Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
File:                     411E8C45894267DCEFA20514C89165EE7C17C4C4.mft (raw, json)
Hash identifier:          h62MLWoqw//gvigxqp8rRVG0BMyzeZA76dy+onFM/sc=
Subject key identifier:   E8:87:F0:10:CF:AB:98:B5:2E:67:A2:18:25:ED:00:79:B0:6E:97:A5
Authority key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4
Certificate issuer:       /CN=411E8C45894267DCEFA20514C89165EE7C17C4C4
Certificate serial:       3946840C2B737BF564D3E19343C14E7DA5EDF112
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 13:41:42 +0000
Manifest this update:     Thu 23 Jul 2026 13:36:42 +0000
Manifest next update:     Fri 24 Jul 2026 14:59:42 +0000
Files and hashes:         1: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: RWaRXWbQIpLKoTQziPLdF6KyPF26oe/DwncsbN1gjuY=)
                          2: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: Gd2IM01O7z8fqk7GpG61d/HhlCVHlpL3rkOIOFXsAII=)
                          3: 411E8C45894267DCEFA20514C89165EE7C17C4C4.crl (hash: dgFB2T9EMSejevGTWb0nCw89zGqp+/KIAU5w5emoxrA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl
                          rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 14:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:46:84:0c:2b:73:7b:f5:64:d3:e1:93:43:c1:4e:7d:a5:ed:f1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4
        Validity
            Not Before: Jul 23 13:36:42 2026 GMT
            Not After : Jul 24 14:59:42 2026 GMT
        Subject: CN=E887F010CFAB98B52E67A21825ED0079B06E97A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2c:34:d6:ca:4f:53:62:f6:b2:db:73:11:5b:
                    8b:9c:c4:88:41:b4:cf:32:dc:69:f6:a4:57:75:b8:
                    4a:ed:cc:30:bb:11:16:c5:ad:e4:3b:31:14:5e:4f:
                    57:b7:d3:d9:8f:d5:a6:78:11:93:7e:75:30:41:ca:
                    2e:fb:05:c7:5f:58:80:f9:a1:c4:d6:82:dd:63:88:
                    5b:4d:16:03:29:ac:0c:d2:a7:42:f8:14:9f:36:09:
                    ea:e7:16:ee:c2:3c:e6:e2:0f:39:ca:ed:15:a1:b2:
                    7d:db:fd:64:d2:7a:d5:46:ea:6e:ec:28:ae:f8:86:
                    bf:05:a0:d5:11:8a:b9:57:a0:0c:d2:54:2c:12:07:
                    55:e8:ec:f7:67:c9:7f:5b:da:f7:c4:c5:58:33:ea:
                    f5:0b:85:b9:67:0b:e7:99:2f:0b:47:47:a8:1c:24:
                    4d:30:a0:81:7e:df:3e:7a:0c:9c:ac:6d:2a:e6:05:
                    ff:d5:41:6c:1b:72:58:85:71:39:c2:0b:ca:f3:0e:
                    1f:24:7e:24:1f:d0:c8:71:49:be:8a:aa:67:37:3d:
                    ad:c0:e2:9e:51:a3:f8:fe:4b:0c:37:6e:1c:23:f8:
                    d9:a2:27:03:f0:25:5e:25:f7:3c:2d:6b:09:44:d1:
                    5c:e2:a6:bf:c9:50:15:bb:24:d3:52:4b:41:c6:92:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:87:F0:10:CF:AB:98:B5:2E:67:A2:18:25:ED:00:79:B0:6E:97:A5
            X509v3 Authority Key Identifier:
                keyid:41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:09:4b:b6:78:56:e9:69:53:71:95:32:b1:ea:84:13:d7:ba:
         d4:8c:fc:fb:67:c3:48:3f:82:e2:25:c0:0c:a6:f7:dc:60:46:
         16:13:cb:37:15:37:35:02:d0:19:f7:c3:7f:fb:0e:6e:f3:be:
         1d:99:e9:96:31:85:95:71:19:d0:80:b3:6e:cf:61:b6:a7:0b:
         a6:47:9f:f4:0c:00:9f:f2:1e:28:20:7e:fd:66:ef:af:81:bc:
         f9:7f:b7:94:ad:1a:1f:0e:b4:ce:64:ee:d6:bf:95:c1:84:65:
         0c:ce:7c:3d:cb:65:d3:15:be:da:4a:40:99:a2:94:8a:ba:b6:
         2a:1e:db:b3:72:42:7c:b0:a6:ae:c7:36:4a:41:70:07:93:c2:
         01:4a:1f:b2:a5:db:fa:a0:31:89:ab:75:c1:ae:74:4c:39:de:
         78:ef:d5:b5:33:95:f8:97:cd:c5:4f:e6:fa:dd:1e:81:56:ae:
         7f:cb:f2:81:ba:f7:fe:a1:c9:7b:79:53:c9:27:36:c9:51:03:
         5e:ce:a9:37:4a:a5:84:09:d0:a7:49:42:93:16:43:46:86:2c:
         06:d8:c9:4e:bb:45:c5:b9:a1:8d:88:7c:ff:71:b8:c3:ea:b1:
         bc:38:51:03:53:eb:e4:59:f2:29:11:a4:01:d0:fb:fa:79:1d:
         94:2e:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:14 2026 by rpki-client