Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
File:                     4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json)
Hash identifier:          cbMMZg+7/E59PDrc+yGg0o/qtF3aZQRhQhbnJ/aW+Xw=
Subject key identifier:   42:BF:2E:D3:34:43:6C:6F:0C:F5:18:7A:C7:F8:41:20:02:64:63:37
Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
Certificate issuer:       /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Certificate serial:       5DBAA972D8897C08382963E4AE924E4D77DABC20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 15:39:01 +0000
Manifest this update:     Thu 23 Jul 2026 15:34:01 +0000
Manifest next update:     Fri 24 Jul 2026 16:16:01 +0000
Files and hashes:         1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=)
                          2: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: 9Ohs2uG1fG9M2dJ/e67GI1NPClD8OCve8BJg2cJcYNU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
                          rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ba:a9:72:d8:89:7c:08:38:29:63:e4:ae:92:4e:4d:77:da:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
        Validity
            Not Before: Jul 23 15:34:01 2026 GMT
            Not After : Jul 24 16:16:01 2026 GMT
        Subject: CN=42BF2ED334436C6F0CF5187AC7F8412002646337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:64:31:48:54:f6:36:a9:0d:a9:48:ed:d4:
                    39:d9:e4:fc:2a:44:d1:49:cd:e0:8f:7d:5e:90:77:
                    47:ad:50:2d:d1:98:47:b5:fb:3a:dc:24:16:71:8b:
                    b8:bc:b3:0d:a8:64:35:36:c9:40:63:a0:4c:13:15:
                    b2:ab:44:fc:aa:e8:a5:5e:c8:dc:e0:09:cb:ea:02:
                    a0:22:9c:5d:8e:d3:c3:27:67:c3:3a:f1:21:1c:36:
                    a8:5a:0f:1b:ed:82:da:ed:9c:43:22:2d:01:ef:0b:
                    42:c4:ee:24:4f:03:b9:57:ca:f8:a5:31:17:16:65:
                    86:6e:da:b7:e8:65:a8:07:aa:4d:9b:c3:90:f2:c2:
                    74:2f:8e:1c:56:cc:96:cb:3f:7e:46:ba:ba:e1:7a:
                    33:78:98:62:ee:c0:40:34:aa:ae:a7:81:fd:4f:ee:
                    c5:5d:88:ed:7d:bf:21:d0:5e:d2:09:a5:c5:77:92:
                    11:30:40:8c:e1:c9:71:b6:1b:28:fd:8a:99:3a:77:
                    ce:6f:cf:63:0b:1f:af:14:27:71:b6:2a:42:d0:53:
                    25:29:48:56:b5:cc:01:aa:28:14:a9:28:cd:8b:b8:
                    27:3c:85:ad:0d:07:6c:31:48:41:3c:96:d2:75:23:
                    6b:89:d8:c2:c2:32:ed:9c:03:70:ae:58:06:29:08:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BF:2E:D3:34:43:6C:6F:0C:F5:18:7A:C7:F8:41:20:02:64:63:37
            X509v3 Authority Key Identifier:
                keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:47:37:c2:46:d5:fc:1d:26:61:6d:1c:1d:c4:a6:ba:7e:5e:
         e1:fb:45:dc:02:b7:54:69:60:72:56:aa:21:b1:07:6c:b3:aa:
         77:3b:dc:bd:01:d8:21:7a:57:81:42:49:8b:44:a3:21:10:e4:
         6a:3a:be:e0:37:2f:f1:d6:7f:cf:d4:6e:2e:f9:61:9d:f3:d7:
         4c:66:38:80:bf:87:b0:6e:7c:8c:19:38:94:7a:dd:45:7e:f2:
         c5:d4:64:04:28:31:59:a2:33:f2:33:5a:2f:b2:9a:b8:32:15:
         71:3d:6c:8a:f2:c5:6c:6d:c9:71:dd:83:c8:09:4b:3d:19:4f:
         5e:56:9f:da:5d:81:19:49:db:87:0f:be:da:76:7a:a4:bc:2f:
         39:eb:82:76:24:61:4b:e9:1d:6a:60:31:e9:48:7f:3e:9a:46:
         8c:56:7c:d0:42:0f:46:6e:16:c1:7c:24:fe:ff:5d:47:83:06:
         56:ac:61:19:9a:20:29:3a:1b:c1:2b:7c:09:65:e1:09:2e:08:
         e3:27:21:96:90:39:18:77:a1:84:8c:31:0e:43:f2:99:de:14:
         55:81:93:c8:fa:a8:fb:e3:19:37:c2:17:a2:ff:d4:88:9e:0d:
         5e:1e:7c:7c:a9:74:48:ca:38:e8:38:bb:e9:54:4c:a7:7f:7b:
         65:87:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:28 2026 by rpki-client