Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
File:                     D769452C15749C457029AB81E06B7D36C9F48804.mft (raw, json)
Hash identifier:          BDOa2k7HxwCHBYj7c0AfZTBwDtj5GlHLyvaqq50Q0D0=
Subject key identifier:   6B:91:50:97:02:D0:7D:54:C5:DF:54:6F:93:EE:86:76:D8:F9:41:10
Authority key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
Certificate issuer:       /CN=D769452C15749C457029AB81E06B7D36C9F48804
Certificate serial:       2105A4D88569ACDFAC6F7DC6F162B63855F9059D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 23:08:01 +0000
Manifest this update:     Thu 23 Jul 2026 23:03:01 +0000
Manifest next update:     Sat 25 Jul 2026 01:25:01 +0000
Files and hashes:         1: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: FxemyMpIsKKyeyZF+nt8pq/Wh2yMuBg7NUlyoxRZXT8=)
                          2: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: Wgp2Ly277xiC/SJ4ahqqMWo1yKBGTp7hlr1qa44tvrs=)
                          3: D769452C15749C457029AB81E06B7D36C9F48804.crl (hash: GMzGyM7Eq3jpBI7vVYCCvUYxgK10blLwhGKc/wD/pz0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
                          rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:05:a4:d8:85:69:ac:df:ac:6f:7d:c6:f1:62:b6:38:55:f9:05:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D769452C15749C457029AB81E06B7D36C9F48804
        Validity
            Not Before: Jul 23 23:03:01 2026 GMT
            Not After : Jul 25 01:25:01 2026 GMT
        Subject: CN=6B91509702D07D54C5DF546F93EE8676D8F94110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:73:15:6b:82:72:e1:7b:19:e2:ed:33:cd:
                    1d:86:fb:e3:60:dd:a1:e1:3b:7b:7d:0e:0d:c3:3c:
                    29:86:09:af:c5:46:18:87:c6:90:36:6c:01:13:f4:
                    76:05:4b:1a:1a:7c:4f:a5:91:9d:9a:31:d4:f1:64:
                    22:0e:c1:fb:0e:f6:94:ba:7a:d7:f4:3d:c1:66:ca:
                    7b:6d:de:56:a3:dc:0c:b9:d2:94:06:15:ef:27:38:
                    75:d5:dc:23:95:bc:a0:00:cd:a4:b3:34:4b:8b:30:
                    d6:65:f0:f3:cb:af:23:17:97:29:9f:c4:5c:77:15:
                    64:fa:99:27:3d:ad:92:20:3c:0a:35:21:33:97:0b:
                    9f:dd:94:a9:d2:c4:b1:37:d4:de:ca:71:62:2e:7b:
                    e4:c4:dd:40:20:62:d3:d9:86:d9:6e:cf:e1:30:ae:
                    b7:43:5b:d9:3c:7a:14:60:a3:9d:25:eb:0f:f0:3e:
                    10:02:af:ae:97:4d:1d:2c:8f:2d:5c:0b:5c:8b:e4:
                    34:72:bb:0d:74:6d:d6:29:37:e7:50:49:1d:a8:34:
                    75:23:8c:19:1e:e6:c4:62:58:89:b8:9a:63:b8:58:
                    d5:3e:30:2c:6d:08:59:0e:67:9f:62:46:5b:5f:17:
                    d8:5a:38:72:1a:4a:46:15:31:d1:9c:87:e3:5e:8b:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:91:50:97:02:D0:7D:54:C5:DF:54:6F:93:EE:86:76:D8:F9:41:10
            X509v3 Authority Key Identifier:
                keyid:D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3f:f1:33:59:31:df:0c:98:17:d8:57:dc:8f:67:53:15:3f:
         a6:68:43:69:12:08:c0:c4:01:3a:ec:c9:f6:95:8f:0c:5d:c1:
         7b:7b:5c:9d:0f:a9:a8:86:42:b0:8c:42:3f:22:df:f4:e7:a8:
         56:18:d7:91:b3:0b:8f:75:71:b1:4c:cc:da:6d:e5:3a:00:ae:
         95:6f:13:9c:f0:37:9a:e3:78:7e:8f:b3:3e:85:d5:b5:fb:72:
         55:9b:62:1f:d9:2c:7a:ba:d2:88:0c:5a:af:38:30:b4:b9:44:
         2e:3f:d6:83:cc:8b:89:8d:02:59:82:8c:c5:dd:2d:00:b0:9e:
         e7:ea:5c:b2:57:92:f8:f1:ad:af:fd:d8:b9:f2:59:3d:c8:15:
         46:11:37:e0:76:a7:b9:c5:e1:e6:b1:99:7a:85:05:68:b8:d3:
         dd:4e:36:5e:f0:e6:91:b7:63:83:75:70:cb:9d:0f:6e:87:0d:
         fb:81:a7:a6:bf:3f:55:f6:6a:dd:9d:28:48:24:e0:0e:db:c4:
         bb:57:8d:28:62:8e:4f:23:71:5a:a7:4f:de:19:b9:9c:58:83:
         1e:18:b3:41:98:ee:b7:d6:6e:08:5c:92:a6:34:c8:0b:8e:8d:
         a4:cb:1e:95:d5:b4:40:de:ce:5b:6d:db:37:9c:2f:b2:df:08:
         8a:d6:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:28 2026 by rpki-client