Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft
File:                     8FB017F8558B134E65670C5E56417CAA2FC460F1.mft (raw, json)
Hash identifier:          MWJERWVjshkB5kd0Bi48tf+tR6FOo5yjM2oj/Ho5Twk=
Subject key identifier:   44:5C:26:DD:3C:B2:35:B9:D1:01:38:C7:16:27:69:08:16:E3:F0:93
Authority key identifier: 8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1
Certificate issuer:       /CN=8FB017F8558B134E65670C5E56417CAA2FC460F1
Certificate serial:       77EBA6AD666E5F577431C6EF53A701A7DB287522
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 20:35:09 +0000
Manifest this update:     Thu 23 Jul 2026 20:30:09 +0000
Manifest next update:     Sat 25 Jul 2026 00:17:09 +0000
Files and hashes:         1: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: DZWl5mWmmx3C6HZfgC0P5GgRxbzQDenyir2DbhS+/vY=)
                          2: 8FB017F8558B134E65670C5E56417CAA2FC460F1.crl (hash: WhUydkUjgZoiBuYvvq9evotuhR7j6KDTW8q6C/lmMQg=)
                          3: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: toXJPhNtOXf98GJBbdqi9mllMSbcAgrmezktdUtueZ4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl
                          rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:eb:a6:ad:66:6e:5f:57:74:31:c6:ef:53:a7:01:a7:db:28:75:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB017F8558B134E65670C5E56417CAA2FC460F1
        Validity
            Not Before: Jul 23 20:30:09 2026 GMT
            Not After : Jul 25 00:17:09 2026 GMT
        Subject: CN=445C26DD3CB235B9D10138C71627690816E3F093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:9c:78:f5:e3:29:0b:65:f8:ef:2b:56:5b:
                    b7:0c:6c:1f:ae:28:91:e4:7d:a9:18:f1:db:29:34:
                    1c:dd:bc:bc:37:d4:7b:5b:c6:bc:e9:bb:78:a6:ce:
                    72:ea:5f:e0:67:7e:32:3e:ef:55:12:12:18:bc:ff:
                    10:0f:a4:cc:f0:44:94:7a:40:98:2b:b6:52:e0:e4:
                    95:db:ff:b0:82:ed:cc:2e:5e:35:d6:28:ec:e3:76:
                    4b:7d:67:58:3b:0f:6f:68:a5:51:be:0e:ac:66:2e:
                    28:47:7b:52:a8:67:11:6f:ea:23:c8:50:16:ef:9a:
                    f6:38:d3:d0:2f:07:15:66:45:ef:8b:17:47:af:59:
                    9e:a2:f2:b0:79:ac:90:af:10:04:85:84:13:bb:58:
                    60:0c:24:b0:f9:ff:96:8d:5c:3f:1e:0c:10:0a:29:
                    ea:01:e8:1f:18:ca:0f:e9:a5:b3:f4:87:92:ec:79:
                    11:84:81:c8:f0:bc:b2:7b:44:de:37:5f:6b:34:fd:
                    a8:6c:25:af:6a:8b:11:b8:06:62:5f:ff:aa:51:12:
                    1c:a4:61:c8:f2:f7:6f:d5:45:de:f9:2b:15:42:78:
                    05:42:76:0f:22:d4:7d:bf:99:5a:b3:97:02:e8:e1:
                    51:94:14:e6:0b:bb:de:ae:89:f7:70:09:ee:62:c3:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5C:26:DD:3C:B2:35:B9:D1:01:38:C7:16:27:69:08:16:E3:F0:93
            X509v3 Authority Key Identifier:
                keyid:8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:55:b7:ab:75:53:4b:89:0b:f9:aa:da:39:a6:25:33:fd:47:
         86:c8:ba:17:5c:35:79:cb:05:16:bc:b0:b7:b8:d1:4d:c3:fa:
         94:2f:bc:1d:8d:d3:c6:45:55:2b:c6:2e:0a:58:b7:7f:48:a6:
         bc:49:94:fc:bd:b6:94:64:e0:01:43:86:46:a1:3b:60:9b:57:
         b4:f4:4e:f2:50:2a:c1:27:0e:c4:4c:f4:a5:c2:98:78:36:3b:
         7c:fe:43:d3:6b:38:fc:d8:74:bc:25:b3:af:8d:05:8f:fb:eb:
         93:43:18:a8:f7:b4:45:05:04:2a:ad:82:cc:70:85:25:a0:ad:
         d4:c8:1e:1d:11:3c:5c:23:c6:29:f7:07:3d:96:e6:38:4f:2e:
         84:a0:40:77:f6:c1:ad:25:a1:50:e2:7b:dc:6b:a6:70:33:cc:
         67:ce:8a:95:30:2c:ae:10:60:ae:9a:ab:91:5b:f5:4e:1e:52:
         0a:75:7b:1e:e5:70:f3:56:5f:78:5e:c1:82:48:f8:e5:34:9b:
         32:f6:3b:10:7a:43:4e:2c:74:f3:9c:4f:66:e2:ec:04:14:d6:
         49:3e:12:49:37:91:60:97:dc:c3:91:2b:0d:86:ca:6f:9b:65:
         af:ef:07:69:9d:81:8a:6d:da:9a:7f:3a:44:06:45:81:f8:49:
         8a:9c:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:49 2026 by rpki-client