Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft
File:                     6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft (raw, json)
Hash identifier:          LQXPtCUHgR/c2Gyo3afWsQkIAxOpTKEQUXGgVwSZGdo=
Subject key identifier:   25:C8:9C:71:0A:B5:58:C4:20:84:2C:24:59:C7:B5:AD:B1:41:06:23
Authority key identifier: 6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17
Certificate issuer:       /CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717
Certificate serial:       1BCB29E378F8BDBA17F34047DFDDF0EB8619E9D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft
Manifest number:          6D
Signing time:             Thu 23 Jul 2026 16:04:31 +0000
Manifest this update:     Thu 23 Jul 2026 15:59:31 +0000
Manifest next update:     Fri 24 Jul 2026 17:55:31 +0000
Files and hashes:         1: 6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl (hash: TjYuHaRYB9TjG9LERNdWuCG1Ww+3+Apcm/cqbUP4MDU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl
                          rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 17:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cb:29:e3:78:f8:bd:ba:17:f3:40:47:df:dd:f0:eb:86:19:e9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DC0B7E14B41268EB509C8D548C9AA052EC17717
        Validity
            Not Before: Jul 23 15:59:31 2026 GMT
            Not After : Jul 24 17:55:31 2026 GMT
        Subject: CN=25C89C710AB558C420842C2459C7B5ADB1410623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:2e:90:75:7b:7f:73:0d:8c:7a:71:cc:cc:
                    08:01:8d:2b:f6:69:25:0c:4d:19:69:1f:24:fc:b0:
                    49:d0:03:02:92:d8:37:70:db:9e:c7:88:1f:bb:fd:
                    06:48:8e:6c:d3:d8:3c:da:81:68:70:06:95:c8:a1:
                    43:2b:29:56:bc:a3:db:d7:8f:09:6c:e6:d5:5d:7a:
                    c1:f4:e6:e0:89:50:61:f2:a2:33:98:58:e9:a9:c5:
                    1d:e9:3d:d0:5a:bb:99:56:11:a4:67:f4:32:ed:e6:
                    cb:a0:78:99:da:39:c6:7c:aa:66:5d:90:a7:55:a3:
                    6b:9b:d6:42:e7:da:6b:f4:3d:ec:a7:c5:2a:d9:56:
                    a4:f4:c1:08:ce:3f:f1:d5:b9:bd:58:6f:76:b0:08:
                    fc:9c:ed:94:09:07:99:3e:37:6a:b4:f4:87:6c:10:
                    60:17:1d:73:3a:61:7b:f3:ae:c4:d7:ee:7e:ce:a4:
                    ce:5b:5d:04:8a:9f:58:45:54:67:b8:66:6c:3c:11:
                    3a:db:55:57:0e:de:45:36:95:9d:2a:e2:35:76:f3:
                    b1:0d:14:0c:6e:ed:62:eb:bb:2e:10:cb:56:d2:40:
                    36:62:0c:32:75:2f:fa:98:7d:eb:ff:9b:ed:78:2b:
                    6a:d9:5f:20:a0:65:3a:4a:52:db:a0:58:0d:b5:57:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:9C:71:0A:B5:58:C4:20:84:2C:24:59:C7:B5:AD:B1:41:06:23
            X509v3 Authority Key Identifier:
                keyid:6D:C0:B7:E1:4B:41:26:8E:B5:09:C8:D5:48:C9:AA:05:2E:C1:77:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DC0B7E14B41268EB509C8D548C9AA052EC17717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/6DC0B7E14B41268EB509C8D548C9AA052EC17717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:43:6c:a5:1f:72:aa:09:28:16:0e:ad:3d:1c:bd:8c:bb:6c:
         95:c9:1e:4e:db:86:4e:2e:0b:6d:d8:dd:aa:e0:bd:de:bf:a4:
         5a:bd:39:72:66:5c:c4:71:00:2e:30:98:c8:a4:26:3e:e3:88:
         08:51:9a:e7:e9:bf:2b:47:74:96:08:e0:d5:e3:d4:e9:48:0e:
         7b:43:34:ad:c7:a7:5d:9f:45:d3:f5:64:59:78:34:28:8a:c9:
         03:b3:8e:4b:3a:de:aa:d0:df:b9:41:7d:01:57:fc:dc:7f:54:
         2e:45:92:76:a0:b0:90:c0:17:cb:ac:17:33:5d:a0:4a:59:65:
         21:de:fa:e6:4b:43:ec:72:bc:11:52:bd:18:f1:41:ff:cb:2e:
         af:3c:b2:fb:ef:e6:f3:7a:df:df:3e:3c:e0:b8:f7:64:d4:f1:
         9d:b4:4f:39:c7:f5:ca:e6:2d:f0:b3:96:b8:3c:ab:90:16:5e:
         c3:09:01:10:cc:bf:91:fd:d9:31:b6:8e:5e:e8:81:41:e0:06:
         24:82:84:0e:8f:ad:73:f7:dd:24:44:07:c2:32:79:a1:9a:03:
         04:fa:06:e8:fe:28:e9:c2:49:f0:1a:7d:a8:28:78:c6:5a:0a:
         87:53:5c:8a:e8:a4:98:b0:9d:86:23:42:e8:87:53:c1:02:3a:
         f6:8d:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:00:54 2026 by rpki-client