Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
File:                     6807307655CEA502796E1026C663C4A882D37E72.mft (raw, json)
Hash identifier:          gzntzsV0fxhlocSew08sm1LRbXFv/lQOAYWiZbESLPQ=
Subject key identifier:   05:60:6C:4F:AD:19:D7:C6:1F:7B:BF:7F:68:14:AA:E8:11:3B:52:FC
Authority key identifier: 68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72
Certificate issuer:       /CN=6807307655CEA502796E1026C663C4A882D37E72
Certificate serial:       135B1D6BEE0E637F146A1C7EEAEB1AD47C8406EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 04:35:05 +0000
Manifest this update:     Fri 24 Jul 2026 04:30:05 +0000
Manifest next update:     Sat 25 Jul 2026 06:40:05 +0000
Files and hashes:         1: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: k002Muyqc9cS3UpWT7uJHqyqbjEHyYRWloXEdO7c7yA=)
                          2: 6807307655CEA502796E1026C663C4A882D37E72.crl (hash: WiQy7eJ1L31V02KCR5JUjUec2xCWRqQAULI6dRg3xis=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5b:1d:6b:ee:0e:63:7f:14:6a:1c:7e:ea:eb:1a:d4:7c:84:06:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6807307655CEA502796E1026C663C4A882D37E72
        Validity
            Not Before: Jul 24 04:30:05 2026 GMT
            Not After : Jul 25 06:40:05 2026 GMT
        Subject: CN=05606C4FAD19D7C61F7BBF7F6814AAE8113B52FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d3:c1:0b:83:3d:97:03:fc:e5:4b:fe:9c:f6:
                    f7:41:6c:6a:48:0a:7e:bf:af:29:40:18:c6:e4:58:
                    44:f9:fc:35:cb:b4:5a:f6:cc:06:eb:f5:cc:51:05:
                    6b:34:3b:89:ef:95:ba:62:0d:19:a2:20:1e:30:87:
                    f7:30:44:8e:32:99:a4:2b:56:29:a6:db:57:0d:d5:
                    f5:e3:93:ef:d0:c0:4e:e1:a9:22:df:6e:3e:70:0e:
                    4e:6b:ef:04:2b:97:8f:87:15:15:80:79:65:6c:59:
                    4e:e5:f7:d9:93:12:d6:31:00:fe:9f:7c:85:4b:04:
                    ad:c5:e3:22:4c:97:fa:b5:3a:4c:18:bf:48:d8:70:
                    46:41:a7:e1:68:a1:01:ad:b4:8d:ca:01:cd:cb:cf:
                    f2:93:39:12:ee:54:fe:f9:a9:72:5b:e5:41:5f:42:
                    b3:21:a6:28:17:43:a0:85:1c:3c:f2:f0:8a:b7:86:
                    2a:5d:e9:cf:c5:0b:b9:2f:9b:f2:75:18:a7:b6:63:
                    99:53:b9:a6:33:fe:13:57:be:99:84:6c:76:09:c4:
                    18:e9:84:d9:01:f5:4d:ff:f8:e1:fa:da:56:12:4c:
                    07:90:43:d3:ac:bb:5c:93:2f:cb:fb:b4:2d:f4:fc:
                    ea:5a:b0:b3:a8:ce:f3:aa:c7:d3:e0:a1:bd:40:94:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:60:6C:4F:AD:19:D7:C6:1F:7B:BF:7F:68:14:AA:E8:11:3B:52:FC
            X509v3 Authority Key Identifier:
                keyid:68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:cc:0c:4e:57:24:f0:a7:ef:5c:7b:27:b9:b0:6a:bf:ff:83:
         c6:4d:20:30:6c:22:ac:a1:34:83:ab:bf:ce:b0:96:24:a0:f8:
         d9:87:b7:3e:3b:cc:40:ca:24:13:9f:c9:ac:2a:4e:4d:bc:86:
         d4:cc:83:28:69:4c:3a:70:10:89:7d:c3:76:ca:e0:4f:e7:6f:
         01:90:7b:e3:8d:72:0a:ae:91:5a:32:ab:dd:eb:5e:74:85:b6:
         dd:a5:1f:73:75:91:86:c5:aa:76:1a:2f:e2:3b:19:bc:b7:67:
         d8:0b:7d:56:67:a6:24:d5:33:73:30:f9:cf:95:f7:9f:8d:c4:
         ef:eb:de:af:6d:40:39:99:15:77:84:e5:de:a2:75:23:32:1f:
         3b:12:b7:aa:4b:3a:8f:86:52:2e:59:9c:5f:82:6c:c6:7f:ee:
         7c:dd:ee:88:b4:ba:15:24:f1:77:04:5a:31:e1:7c:5d:47:39:
         20:72:4e:98:82:6a:1e:f8:f8:18:1e:60:b1:32:3d:f7:cd:54:
         3e:d3:59:84:95:25:69:cc:97:d1:d2:1d:37:94:f1:6a:3b:92:
         1b:8d:94:2c:7f:f0:4f:56:bf:51:ec:68:b1:13:6e:28:cb:e8:
         e1:cb:62:be:76:4e:66:a1:17:55:c8:32:cc:59:50:db:54:fc:
         8e:cd:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:27 2026 by rpki-client