Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft
File:                     D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft (raw, json)
Hash identifier:          zLSzpPvqCOkqm2GzzI6SnnXzlWTf/MUjMxCxKP5nfos=
Subject key identifier:   C5:B7:1A:C0:B6:94:45:6A:2E:74:E0:2D:15:66:7B:E4:AB:93:D4:2E
Authority key identifier: D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A
Certificate issuer:       /CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A
Certificate serial:       250883155E0BDEEA6E7AE97E3BAB9116D6A712BB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 22:47:41 +0000
Manifest this update:     Thu 23 Jul 2026 22:42:41 +0000
Manifest next update:     Sat 25 Jul 2026 00:25:41 +0000
Files and hashes:         1: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: osJeCPZtE9R9btD8iw5N1b2W8PoHsZHfReclzn2JK+k=)
                          2: D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl (hash: LGK1C5lXFMGunGWLHHiCQHE0PHj1p1OZMyYWz91fRHU=)
                          3: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: XXYg212KqJilVz4UQhoA9JNZDN5djYbD/oi5ScwKYIs=)
                          4: 3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa (hash: v4OcOT72Y+Fw3xPxNhOv5K2oe1NqroMaIJLaKP7M7LE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl
                          rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:08:83:15:5e:0b:de:ea:6e:7a:e9:7e:3b:ab:91:16:d6:a7:12:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A
        Validity
            Not Before: Jul 23 22:42:41 2026 GMT
            Not After : Jul 25 00:25:41 2026 GMT
        Subject: CN=C5B71AC0B694456A2E74E02D15667BE4AB93D42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:d1:20:4d:b1:e0:2c:6b:55:dd:97:e1:22:
                    eb:48:21:e4:59:8a:e1:da:ea:71:20:f3:9d:de:67:
                    2e:a7:e4:96:88:ee:67:02:75:9d:d1:aa:a1:f2:f2:
                    d2:28:47:ed:af:72:60:df:c7:90:a6:a3:02:a8:40:
                    23:6b:e2:7a:73:11:0c:06:66:a3:0b:09:df:91:d2:
                    86:61:61:38:d5:31:8c:ff:21:7c:0b:5c:a1:19:cb:
                    1f:96:07:09:fc:a7:48:9f:b3:e4:09:dd:8a:ea:55:
                    f0:ea:32:9a:41:d6:65:be:b9:fe:be:55:dd:ce:11:
                    eb:a3:d7:a2:54:00:13:1d:4b:37:39:79:4d:8a:ae:
                    3c:50:53:62:d1:06:89:33:74:0e:89:1d:8c:98:3b:
                    59:d0:ce:6d:f5:9a:75:58:e6:e6:5a:e2:f8:34:60:
                    c8:81:11:e8:9e:3f:52:da:73:04:1a:7e:37:0a:1d:
                    f4:55:fc:1d:e5:1a:76:fb:49:c3:a6:38:29:49:25:
                    7d:d6:dd:7b:da:63:f3:04:7c:cb:28:d2:1e:68:39:
                    9d:4f:c5:18:a4:cc:c0:3a:08:8b:d3:59:8e:6c:42:
                    b8:e5:16:a6:c6:3f:f7:21:4a:34:c4:14:18:11:b4:
                    a3:99:41:79:69:c8:1f:b3:9b:44:7d:22:d8:8c:70:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B7:1A:C0:B6:94:45:6A:2E:74:E0:2D:15:66:7B:E4:AB:93:D4:2E
            X509v3 Authority Key Identifier:
                keyid:D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:51:ce:67:cb:1f:1e:34:91:a6:e1:c9:69:ab:09:49:8d:
         d0:69:46:33:ca:c2:cf:3d:ee:93:0f:d1:a3:b6:f1:51:7c:94:
         b7:f4:dd:f8:41:36:64:45:8a:1a:57:0d:0f:e0:5a:58:3b:b6:
         aa:9b:ae:d3:c0:27:4c:33:18:1b:e3:7d:53:08:c3:8c:6e:15:
         7e:05:5c:12:ce:be:6f:45:73:9b:cc:37:00:9c:4a:52:ca:a4:
         92:a2:82:04:59:39:1c:21:29:3e:c7:37:2d:87:d0:bd:be:5f:
         e7:8f:22:0a:75:c2:f4:ac:6d:78:9f:98:63:36:79:59:99:eb:
         8f:27:26:54:45:d9:9b:06:57:f7:5f:3a:a4:32:0d:8f:fc:67:
         a7:5e:28:d5:d4:11:13:67:17:96:3c:d8:8a:76:18:54:9a:20:
         06:1c:41:50:f9:4b:25:0b:17:c8:1b:75:0b:b5:22:65:32:b0:
         5b:01:0a:3d:98:67:0d:cf:af:23:f9:5e:73:0c:7b:35:51:b1:
         0d:7d:ec:8c:3a:9a:03:d8:51:15:ee:fc:6e:b9:85:d0:59:95:
         60:b7:48:85:e4:a8:43:1a:b0:68:45:77:8b:06:97:90:fd:fd:
         68:61:3c:51:dd:c6:63:1a:6a:44:d3:df:50:fb:91:88:16:0a:
         02:d2:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:47 2026 by rpki-client