Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft
File:                     E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft (raw, json)
Hash identifier:          yR4mB5Y0RdCRvjmGVErbv9MDuHoaUYYbOf8BtQjz6ak=
Subject key identifier:   86:53:52:60:BB:A8:A4:45:C1:FE:74:D3:37:36:10:3D:48:2E:B0:23
Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88
Certificate issuer:       /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688
Certificate serial:       47633EB2F9D98F85564B0BD6BF8D8A8F7DB12BD1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 16:19:51 +0000
Manifest this update:     Thu 23 Jul 2026 16:14:51 +0000
Manifest next update:     Fri 24 Jul 2026 19:26:51 +0000
Files and hashes:         1: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: P320z9KUFpWQ3fuDHhMBAn5wP+R8TtjEv0OQMaUZbt0=)
                          2: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl (hash: tGP5Jo/10Iz9S430ykGsqSIaYL88+ETKuNeDY1h+J2U=)
                          3: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: sb2b0BvTmrzj1UZrNAjcbapczR2THwPhTn7rFLIGhwc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl
                          rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:63:3e:b2:f9:d9:8f:85:56:4b:0b:d6:bf:8d:8a:8f:7d:b1:2b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688
        Validity
            Not Before: Jul 23 16:14:51 2026 GMT
            Not After : Jul 24 19:26:51 2026 GMT
        Subject: CN=86535260BBA8A445C1FE74D33736103D482EB023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:87:d7:fe:6c:e0:45:97:63:5c:76:e9:ae:
                    c2:88:a7:21:04:6f:db:09:3f:e5:32:56:ed:5e:b6:
                    6c:14:3d:77:e8:4c:e5:0a:09:3a:f8:7a:2b:72:fe:
                    b1:0a:3a:a1:bd:13:44:24:8a:95:ec:6a:4b:04:ca:
                    27:99:c6:a8:75:f4:31:dc:21:42:7f:04:33:87:8e:
                    69:80:a0:d0:a8:93:a7:f8:cb:13:e8:50:63:6e:9a:
                    e3:ca:4b:b4:b7:a0:b9:ff:7f:cb:da:32:d0:95:b3:
                    ad:ef:e5:d9:07:ee:70:1e:7a:04:f1:96:ca:81:a5:
                    bb:79:ce:95:e1:e2:6f:a7:cc:c1:1c:90:25:ad:e3:
                    7a:c3:00:93:bd:c3:37:46:2d:4d:55:55:3e:94:d9:
                    9d:61:23:af:bd:79:fd:f6:c4:cd:2a:27:52:e8:a6:
                    81:dd:78:2b:45:df:65:ae:34:83:f3:88:49:08:ee:
                    3e:d1:29:5c:4a:ba:51:18:d2:24:1b:26:a0:b2:66:
                    53:df:f2:48:fc:b9:27:9d:b6:70:e4:ff:ae:e3:00:
                    c5:1d:be:d0:b0:3e:52:2e:a7:41:a8:e9:ee:b2:42:
                    1e:04:60:84:c9:21:22:6a:3b:59:bd:9a:8a:94:b7:
                    69:d0:16:05:b6:d5:90:6e:43:d8:b8:da:b5:5e:c9:
                    84:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:53:52:60:BB:A8:A4:45:C1:FE:74:D3:37:36:10:3D:48:2E:B0:23
            X509v3 Authority Key Identifier:
                keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a4:4d:8c:d7:f1:0c:53:93:fa:1f:b8:89:71:cf:3f:b1:39:
         23:68:53:b9:77:46:0c:0e:e0:22:f5:de:e6:ca:73:7b:c8:72:
         af:76:52:2c:46:77:68:26:20:f7:f4:ac:20:cd:fd:dc:61:2a:
         bd:c0:46:29:a6:e2:eb:27:3b:32:4d:ea:b9:3f:f1:e6:fe:0f:
         93:25:43:ad:ca:0e:a4:2b:71:70:ff:f8:29:09:cb:b6:3a:e4:
         34:42:15:00:13:f6:a4:13:65:2b:16:8e:7d:ed:7a:f6:f4:c7:
         6f:cd:82:81:24:8d:5e:1c:93:e6:52:f0:a3:4a:e1:af:72:03:
         db:1a:f2:98:e8:af:be:de:73:47:6c:29:db:70:08:79:5d:dc:
         38:80:42:42:2b:c4:68:a2:ab:8b:0d:55:3f:d1:ea:c4:03:60:
         fa:fe:8f:f7:13:bc:02:0d:9a:37:f9:35:d6:8c:f5:ba:c2:87:
         4f:77:0c:df:08:c0:ae:29:e4:83:a6:5a:e3:73:17:b8:f2:25:
         42:43:c2:c9:f9:88:6c:81:43:27:ec:7d:a8:27:75:bb:cc:f1:
         b4:68:d4:e4:15:42:7b:72:e4:44:ac:69:86:4c:ba:d2:ee:df:
         1d:cc:2d:f5:ce:7b:0d:cb:1c:9c:a2:d5:6d:7f:b7:7d:5a:c2:
         80:fc:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:07 2026 by rpki-client