Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft
File:                     986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft (raw, json)
Hash identifier:          M8c9jb9pEpgGkqpXHdvkWzC9gQy12l64Pcr7o/cUPrs=
Subject key identifier:   2B:3F:B6:09:67:07:6F:8C:92:20:D5:59:8E:01:7F:F5:7D:7B:DE:14
Authority key identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5
Certificate issuer:       /CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5
Certificate serial:       2FACD513F89797582C70160325086FAE728CAEE1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 19:29:01 +0000
Manifest this update:     Thu 23 Jul 2026 19:24:01 +0000
Manifest next update:     Fri 24 Jul 2026 21:29:01 +0000
Files and hashes:         1: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl (hash: lsBkI9lIbNyWmj2POQW9IFtbL3Q9PiKjY2ksXBxLMmA=)
                          2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: CodcG2RlcElofIyHkhWkjp7iwOM0brF/BMzNO8nhSZI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl
                          rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ac:d5:13:f8:97:97:58:2c:70:16:03:25:08:6f:ae:72:8c:ae:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5
        Validity
            Not Before: Jul 23 19:24:01 2026 GMT
            Not After : Jul 24 21:29:01 2026 GMT
        Subject: CN=2B3FB60967076F8C9220D5598E017FF57D7BDE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:d4:81:ca:16:45:da:2b:ff:4c:94:6c:bc:
                    f3:54:b4:1f:55:13:db:60:3c:f3:a9:f0:45:0d:a7:
                    de:c6:6a:70:cc:ad:2b:f0:45:b6:f1:88:ff:f3:9e:
                    60:77:70:a4:75:62:47:bc:bb:4c:10:64:88:fb:69:
                    82:38:e8:42:1b:9f:04:ad:a6:2b:ab:6d:b0:f1:78:
                    7f:31:f0:34:1b:5d:ec:a7:80:b2:65:19:8d:a5:d3:
                    b6:9c:82:ac:d8:52:83:c5:4c:e8:42:cb:9b:ae:51:
                    f7:9b:b9:59:98:50:80:3b:1b:e5:10:8f:9e:de:67:
                    1b:39:3c:0f:d0:fc:06:56:be:d7:51:48:3b:79:02:
                    88:41:9d:c3:8d:f4:21:a0:c9:76:35:a9:ed:76:cd:
                    42:69:6f:de:7b:6b:ea:45:de:3e:21:b4:9b:0b:d4:
                    58:f3:b9:d8:77:69:64:e6:a3:69:c1:2e:36:01:85:
                    10:a8:49:de:3e:ee:03:ae:40:58:ef:bc:b8:a3:66:
                    66:d1:8c:2e:49:11:e4:ee:dd:57:06:61:82:e7:1c:
                    f7:e5:44:10:a8:de:48:b7:2c:ac:11:c0:27:2b:7e:
                    ba:7c:a3:81:59:79:44:d9:f1:78:8e:28:79:49:e5:
                    00:2e:d2:81:36:c9:b6:fe:6c:32:3f:4d:d7:3f:c9:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3F:B6:09:67:07:6F:8C:92:20:D5:59:8E:01:7F:F5:7D:7B:DE:14
            X509v3 Authority Key Identifier:
                keyid:98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f2:7d:c2:9a:35:6a:91:59:18:4e:d7:b4:df:c2:d1:d1:72:
         8f:69:a8:43:4f:8a:65:dd:32:2c:0b:b3:d3:9e:8c:27:16:20:
         db:44:03:ef:0b:75:e3:87:f9:49:42:92:ff:a1:4b:3d:37:b1:
         02:0d:98:10:55:5e:80:c0:13:de:87:02:ea:77:66:ab:5b:91:
         61:81:ce:a6:cc:e7:c6:93:e7:8d:92:18:2f:40:6a:1d:64:c4:
         df:0a:e4:78:b4:ad:58:f1:c7:19:51:1e:c7:a5:5c:d6:50:35:
         d2:05:6c:56:e8:a9:5e:1e:a5:08:84:ae:19:22:21:e1:57:56:
         f3:71:2c:ac:8b:f6:b9:f4:94:ba:64:40:73:04:5b:5b:81:1e:
         c1:e6:52:11:71:5f:0e:03:c4:00:a0:63:64:e8:90:69:82:52:
         f3:dd:0b:9e:26:bf:49:62:7f:af:cc:4f:a9:8e:74:f4:e3:94:
         18:56:d7:74:aa:6f:cf:32:0c:99:fa:ff:2f:27:36:de:08:8d:
         ff:85:bc:81:03:ac:f1:7f:a6:79:57:e5:8b:ff:cc:c7:2d:c1:
         41:22:c7:cf:69:d6:45:4e:46:21:85:2b:f7:59:ad:2b:d1:34:
         79:ab:a0:db:44:b6:92:6f:c3:25:93:a9:f8:9b:f8:69:a9:ef:
         3e:9a:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:28 2026 by rpki-client