Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft
File:                     23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft (raw, json)
Hash identifier:          4ZCbyxDF383IU/CduU1WTlxeXon06SGn9y0w4uuPwrA=
Subject key identifier:   4A:56:69:B2:46:96:94:01:DE:A6:2B:DA:EB:E7:49:09:06:6F:26:D6
Authority key identifier: 23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1
Certificate issuer:       /CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1
Certificate serial:       59D9E14009F0F8689A4D4A51442071139471EAEB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 19:18:47 +0000
Manifest this update:     Thu 23 Jul 2026 19:13:47 +0000
Manifest next update:     Fri 24 Jul 2026 20:55:47 +0000
Files and hashes:         1: 23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl (hash: YsaCTK/tfz+9pKHN2MXOBRbfc9wxHJwxobUMkvm2Irw=)
                          2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: xY/6i6LUbCTPc3rdGOALXXYogQcfaBFzo3dHge01GCI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl
                          rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d9:e1:40:09:f0:f8:68:9a:4d:4a:51:44:20:71:13:94:71:ea:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23778D1963851C4054ABA68BB8F80E5E45A7A7F1
        Validity
            Not Before: Jul 23 19:13:47 2026 GMT
            Not After : Jul 24 20:55:47 2026 GMT
        Subject: CN=4A5669B246969401DEA62BDAEBE74909066F26D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:af:7d:7e:0c:83:93:76:89:b5:0c:75:da:
                    6a:a9:96:c0:81:03:b8:c5:62:97:24:50:91:66:02:
                    28:cc:9e:ca:63:f1:7c:2f:aa:78:8a:96:fb:94:37:
                    cf:5d:dc:61:1a:8a:ac:bc:38:6c:ba:84:57:3b:64:
                    93:1d:6e:80:c4:df:2a:c0:ce:73:b3:88:45:76:c7:
                    d5:db:b3:91:7c:75:d6:c8:cf:8d:44:09:59:3b:7a:
                    e0:f7:db:78:ae:bc:a8:93:25:1a:37:01:67:d9:89:
                    eb:1e:f1:a6:ff:8e:a0:4d:ec:4b:b6:e8:36:6b:73:
                    09:63:f5:a4:a8:73:e9:4c:d8:60:a3:3e:54:6d:0f:
                    a4:0a:14:f9:87:04:75:b5:b3:29:d4:9a:cd:d2:14:
                    78:ba:be:9e:3a:d5:5d:f7:9d:a7:57:5f:c5:93:b1:
                    92:4b:60:c5:08:61:c1:fa:40:e9:dd:60:41:29:95:
                    19:2e:91:d6:8f:b3:f3:b7:9e:8d:7b:ec:5f:cf:c6:
                    bf:7e:9a:04:50:bf:5e:c7:86:51:e3:7c:1b:38:3d:
                    40:c5:f0:13:77:e2:bf:1e:98:96:e7:a1:f0:24:31:
                    16:72:e1:e0:24:06:bf:cd:7c:c1:1e:3b:ed:8a:bf:
                    6d:c7:28:79:8c:b8:7d:5f:89:f0:7e:86:b9:c4:ec:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:56:69:B2:46:96:94:01:DE:A6:2B:DA:EB:E7:49:09:06:6F:26:D6
            X509v3 Authority Key Identifier:
                keyid:23:77:8D:19:63:85:1C:40:54:AB:A6:8B:B8:F8:0E:5E:45:A7:A7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/23778D1963851C4054ABA68BB8F80E5E45A7A7F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:00:cf:ac:97:0e:db:95:46:20:34:8f:a5:34:9f:17:a3:22:
         c1:b6:07:8a:fc:67:3d:61:19:96:4c:ee:97:55:63:0d:92:f2:
         76:c6:b4:bd:fa:75:43:79:01:6a:3e:5e:a2:8d:00:fd:ba:e0:
         51:13:86:fc:d9:30:e0:5c:2c:e9:2a:00:49:ed:9c:b0:53:46:
         1b:e3:74:15:17:81:6d:ba:26:11:90:f8:02:d3:8a:f2:ba:7f:
         45:3a:c1:76:f2:93:58:17:57:64:db:4e:b2:6c:41:63:70:ff:
         5c:b6:f3:16:d7:d2:cb:21:6d:3a:d1:13:fd:f3:55:56:8c:e0:
         9b:b5:e6:cd:30:5e:3a:16:54:82:d2:de:b0:03:23:b6:2c:5e:
         4e:c1:95:39:2f:15:cc:22:3d:de:68:b3:7c:56:ba:51:80:a2:
         05:e2:db:61:28:0a:3c:5a:fe:9f:b9:65:91:76:68:ee:48:a3:
         0a:ce:f7:83:f8:8d:42:77:22:74:f3:6d:a2:2b:04:43:cb:b3:
         97:23:f5:26:fd:3d:48:b7:93:46:eb:5d:49:9e:2d:ae:3e:77:
         c0:59:be:b3:7c:c3:36:b7:09:15:66:27:64:75:84:bd:fd:2b:
         dc:64:23:e9:85:28:16:06:31:17:06:6d:20:8f:7b:8d:1b:11:
         cb:e9:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:04 2026 by rpki-client