Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft
File:                     2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft (raw, json)
Hash identifier:          N2CcfJI55GPiFR8fU5b4lHVjQ32DwH02a8qR+6Jfqrc=
Subject key identifier:   F0:08:B2:AE:20:D8:E4:D8:09:BE:AA:CB:75:2F:14:A4:5B:46:37:E5
Authority key identifier: 2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA
Certificate issuer:       /CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA
Certificate serial:       1BA03EAE879A3BE2A40129374D564D95210DE9FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 10:47:36 +0000
Manifest this update:     Fri 24 Jul 2026 10:42:36 +0000
Manifest next update:     Sat 25 Jul 2026 13:28:36 +0000
Files and hashes:         1: 3130332e3137362e3230302e302f32342d3234203d3e20313532333733.roa (hash: Jv5U5LGovEDFBhrf2yN8LsratIXrB4UcO/MW+FaftYc=)
                          2: 2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl (hash: h2bZwvAysIb5RYZcV71P0Eg/lrcI8VncaYAh/x/tpjs=)
                          3: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: eNG7+LqFPcA2X6MnUSyw57FaBVmmkZ9qB88jQfVFgQw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl
                          rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a0:3e:ae:87:9a:3b:e2:a4:01:29:37:4d:56:4d:95:21:0d:e9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA
        Validity
            Not Before: Jul 24 10:42:36 2026 GMT
            Not After : Jul 25 13:28:36 2026 GMT
        Subject: CN=F008B2AE20D8E4D809BEAACB752F14A45B4637E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:d2:5e:27:2f:85:2f:57:0f:e9:40:50:28:
                    97:60:0e:3e:90:69:ea:02:5a:a6:89:57:27:31:ae:
                    a4:79:9a:16:3c:40:ad:aa:89:92:c6:e2:8a:7e:c6:
                    d7:ff:be:21:88:28:b7:7b:90:d2:8b:e4:6a:cd:9e:
                    8c:c6:f6:2a:e9:66:b3:de:18:64:a4:48:8a:ac:4e:
                    c3:d6:a6:75:0d:da:0a:ab:60:a7:6d:66:4d:2f:94:
                    20:52:4d:ce:04:1c:63:5d:c5:eb:cc:dc:9e:fd:ad:
                    87:fb:6a:05:20:75:6b:0c:5e:fb:20:61:87:ee:06:
                    f2:06:41:cc:e8:bd:ee:8e:44:4d:8b:36:11:e6:e7:
                    15:9f:f6:f8:50:4c:46:75:e6:7a:07:39:46:d6:fe:
                    cb:cd:1b:ff:3d:c4:ef:bc:49:80:fd:4b:4a:c6:44:
                    5a:9d:ac:04:c2:a1:f7:54:60:13:61:72:4e:5e:48:
                    fc:1b:f6:e2:36:76:df:04:ae:d1:7a:9b:e2:be:3a:
                    fc:46:c8:4e:a2:a7:de:11:73:0c:82:f2:89:74:3a:
                    01:bc:42:6c:d4:2d:78:23:64:09:4c:5d:c4:31:33:
                    57:6d:ab:0a:0d:33:1a:e4:d7:74:4b:5a:24:41:76:
                    07:ff:f6:b5:ac:8f:c5:8c:8a:11:78:69:c9:40:79:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:08:B2:AE:20:D8:E4:D8:09:BE:AA:CB:75:2F:14:A4:5B:46:37:E5
            X509v3 Authority Key Identifier:
                keyid:2A:7F:B8:01:6D:A0:00:A9:D1:0C:98:09:C4:4E:DE:2E:9F:DA:B6:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/2A7FB8016DA000A9D10C9809C44EDE2E9FDAB6FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:35:1d:32:98:5a:9a:1f:65:9d:64:be:ed:ef:47:ea:11:a6:
         66:c8:0f:d8:9b:2b:3c:94:e7:1e:99:32:db:0d:e2:31:03:ce:
         22:dd:33:42:80:51:ba:8d:c9:c9:b7:f2:18:d0:78:f9:6a:e1:
         54:7c:1b:d0:95:3e:d4:5d:c8:8b:22:ef:01:c2:a0:12:66:d3:
         4c:f5:d0:43:1e:7c:f4:6b:89:18:84:b2:43:d5:54:ce:89:10:
         8e:74:f6:16:1a:bc:5e:3c:e9:b5:e5:65:94:18:19:af:d8:c9:
         54:0c:08:73:5f:bf:47:a3:7d:b0:e2:37:fe:c3:46:4d:37:0a:
         95:8a:31:94:62:4e:2d:d0:99:bb:67:7f:4c:ea:88:1e:aa:89:
         7f:8e:ac:d0:95:32:fc:82:44:39:3d:07:03:0d:43:27:01:96:
         e4:ae:38:dc:ad:53:85:4f:9e:10:76:2f:65:63:2d:8d:e2:6a:
         a2:76:0d:c6:28:be:41:45:ae:79:bf:5b:1a:94:87:87:34:1d:
         6a:3c:74:ed:44:37:e4:2c:bb:fe:23:72:02:c4:73:08:ae:93:
         44:2f:7a:d0:dd:f4:4d:2b:04:dc:bd:b8:38:38:6e:db:38:f1:
         29:02:05:60:d1:7c:39:a2:2b:41:ee:65:0c:41:62:01:4b:0d:
         24:8f:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:34 2026 by rpki-client