Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
File:                     6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft (raw, json)
Hash identifier:          wdUL6qlwRDcWvs27tTubEcmNis0zRqOtYF3RvWduIhg=
Subject key identifier:   97:A4:12:D0:04:DD:1F:48:13:88:D9:E9:5B:49:AB:38:36:F0:D4:0E
Authority key identifier: 6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5
Certificate issuer:       /CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5
Certificate serial:       673F2499A0593A1AD5C2BF0D5B617521630A1DAB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 21:41:31 +0000
Manifest this update:     Thu 23 Jul 2026 21:36:31 +0000
Manifest next update:     Fri 24 Jul 2026 22:40:31 +0000
Files and hashes:         1: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: S9Rn028mN4RxKRfk1o8rZH0hTRoX3/5ujuVLyQFUwsA=)
                          2: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: y9avoo0XnwxjsH45wOCvll+IYaXWnM223zX3g6ZS9kU=)
                          3: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl (hash: du4O16QyMc/GJn4MG2d+GqIy5ZDayW06x4eMGi1eB28=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl
                          rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3f:24:99:a0:59:3a:1a:d5:c2:bf:0d:5b:61:75:21:63:0a:1d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5
        Validity
            Not Before: Jul 23 21:36:31 2026 GMT
            Not After : Jul 24 22:40:31 2026 GMT
        Subject: CN=97A412D004DD1F481388D9E95B49AB3836F0D40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:cc:76:de:c4:0a:d3:e9:37:0e:ae:d4:d4:
                    b6:ba:9c:0a:f3:4c:25:22:f3:e9:f9:2d:75:35:5e:
                    ca:69:bb:81:75:d6:34:82:38:ee:54:dd:7a:bd:d5:
                    88:e8:4a:ef:57:7d:9b:3b:3f:84:8d:c5:0d:d9:61:
                    b2:cd:01:22:bc:42:e8:65:2f:84:03:c0:83:30:a6:
                    a9:2e:74:b4:ec:66:78:ba:f2:b1:b1:9c:62:bb:eb:
                    34:0c:41:df:a6:6e:fe:8a:a0:37:4c:f4:f8:aa:66:
                    a3:04:9e:de:be:55:b2:6e:c8:dd:6e:a5:16:15:2b:
                    d6:c5:47:7c:80:86:25:a7:53:c9:e4:15:c9:1b:03:
                    11:0d:c3:f3:83:23:73:64:2e:ef:43:dd:7d:31:4c:
                    26:18:ae:09:4d:01:41:f8:e2:20:db:56:67:ed:77:
                    8d:46:75:15:b9:ad:ef:4a:c5:5c:ff:77:76:cd:79:
                    71:70:be:fa:1a:b8:c6:7f:c7:83:01:66:6e:f3:cc:
                    af:d8:5e:90:23:e6:94:47:d5:75:e8:7e:29:54:03:
                    98:dc:08:02:3d:78:ab:a4:f0:13:e8:e1:cd:cb:9e:
                    7f:6b:cf:2c:87:aa:74:7f:53:07:36:e3:e2:2a:73:
                    c7:62:c7:39:f2:24:74:fc:e1:48:c6:0e:35:43:ab:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A4:12:D0:04:DD:1F:48:13:88:D9:E9:5B:49:AB:38:36:F0:D4:0E
            X509v3 Authority Key Identifier:
                keyid:6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:15:24:18:5b:5d:64:9a:f2:28:ec:d9:8f:b1:3c:49:d5:b9:
         e6:a5:2d:2b:2b:b8:a0:55:29:6b:7a:c3:7a:6b:38:f1:dd:9d:
         f9:ae:8f:1f:23:70:43:37:89:94:cb:84:6c:5a:eb:21:5b:48:
         a1:44:0c:df:89:89:95:ee:ac:1f:a2:2b:63:e8:1a:59:c4:91:
         6c:26:d9:7c:97:37:3b:ff:53:94:59:78:ba:1e:36:14:04:3b:
         b7:6a:07:4b:e2:30:1e:10:de:0b:b3:9c:98:02:30:fe:26:76:
         08:45:4a:c9:e2:c0:92:f1:89:76:c3:f3:e3:d7:cc:e6:4c:f2:
         14:d4:18:09:c4:ee:46:e8:6b:b7:4b:89:05:15:ae:38:b6:42:
         2b:85:89:70:7a:d6:da:62:9b:fa:dc:77:ae:95:ec:c6:2b:3f:
         7e:71:2d:40:79:c1:d9:29:9f:98:e8:5a:4c:c6:a2:17:2a:6e:
         7e:53:43:32:64:f6:d7:3a:14:60:ce:1b:32:5b:0c:13:5f:56:
         9b:9e:5c:37:0c:a7:03:2e:0c:f9:15:ef:50:e6:1f:d0:db:e5:
         74:e6:55:c6:37:2a:e7:33:0d:f9:5f:00:d7:5e:f9:06:c2:32:
         15:51:a8:7b:8a:84:18:77:4e:1c:99:0a:7f:e2:77:6d:95:42:
         ba:d4:4f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:41 2026 by rpki-client