Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft
File:                     CBEB849658A6B8983666B1EA2518B5608A591AD8.mft (raw, json)
Hash identifier:          LErJSzEXwfLM2rrSoPzZfjcTbBpgLVVLNSzIeyqztpw=
Subject key identifier:   7A:2B:33:61:96:8E:33:14:37:8B:DF:53:59:69:67:81:EA:7E:A4:EF
Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8
Certificate issuer:       /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8
Certificate serial:       5B5B71AB7E2A4B563486CF14B7DD560A125C5D21
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 02:17:02 +0000
Manifest this update:     Fri 24 Jul 2026 02:12:02 +0000
Manifest next update:     Sat 25 Jul 2026 03:22:02 +0000
Files and hashes:         1: CBEB849658A6B8983666B1EA2518B5608A591AD8.crl (hash: ILQt01qk1TjdkON3Bf5pY4cVfauYx8UoTVtQGvGJCi4=)
                          2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl
                          rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5b:71:ab:7e:2a:4b:56:34:86:cf:14:b7:dd:56:0a:12:5c:5d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8
        Validity
            Not Before: Jul 24 02:12:02 2026 GMT
            Not After : Jul 25 03:22:02 2026 GMT
        Subject: CN=7A2B3361968E3314378BDF5359696781EA7EA4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:ed:60:c9:8d:a5:d6:50:d6:07:65:65:d1:
                    56:91:7b:0f:2f:92:b1:e6:88:d9:77:80:8d:23:49:
                    a7:95:90:32:31:5e:95:12:14:12:e1:74:74:c1:8e:
                    4a:72:b0:1f:5e:de:91:d4:b1:7d:9b:3c:27:e0:05:
                    8c:79:1e:63:fd:a7:25:b1:36:c8:51:71:2f:9c:5c:
                    9e:52:e1:74:4d:25:a2:c0:72:19:04:cb:33:d7:c8:
                    11:d7:c3:ea:fc:0e:3a:5d:65:4b:a3:28:11:c0:13:
                    56:99:fa:51:a6:89:43:83:8f:da:36:b3:55:70:64:
                    31:63:d5:80:89:72:e9:d6:06:58:72:7e:72:1d:49:
                    d0:46:ec:4f:72:6c:99:be:b2:0d:03:f6:79:db:66:
                    86:89:cf:d8:a5:89:e9:9f:35:6e:f9:c7:98:57:be:
                    aa:8a:f4:20:71:d6:a9:92:d8:cf:38:fa:26:cc:05:
                    a9:ac:19:ae:7b:97:40:30:d1:83:49:4b:e1:4b:36:
                    a7:38:b0:13:91:cd:3d:9c:b3:7b:8f:bf:a9:66:76:
                    07:f4:ee:f9:54:c2:d7:88:61:8a:cc:9b:24:36:0c:
                    4d:3e:02:e7:4b:97:13:9a:38:6a:7e:3d:fa:3b:14:
                    b9:25:19:b0:b8:14:27:32:ba:61:3a:e0:b3:32:0d:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2B:33:61:96:8E:33:14:37:8B:DF:53:59:69:67:81:EA:7E:A4:EF
            X509v3 Authority Key Identifier:
                keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:02:4b:a4:22:39:62:12:e8:e8:d2:7a:33:81:ba:99:ad:28:
         6b:cc:3a:f1:29:df:ce:1f:0d:26:47:a6:c2:87:73:f6:6a:b5:
         aa:18:67:b9:01:17:84:9d:5b:a9:8c:79:96:08:6d:97:21:98:
         a7:9d:39:bc:97:64:79:0e:ce:cf:b6:1d:c1:08:a0:12:9c:6c:
         c5:ba:56:42:05:d7:e9:bb:fe:69:7b:20:b6:a0:a0:04:66:d8:
         4f:a0:0f:40:be:21:5c:ca:ff:19:b2:99:0c:3e:1e:13:37:18:
         97:03:16:f5:18:aa:ed:d1:74:55:da:5b:35:e7:d6:f4:28:4a:
         78:54:dd:35:1e:6d:b4:21:60:73:6f:e0:b3:bf:43:6b:64:e0:
         b6:4d:d8:ba:4e:ba:8f:7b:d2:c1:54:a5:09:79:71:fe:82:2c:
         66:56:dd:54:2e:85:9a:85:64:d8:37:e9:be:75:8c:39:ab:4e:
         d5:18:7b:00:23:cd:74:a2:ce:de:10:e5:e9:a8:bd:ed:8f:6d:
         23:49:9d:ca:5c:60:bc:f2:50:11:18:e5:10:f3:01:15:41:42:
         2f:ca:dc:02:90:b5:03:7a:ba:41:a3:6d:c2:51:d3:a4:ae:d3:
         22:5a:f4:fc:c8:df:6f:90:36:bf:95:ae:83:27:a2:1d:5b:46:
         bb:e8:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:41:19 2026 by rpki-client