Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
File:                     F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft (raw, json)
Hash identifier:          oTuTzhPcjAuAQd3JJYfeTnEu91Lc9Ax0S/b38Gc+oIg=
Subject key identifier:   01:3C:FB:30:84:E1:F6:C0:D3:0D:C8:BA:D2:32:7F:F8:F3:06:57:FE
Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58
Certificate issuer:       /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
Certificate serial:       427932C5D17A35C4683B585548A07A8FA7ED4837
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 08:30:13 +0000
Manifest this update:     Thu 23 Jul 2026 08:25:13 +0000
Manifest next update:     Fri 24 Jul 2026 12:04:13 +0000
Files and hashes:         1: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl (hash: PpAXZaJ0zZpixkK1UEXu/0fJveThCYTZCttfwBNWU24=)
                          2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl
                          rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 12:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:79:32:c5:d1:7a:35:c4:68:3b:58:55:48:a0:7a:8f:a7:ed:48:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
        Validity
            Not Before: Jul 23 08:25:13 2026 GMT
            Not After : Jul 24 12:04:13 2026 GMT
        Subject: CN=013CFB3084E1F6C0D30DC8BAD2327FF8F30657FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:76:62:2a:33:5e:b3:f6:5d:b3:93:bf:3e:
                    b7:fa:85:57:ed:1e:67:dd:81:62:3a:1a:72:72:6b:
                    80:ec:c5:51:d9:57:c6:08:d9:2a:f4:f6:89:dd:a0:
                    c2:61:f3:43:9e:ca:bd:32:85:70:00:e8:33:1a:c9:
                    d1:28:c2:fc:55:6d:81:8d:eb:21:87:9a:aa:cd:a0:
                    71:66:1f:54:3d:a5:3c:df:91:32:45:dd:0b:9e:17:
                    c7:57:03:ad:c3:60:9e:f5:f7:99:d1:b9:fd:4b:7c:
                    87:55:59:3c:6c:90:70:ea:93:1b:2e:78:28:cb:17:
                    30:e9:64:bc:62:71:95:62:3a:6e:10:e4:c8:f2:81:
                    91:91:26:f8:b7:6a:0a:dc:d1:df:44:56:e0:12:bf:
                    82:4e:8e:43:d3:30:78:03:06:b7:a6:5f:ac:c4:7a:
                    99:f3:dc:02:b3:be:cf:27:82:72:36:f9:94:2c:5a:
                    2a:07:9b:33:33:d2:98:05:dd:b4:f8:6a:f1:e7:5a:
                    73:68:c0:fa:86:f7:e7:14:f3:46:4e:0f:25:6b:8b:
                    37:6b:a8:0c:3f:fb:7c:f0:7c:bf:05:77:88:38:ae:
                    10:02:bc:cc:63:74:12:87:ea:85:22:84:4b:a2:c6:
                    58:1c:79:bb:90:c8:0f:2a:44:ff:68:90:41:c1:89:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3C:FB:30:84:E1:F6:C0:D3:0D:C8:BA:D2:32:7F:F8:F3:06:57:FE
            X509v3 Authority Key Identifier:
                keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:11:70:e8:40:7d:32:49:54:8a:5b:b5:1f:25:34:22:3b:
         99:0d:22:3a:95:b1:61:1b:74:4f:69:90:a3:36:71:a1:94:94:
         b3:06:8e:5d:a9:75:de:fa:e9:e1:1c:3c:cb:97:50:fa:57:b9:
         36:a3:1b:81:65:cb:e5:bf:cd:a6:c3:8a:3b:9f:34:b5:42:ab:
         b5:f4:5c:3e:0e:dc:c0:ff:d6:5c:f7:ba:b6:46:02:97:04:b5:
         0e:53:e2:db:26:77:97:61:1f:52:23:4f:b8:6b:79:c7:c9:65:
         a4:16:3e:e3:57:39:12:80:15:58:40:09:f8:fa:aa:b5:06:a7:
         54:d1:d1:03:cc:0c:18:bb:c2:55:a1:b9:be:bc:7d:51:28:dc:
         f2:e0:f1:82:de:39:28:24:bb:db:5b:2c:19:c4:37:7e:b0:39:
         cb:7e:6e:3f:7a:43:1f:56:40:ac:34:31:01:0c:df:70:bc:1e:
         5e:2b:d6:ff:aa:16:b9:d5:07:09:bf:fb:42:6b:89:30:7f:64:
         ee:d6:66:c7:c9:b4:6c:de:b4:d0:f7:d2:8a:92:c8:be:b2:6f:
         3f:ea:e3:70:2b:35:80:5e:ac:0e:f9:f6:c7:57:8c:e0:22:b2:
         8f:55:e1:40:0a:e4:f1:19:db:3e:bc:08:6b:9f:b6:fd:ac:89:
         59:29:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:53 2026 by rpki-client