Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft
File:                     FB5CD1159991D5A0305975655EB49929B5029C8B.mft (raw, json)
Hash identifier:          Z5901Mkrt/1IyM+HnihR1oCHofa+WBiuXzrwcK1uzEU=
Subject key identifier:   B6:9F:F9:57:0B:0E:8C:A9:26:A9:0F:8E:55:A1:53:F5:BB:0A:C9:11
Authority key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B
Certificate issuer:       /CN=FB5CD1159991D5A0305975655EB49929B5029C8B
Certificate serial:       6EB44A65A371CDA7900FFB7B5CB367C2C492CAA4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 02:32:21 +0000
Manifest this update:     Fri 24 Jul 2026 02:27:21 +0000
Manifest next update:     Sat 25 Jul 2026 02:40:21 +0000
Files and hashes:         1: FB5CD1159991D5A0305975655EB49929B5029C8B.crl (hash: gdYlc6zEw7vRWYA7hga5OO7jJSSOo/5NHIFOy7io/iw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl
                          rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b4:4a:65:a3:71:cd:a7:90:0f:fb:7b:5c:b3:67:c2:c4:92:ca:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB5CD1159991D5A0305975655EB49929B5029C8B
        Validity
            Not Before: Jul 24 02:27:21 2026 GMT
            Not After : Jul 25 02:40:21 2026 GMT
        Subject: CN=B69FF9570B0E8CA926A90F8E55A153F5BB0AC911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:ff:20:42:fd:24:5b:f0:e3:01:15:a1:5d:
                    16:18:54:8c:af:98:73:42:ba:fe:16:a7:53:98:ab:
                    20:6b:7b:bb:ac:f8:78:62:62:1a:19:49:29:ce:5a:
                    52:2c:bc:8e:61:c1:2c:41:6a:5b:3c:ad:8a:9d:44:
                    36:ac:20:28:e4:fc:cd:b8:88:09:db:b5:8e:18:ca:
                    80:a7:d6:6e:6c:6f:18:89:78:ac:dd:3e:a6:e3:ad:
                    ed:b9:61:95:9f:1a:6c:18:bf:69:1a:0e:99:8d:c6:
                    49:d9:4c:63:e2:53:60:0b:44:c6:4a:bf:7a:d5:15:
                    3b:13:e5:9a:31:5c:0a:e3:e6:21:29:ae:92:3b:49:
                    41:43:05:ec:36:fc:03:cc:13:30:93:ac:7d:fd:f0:
                    de:65:72:7f:e0:95:24:03:62:82:50:93:f3:36:96:
                    27:ca:af:9a:d0:af:fb:40:79:df:27:8e:f7:b1:03:
                    83:84:c8:06:de:3a:e6:18:53:89:5e:9a:e0:b0:ff:
                    4e:ca:4e:10:a7:b6:77:da:13:7e:a7:d8:64:71:7f:
                    4f:d8:72:f5:b9:70:ea:22:45:dd:ab:6c:9d:41:b8:
                    9c:46:58:2f:be:cb:04:dd:af:06:75:96:cc:8b:3a:
                    16:24:f2:f9:40:69:76:6b:18:8a:02:29:dc:31:e1:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:F9:57:0B:0E:8C:A9:26:A9:0F:8E:55:A1:53:F5:BB:0A:C9:11
            X509v3 Authority Key Identifier:
                keyid:FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:b2:95:17:e5:d0:ae:77:93:42:26:4e:eb:c8:bb:b7:ce:
         a3:7d:9f:00:27:e6:90:e4:fe:b8:16:66:12:88:b2:19:1a:c6:
         d6:01:b4:27:6b:f3:a5:13:d1:10:84:9f:7f:3d:ea:ca:29:bb:
         94:83:b5:5f:a0:0c:77:99:da:bd:7b:55:02:82:86:46:e4:8f:
         eb:e9:75:9b:d7:e2:e6:4b:ac:82:66:54:52:72:87:01:55:75:
         ba:74:8d:59:4e:70:80:eb:16:5b:8d:7b:19:03:85:99:74:3b:
         b4:85:0d:fa:98:14:51:d8:78:6b:a2:31:0c:8c:b9:4b:d2:08:
         d5:f7:4b:34:a8:36:5f:02:91:09:82:d6:f7:7a:4a:9c:d9:ff:
         05:8a:5c:d5:3c:2f:3a:23:a2:ea:c1:33:01:bc:43:71:f2:d9:
         17:f0:a4:a5:86:45:dd:5f:74:33:fe:ac:36:42:f2:ce:d1:84:
         12:fa:f8:8c:0e:4c:e2:83:f8:32:2b:c6:0a:a4:01:a7:9e:7d:
         1a:b6:d0:0e:4f:3c:72:18:9f:e0:7a:50:3a:e8:69:74:21:72:
         f7:a8:80:d8:95:83:1b:24:23:12:b5:f5:36:e2:d4:c7:92:3c:
         7c:0c:a6:39:55:ff:0a:ee:3f:00:86:b6:b4:a7:a8:c6:f6:21:
         52:9c:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:13 2026 by rpki-client