Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
File:                     60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json)
Hash identifier:          wG2OtS7CuX1j0Hvb83Ym0GsdxwzOsvTDlTif5sa47Rw=
Subject key identifier:   54:1D:AF:29:61:BE:14:8F:E3:63:72:72:CA:A6:38:2B:71:B6:6A:C3
Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
Certificate issuer:       /CN=60E799376F38EB181976A659060E6D998B4DB2D3
Certificate serial:       50FA46AF6458E985C01AC741B8CA1407F7024961
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 13:11:06 +0000
Manifest this update:     Thu 23 Jul 2026 13:06:06 +0000
Manifest next update:     Fri 24 Jul 2026 13:55:06 +0000
Files and hashes:         1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=)
                          2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=)
                          3: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: oBMV8301GWjNOUEr9FmZ4kVWHmg5+CRCyIb9wywgaFE=)
                          4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
                          rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fa:46:af:64:58:e9:85:c0:1a:c7:41:b8:ca:14:07:f7:02:49:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3
        Validity
            Not Before: Jul 23 13:06:06 2026 GMT
            Not After : Jul 24 13:55:06 2026 GMT
        Subject: CN=541DAF2961BE148FE3637272CAA6382B71B66AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:f3:88:51:26:a8:32:41:45:d4:92:26:9f:
                    ef:9a:7e:e5:d2:f4:fb:d7:de:e9:21:93:10:bb:6a:
                    81:fb:09:27:19:d8:a4:12:2c:3b:c4:ca:29:ed:e9:
                    4d:e6:ef:d8:e4:91:d0:87:53:2a:30:dd:30:c9:3e:
                    7c:8e:ec:39:84:12:fa:10:de:84:31:12:5e:ca:25:
                    3b:e9:3f:5b:c1:20:47:05:2e:3b:d8:cb:37:a7:b0:
                    4e:77:73:b4:9e:50:8c:74:4e:e3:e9:11:a2:ff:23:
                    7e:6a:1d:e0:a0:c5:1c:dc:e9:e8:70:41:95:58:a5:
                    43:99:78:e1:1e:bf:c1:b9:17:cc:06:9d:48:cf:66:
                    c4:84:f0:c9:6a:60:7e:b0:43:3a:57:cb:7a:fd:ad:
                    f3:23:8d:40:a9:6f:45:02:dc:80:8f:ac:72:2d:04:
                    3d:fb:6d:5b:d8:f5:55:12:e6:f4:3c:49:4c:99:29:
                    4e:b0:a6:4f:3c:d3:78:fc:96:54:cc:e5:08:68:3a:
                    90:95:47:a7:d5:72:89:5e:be:3d:ea:3b:75:a1:d7:
                    d0:17:d0:33:ae:3d:67:76:f9:97:04:4b:02:41:bb:
                    26:02:01:21:10:26:e7:2c:ca:f7:56:17:a3:eb:5e:
                    19:ad:50:51:02:ca:13:51:b8:ff:45:6f:13:e1:7d:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1D:AF:29:61:BE:14:8F:E3:63:72:72:CA:A6:38:2B:71:B6:6A:C3
            X509v3 Authority Key Identifier:
                keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:be:95:5e:f5:d0:d8:d5:6e:6f:f1:18:06:8e:69:e1:ac:23:
         a1:56:08:13:56:9e:50:40:1a:96:a6:1a:f7:cb:1a:97:27:81:
         1b:26:d5:97:ae:6b:99:67:31:3e:eb:28:9d:02:02:60:4d:b3:
         a6:30:0f:7a:7e:44:50:3e:9b:6b:80:08:eb:0f:d7:f6:f6:f8:
         1e:93:29:5e:3e:6b:99:8c:f8:dc:b2:59:97:29:a6:74:95:f3:
         a4:ca:56:bb:e3:39:69:37:9e:f9:33:c4:a0:34:7b:31:36:ab:
         56:a5:64:6d:60:aa:25:50:1d:f8:36:5d:98:40:fe:d2:66:5d:
         70:e2:52:cc:e6:e5:b6:ce:0d:c0:19:d3:51:97:9a:b0:bb:f5:
         3f:0a:1b:a0:40:11:bc:ce:ac:d4:e3:1b:f7:72:e8:8f:24:c4:
         d9:a1:bf:81:28:be:47:b9:0b:d8:37:e5:da:e0:0f:0d:cd:c0:
         b5:57:5b:b9:80:34:dc:01:5b:08:8c:56:11:e6:89:d3:8f:c5:
         ec:43:1a:26:89:b2:0a:49:ec:ba:4a:db:9b:f0:ed:76:b0:d3:
         75:e3:6b:27:4e:2b:55:4a:fa:43:41:b1:98:b4:c8:db:e7:71:
         25:74:ab:e7:65:6e:05:00:2f:53:f8:7f:dc:62:c8:a7:d3:b8:
         f7:bf:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:23 2026 by rpki-client