0:9A:21:87:8F:71:85:77:B5:CF:4C:9F:E5:75:C8:70
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Certificate issuer:       /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial:       57D7CC71E34BEC75D8D0EB6929378AABE13D238A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 18:12:20 +0000
Manifest this update:     Thu 23 Jul 2026 18:07:20 +0000
Manifest next update:     Fri 24 Jul 2026 21:30:20 +0000
Files and hashes:         1: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=)
                          2: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=)
                          3: B9E54455BBADEE4051F79D907B7453E95F13B467.crl (hash: j/jPZ5yoyARLuF9dP9G1HXvJuYfkiLj8z175got/U/w=)
                          4: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: /KOgzrDFq/tIyDOkqLi1nhsbulS+0UUYSYry8OoTmJg=)
                          5: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=)
                          6: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: vFfmqz/S7K4aLguWPn5rp+ugEbZkxGvqsu4n1XKxUAg=)
                          7: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: 8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=)
                          8: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=)
                          9: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: Mm+87+26OdYLR0WzbeBFR1Yx08pPggtvOd7SnjyjkXk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
                          rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d7:cc:71:e3:4b:ec:75:d8:d0:eb:69:29:37:8a:ab:e1:3d:23:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
        Validity
            Not Before: Jul 23 18:07:20 2026 GMT
            Not After : Jul 24 21:30:20 2026 GMT
        Subject: CN=5A1DB46EA09A21878F718577B5CF4C9FE575C870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:d1:d8:8a:dc:4b:08:51:87:95:47:80:ed:
                    ed:80:0e:a4:b6:44:fb:1c:03:a5:3f:8f:91:5a:94:
                    84:fe:d8:c2:d5:b7:a7:05:db:de:36:e0:5e:50:56:
                    67:5e:ba:c0:9e:32:65:6b:ef:ee:60:7c:17:c4:04:
                    7f:ea:fd:1d:f7:a6:f2:a9:9d:fd:ff:42:b4:37:89:
                    f5:5e:12:f4:03:62:c5:d0:3a:78:75:92:db:60:3b:
                    ed:43:a0:a3:de:79:a7:3c:a3:99:81:97:cc:12:58:
                    67:f6:fe:e7:9c:80:9b:ff:25:ce:1b:8e:de:fe:43:
                    e0:1e:61:35:99:fc:f3:a6:f4:90:a6:86:4e:46:c6:
                    a2:f4:17:01:99:e6:a4:83:b7:81:22:61:c1:c5:8a:
                    bf:5e:f3:6a:d2:a3:0f:a0:8b:5f:c6:95:93:25:37:
                    d3:87:a7:4e:85:6b:ba:2b:d1:22:5c:c2:14:ec:e2:
                    f0:91:cf:f3:d3:d9:41:5b:0b:14:4a:ff:e1:fb:e9:
                    ae:5a:0c:38:4d:0f:ca:bc:96:83:fe:02:45:00:6f:
                    00:c9:31:1e:f9:ef:94:32:25:23:ac:32:76:19:8f:
                    c5:92:ca:d9:ac:91:aa:84:9e:26:dd:29:80:50:d5:
                    88:75:9c:c3:d9:b5:9f:f7:f0:3d:52:1a:6f:68:6e:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1D:B4:6E:A0:9A:21:87:8F:71:85:77:B5:CF:4C:9F:E5:75:C8:70
            X509v3 Authority Key Identifier:
                keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4a:a9:a1:f5:9b:89:04:1c:83:34:78:b8:a2:92:7e:18:91:
         b0:82:d8:6d:c0:bd:01:0a:c5:3b:ba:81:fb:9a:78:86:ba:0b:
         2d:5c:2a:4c:a3:24:5a:e1:21:9e:5d:93:ba:6b:e1:04:ae:0d:
         5f:a9:ea:70:46:1e:e3:2f:79:ae:49:88:0e:4a:4e:fb:95:29:
         d2:ad:24:c0:60:7a:4b:2f:a1:15:0e:47:bd:53:bb:50:61:64:
         06:f2:01:7c:68:d4:36:c1:ae:f4:ef:f4:9a:5c:a8:55:2d:1c:
         9d:7b:ea:af:77:03:d7:db:b2:b8:23:73:00:5f:f5:4e:8c:47:
         3e:96:33:1c:ef:a0:10:fa:5c:8d:f6:ac:9c:9c:3f:5d:8d:9b:
         67:cb:4c:13:bb:03:ce:6c:0e:89:cc:82:69:8b:0b:8c:e8:a6:
         dd:9d:27:81:ba:01:9d:94:8b:ad:28:16:1e:12:2e:20:3b:07:
         66:5f:3f:e6:21:15:5e:a1:13:e5:e2:53:87:96:62:55:74:17:
         87:5f:81:db:aa:ad:19:72:51:95:20:27:5d:d3:b3:28:cd:59:
         eb:54:84:3b:01:eb:de:6f:04:6b:30:97:54:83:07:ca:60:bc:
         66:3c:5e:08:7f:c1:84:db:c9:64:6a:0f:0c:4c:d6:a5:65:19:
         9c:a2:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:00 2026 by rpki-client