Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft
File:                     F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft (raw, json)
Hash identifier:          aaJEG6o+oZIuNc4YD8qwTTGZASoDpDpL9JcKXXGkGGg=
Subject key identifier:   03:69:D5:B8:13:57:0F:41:62:F3:54:6D:87:CC:8F:49:FA:E2:24:C7
Authority key identifier: F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF
Certificate issuer:       /CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF
Certificate serial:       046F02C1ECEE1F2410F3CBD32B1969C86D1A0AEB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft
Manifest number:          6D
Signing time:             Thu 23 Jul 2026 06:53:25 +0000
Manifest this update:     Thu 23 Jul 2026 06:48:25 +0000
Manifest next update:     Fri 24 Jul 2026 08:05:25 +0000
Files and hashes:         1: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: 25pMisvX0/Q8rpjasSNLO/3FyTnfpVPB5JoH3mYAK2Y=)
                          2: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl (hash: FNgWlNCuJHv6YQJPlwAZxHgOvpA88KAncCPhk9EPiHY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl
                          rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6f:02:c1:ec:ee:1f:24:10:f3:cb:d3:2b:19:69:c8:6d:1a:0a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF
        Validity
            Not Before: Jul 23 06:48:25 2026 GMT
            Not After : Jul 24 08:05:25 2026 GMT
        Subject: CN=0369D5B813570F4162F3546D87CC8F49FAE224C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:3e:e3:5e:15:f5:e0:79:5e:ee:75:55:90:
                    66:f9:8d:3f:09:41:49:52:32:00:8b:15:7f:43:5f:
                    85:1f:86:69:76:69:09:dc:6a:22:2a:84:7f:d8:93:
                    be:c4:c5:d7:72:81:1f:c4:ab:77:0d:f5:f6:95:48:
                    e3:58:58:86:5b:ee:5c:8a:48:a7:12:fb:57:cc:bf:
                    87:de:db:ed:49:76:f6:55:65:74:bc:74:bc:11:39:
                    bd:ed:03:91:7d:e3:05:3c:be:89:1f:0c:e7:54:68:
                    15:1b:99:24:95:c0:78:00:5d:63:ec:03:08:cd:c3:
                    48:95:94:12:17:92:a0:42:0a:34:07:fa:46:5d:4b:
                    6a:ba:71:b9:00:cb:aa:ca:6e:48:e0:ed:a1:d3:1a:
                    0e:32:f1:ce:80:0e:f7:27:30:d5:2f:82:6e:35:45:
                    a2:aa:70:89:d2:5d:5a:a4:fe:9c:04:c5:54:38:34:
                    85:c3:5f:c3:a1:c5:32:75:47:94:8c:48:78:f6:55:
                    cf:1d:55:f3:37:d5:e9:e4:23:10:bd:29:21:9d:65:
                    e3:a5:18:72:d3:5f:20:0d:7c:25:b8:a9:e5:5e:79:
                    76:55:10:22:6d:b0:70:f8:95:24:e4:80:35:bf:3b:
                    6a:63:74:60:8f:6f:ac:e9:36:60:dc:40:2e:e0:ba:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:69:D5:B8:13:57:0F:41:62:F3:54:6D:87:CC:8F:49:FA:E2:24:C7
            X509v3 Authority Key Identifier:
                keyid:F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bc:e5:ee:77:54:dd:58:d2:53:a5:44:c0:e5:3c:86:de:4e:
         1f:89:66:6d:2f:d7:ce:d7:7e:8e:f3:8d:58:df:c5:ca:0f:33:
         2b:83:19:bf:44:75:2a:cd:f1:e0:62:a8:e3:37:e9:e0:16:f0:
         9c:4a:ce:27:9d:8a:23:ef:05:39:e1:47:54:aa:df:23:8e:dd:
         35:bc:06:69:61:9d:e5:44:2b:99:24:02:33:91:4e:25:eb:c3:
         e8:9a:e3:71:f7:bd:01:68:75:8c:bb:a1:30:aa:d8:eb:aa:49:
         5f:dc:08:78:17:07:77:fe:4a:5d:1e:eb:e1:b0:35:da:8d:0e:
         bc:ce:c3:37:0e:74:fb:06:41:a8:93:30:04:9e:ff:3a:c1:29:
         33:52:de:eb:04:2b:df:02:fc:f3:a6:77:55:62:ca:06:84:3f:
         88:9e:80:81:0d:fa:aa:72:88:61:3f:c0:ed:85:6c:14:13:b8:
         38:94:fe:b8:c5:77:4e:3d:f6:9e:1d:79:5f:18:e0:15:2e:aa:
         63:31:eb:e3:a8:7b:48:65:7e:47:cb:dc:7d:3c:90:36:ac:f7:
         fb:5e:2f:a7:d8:8e:28:66:a4:c2:3a:25:e7:3f:3c:f1:99:5b:
         3f:5b:60:bc:55:a3:f2:01:54:14:b2:30:b8:44:a6:23:59:94:
         26:e6:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:47 2026 by rpki-client