Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
File:                     60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json)
Hash identifier:          7RGpKt5VVsFKe3/jw7uMp29BBv2eNCKtPhGkrNCPA1I=
Subject key identifier:   D2:D8:E9:03:47:82:CB:FC:E1:45:99:F0:D3:4B:F1:D4:E6:45:60:07
Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
Certificate issuer:       /CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Certificate serial:       47F7DCA7E15B603A5C2E5D8B7D8EF79090CE2BFE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
Manifest number:          C2
Signing time:             Wed 23 Sep 2026 14:08:39 +0000
Manifest this update:     Wed 23 Sep 2026 14:03:39 +0000
Manifest next update:     Thu 24 Sep 2026 17:54:39 +0000
Files and hashes:         1: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: jGGIUlaYTa4ydSlr5z6mKrEH2xdwHMBpEwthNeFUFMY=)
                          2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
                          rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 17:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f7:dc:a7:e1:5b:60:3a:5c:2e:5d:8b:7d:8e:f7:90:90:ce:2b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05
        Validity
            Not Before: Sep 23 14:03:39 2026 GMT
            Not After : Sep 24 17:54:39 2026 GMT
        Subject: CN=D2D8E9034782CBFCE14599F0D34BF1D4E6456007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:fc:b0:70:b8:dc:36:33:5d:f2:d9:be:a3:
                    1e:a0:0f:48:b9:ec:80:7d:73:dd:35:f8:f3:76:d1:
                    65:ed:44:66:f0:18:27:f3:c3:f4:63:61:52:93:ca:
                    21:b3:85:72:fb:d3:11:4f:e6:b4:1f:3a:7b:62:85:
                    39:87:c1:89:b0:d8:74:e7:03:27:67:70:f0:49:31:
                    83:95:27:78:97:0b:5b:1b:d2:b9:82:d2:58:50:72:
                    8c:bc:af:93:22:5e:4a:9d:23:c6:a1:f4:79:ee:dd:
                    8a:1b:3b:d8:42:3d:91:f1:0b:b5:67:43:0c:da:1c:
                    15:3c:ab:16:7f:4a:1c:6e:e0:a3:41:0a:3f:7c:38:
                    f3:52:e2:e9:b2:81:dd:3a:b4:c4:63:6d:cb:0a:a0:
                    9d:4e:4c:76:1a:f3:9d:b4:63:a6:f8:71:a3:1d:bd:
                    68:60:5f:91:99:9b:d7:aa:5a:2e:e8:6d:ba:07:74:
                    45:76:e7:07:51:4c:5f:3f:d5:72:90:a3:e4:ce:aa:
                    c1:51:c0:f0:e2:45:54:f5:7b:c4:be:40:33:3b:7d:
                    db:7a:9d:d2:29:0a:3b:d0:36:6a:54:9f:d9:02:3e:
                    98:3b:82:1a:d8:22:c4:d5:82:b7:18:b9:27:4c:4d:
                    6a:7c:10:a8:e2:87:d9:31:5e:03:c0:71:99:1e:8d:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D8:E9:03:47:82:CB:FC:E1:45:99:F0:D3:4B:F1:D4:E6:45:60:07
            X509v3 Authority Key Identifier:
                keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:44:46:97:c4:48:13:a8:19:c7:b8:21:fa:f2:c4:75:9e:
         49:4e:c9:68:d7:c4:34:ce:55:36:f5:16:05:0b:ab:83:65:ea:
         02:ca:9c:79:e2:e9:3b:5a:e0:d2:bf:2c:22:03:8c:6d:73:06:
         61:72:9a:09:85:d4:cc:19:cd:b9:72:cd:9b:ce:0c:fb:bd:58:
         d8:ee:af:70:62:a1:b3:e6:d1:ae:f2:97:01:b3:74:b5:f8:4c:
         1a:00:23:09:90:1c:a1:1d:e3:80:2d:d3:25:ab:ab:3d:16:42:
         2d:45:43:7e:65:a3:29:5d:ff:5b:f0:b2:f8:88:68:52:50:45:
         c6:eb:29:97:f1:ba:84:65:20:86:bb:dc:20:81:99:bc:da:fe:
         da:15:fb:fb:70:59:c5:1e:72:de:e1:be:59:5d:a1:8f:a7:5b:
         1b:9e:0f:56:f1:67:db:45:ff:ad:65:2f:3d:4b:db:61:68:0b:
         ba:4f:11:6a:56:b3:3c:76:1d:0c:80:e2:ad:a6:ab:cb:61:42:
         35:ba:cd:11:d0:a6:18:48:6b:74:cb:9e:17:c1:9a:9e:75:be:
         05:f9:7c:26:81:c8:47:d7:f9:7e:9f:6a:df:10:ba:03:2a:45:
         b4:34:91:31:e1:a9:7c:76:7b:ca:40:5b:bd:7b:f3:ac:a4:8f:
         ff:c3:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:56:39 2026 by rpki-client