Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
File:                     2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft (raw, json)
Hash identifier:          jIMxCwI9BGSvUBqSF5PAYY8cVm+5VN6wkmC4T3LQFdk=
Subject key identifier:   BA:D7:65:DC:07:C5:05:B9:34:C7:72:7B:21:97:8C:A6:63:7F:74:52
Authority key identifier: 2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A
Certificate issuer:       /CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
Certificate serial:       3CC4FC06A940479B8ED060656F7817CCBE7AB3D5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 23:33:36 +0000
Manifest this update:     Thu 23 Jul 2026 23:28:36 +0000
Manifest next update:     Sat 25 Jul 2026 02:52:36 +0000
Files and hashes:         1: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: GzkXDWcauMWYNDn5MyFD1nDjKkP9ZpScdykpa6iOEak=)
                          2: 2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl (hash: IER1ScC1p9Jra9dfdscIUMx+oDoUOPGdCYsB17+49Aw=)
                          3: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: VdJ1ZIQnNrJcWKeLJSeBvVO0FNQ/sxBZNurd+uNh3ek=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl
                          rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c4:fc:06:a9:40:47:9b:8e:d0:60:65:6f:78:17:cc:be:7a:b3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A
        Validity
            Not Before: Jul 23 23:28:36 2026 GMT
            Not After : Jul 25 02:52:36 2026 GMT
        Subject: CN=BAD765DC07C505B934C7727B21978CA6637F7452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:7f:0a:ac:8e:d2:c6:9d:53:fe:d1:de:fb:
                    e2:67:eb:9d:c9:36:77:7d:40:c7:aa:85:88:8d:7b:
                    80:0b:10:ea:0e:6f:66:18:c7:98:85:3f:33:23:39:
                    47:9c:b1:77:2f:fd:06:30:4c:f5:cb:72:7f:8d:4f:
                    a6:c6:8a:6a:20:83:04:f5:17:e0:e5:bb:db:95:a4:
                    f4:f9:a1:d4:f8:b0:39:7b:e2:c5:e9:33:9c:d5:ba:
                    d7:65:cf:89:cc:25:83:76:e4:5c:f0:dc:39:05:44:
                    01:d0:4c:ba:ab:04:97:67:1a:c3:5e:df:10:a7:c9:
                    a5:e2:48:de:a2:91:d2:21:99:ee:9d:74:2b:9f:f2:
                    a9:fd:37:fd:10:16:d8:ef:b4:92:16:4a:3d:6c:86:
                    31:94:b0:dc:a0:6f:1d:12:e2:e6:ca:81:d0:30:d6:
                    1f:0f:08:e5:d9:2a:c4:3b:9b:ad:6e:ec:02:dc:fb:
                    ce:f2:f3:df:31:03:10:a5:f2:9c:fc:13:cc:87:5b:
                    90:b2:a2:93:7d:b2:c3:84:a3:0d:90:70:b9:dd:0a:
                    84:b0:57:35:4a:6e:79:d2:ed:ee:d5:26:89:b0:02:
                    b2:6a:c0:9a:13:d7:d5:5b:4a:2e:a9:e1:4b:4d:1f:
                    91:d1:8f:28:46:6c:eb:57:f8:e7:8a:aa:84:ed:6f:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D7:65:DC:07:C5:05:B9:34:C7:72:7B:21:97:8C:A6:63:7F:74:52
            X509v3 Authority Key Identifier:
                keyid:2B:FC:74:1A:A1:77:1F:C5:CE:77:9E:4C:F8:8A:5C:3A:F5:2F:8E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/2BFC741AA1771FC5CE779E4CF88A5C3AF52F8E7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4e:ae:e7:23:61:03:00:4a:5d:b4:a4:0a:fe:84:d1:3d:4b:
         eb:59:8a:fc:58:b7:84:e8:13:a4:4a:93:a8:4c:bf:25:08:ef:
         95:0d:6d:5f:91:de:7f:70:b4:0e:d5:27:05:90:0f:b0:d6:39:
         7d:df:26:bc:94:80:36:80:63:f6:38:2e:5a:14:be:87:19:a0:
         f0:8d:50:e8:51:0d:56:9b:86:81:d8:55:63:fe:35:4b:2e:cd:
         bf:47:ae:0f:15:3e:a0:2f:82:d7:9c:a4:f7:13:a3:f0:d0:57:
         ab:f1:80:e9:4e:05:c5:18:b1:ae:6c:08:99:f5:59:a3:f1:7a:
         d0:9d:99:1e:0a:a2:83:bb:c8:b6:e9:ea:f2:ed:7f:94:62:eb:
         99:5f:35:1d:1e:3c:17:01:ec:53:07:cc:de:ae:99:86:6e:60:
         a1:15:33:fe:af:9d:19:a5:4a:74:4e:9c:67:8c:2c:13:11:7c:
         a3:56:b8:97:35:79:75:8a:0d:91:cd:29:df:ed:c6:2d:03:80:
         37:fc:8f:b4:4a:c0:0f:a9:64:c8:9c:ce:77:2b:f7:70:d8:7f:
         9e:27:31:aa:f0:48:bc:63:14:89:fc:55:16:f8:1e:40:c9:af:
         df:06:70:39:eb:00:8c:8e:56:60:6b:43:01:1f:a8:1b:bb:4a:
         ca:e4:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:06 2026 by rpki-client