Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft
File:                     72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft (raw, json)
Hash identifier:          h/RwSL0CbOEXcBctAUc8h/w+OiYStasBaI8o59Sg7gg=
Subject key identifier:   96:3F:D9:F6:F6:B5:7A:CD:09:5A:A7:B5:63:6B:2B:C0:D2:A1:75:40
Authority key identifier: 72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69
Certificate issuer:       /CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269
Certificate serial:       5390C11DEF8A9ADB111871D9AE044FCC7310AB4F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 17:11:02 +0000
Manifest this update:     Thu 23 Jul 2026 17:06:02 +0000
Manifest next update:     Fri 24 Jul 2026 18:56:02 +0000
Files and hashes:         1: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl (hash: c3zid7//BoYH61nd/8g5YPT5t0vQ4USJ6bBWsEWQudQ=)
                          2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: nCyY949MzU7hnQsLPWC6vzIr7exiuBneA4Uj38f4AKc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl
                          rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:90:c1:1d:ef:8a:9a:db:11:18:71:d9:ae:04:4f:cc:73:10:ab:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269
        Validity
            Not Before: Jul 23 17:06:02 2026 GMT
            Not After : Jul 24 18:56:02 2026 GMT
        Subject: CN=963FD9F6F6B57ACD095AA7B5636B2BC0D2A17540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:63:c2:4e:39:9d:8c:d9:de:22:63:27:9a:
                    7c:08:44:d6:2e:55:e0:2f:9e:db:7a:8a:6e:63:73:
                    13:c9:3e:78:62:68:f0:ec:76:5a:47:f8:c7:92:d4:
                    5b:b0:bf:d5:88:73:95:42:4f:4d:51:79:72:b8:d4:
                    4d:d5:80:79:7c:2f:74:57:e7:ae:a6:e3:78:10:f0:
                    78:79:24:e9:bd:2d:89:b4:17:6b:d7:69:2c:4f:25:
                    40:dd:19:ef:75:c5:1e:cd:71:1d:8f:e6:7f:ca:60:
                    14:ed:5d:36:a9:19:ec:93:ed:63:8e:99:ba:69:bd:
                    3a:f3:17:6d:67:fd:a4:dc:c5:0a:f2:7f:36:33:af:
                    72:d2:10:1b:00:61:d4:3e:ae:ac:53:6f:50:9c:70:
                    7a:fe:4b:c5:ec:29:51:ab:de:d9:3d:e1:6d:68:ab:
                    54:0f:2a:12:0c:43:cb:7b:f9:ac:16:aa:3a:68:83:
                    49:53:2a:62:ab:41:e1:49:9d:f1:25:5e:d5:6a:f3:
                    3e:bd:b7:79:de:f0:ec:f7:72:ab:a3:48:e4:70:8a:
                    f9:d5:12:ae:9d:89:06:1b:fc:37:80:cb:a5:09:b3:
                    9b:4b:44:81:92:ca:97:4a:0b:76:a1:7c:fb:90:1f:
                    17:fd:00:a5:61:8e:33:4a:6a:4b:7e:9e:98:79:78:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3F:D9:F6:F6:B5:7A:CD:09:5A:A7:B5:63:6B:2B:C0:D2:A1:75:40
            X509v3 Authority Key Identifier:
                keyid:72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b6:7f:80:d1:ae:c9:bc:3c:22:41:bc:16:88:5c:66:de:76:
         3d:bd:b2:f6:b3:b9:b0:9c:00:27:9b:35:64:d6:9d:70:ce:9b:
         bd:07:7e:98:42:43:7d:81:0d:53:ff:84:7a:e2:97:96:9a:8a:
         e4:7f:71:da:01:10:dd:6f:ba:fe:3e:fc:d5:66:a9:35:51:4a:
         ae:1a:cc:43:f4:54:3c:af:80:ee:80:c3:49:f5:8f:9c:fe:fe:
         5c:61:53:15:ec:12:0e:2f:2c:70:f4:4f:e4:6b:e3:d8:c5:6e:
         74:d1:2b:27:36:a4:18:9a:72:23:9e:ea:04:fe:7c:3e:d0:5a:
         01:3d:c3:2f:37:ca:7d:32:79:65:ed:e0:17:13:73:c9:2b:a6:
         e8:e6:78:4d:28:47:d5:2f:1c:89:bd:d6:bc:c9:bb:e8:00:4b:
         be:bb:e8:bd:62:b4:54:cb:5f:f9:66:60:7c:fb:ea:ef:cb:8a:
         a7:d5:6a:88:14:75:0e:46:fd:68:78:61:73:e1:eb:dc:60:05:
         f6:3a:ff:54:3c:67:a3:a7:ad:69:4b:03:dd:e5:ee:4a:13:66:
         15:be:6f:65:1d:11:2b:62:21:0c:62:9c:e5:bd:4e:22:7f:7a:
         b0:a8:77:19:6d:66:b5:7d:1a:be:d8:37:62:79:77:92:35:15:
         8f:09:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:08 2026 by rpki-client