Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
File:                     60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json)
Hash identifier:          k8BloAQE+gRK0+11t24b4pHIaCGtq9CYfjqRSTjiOaA=
Subject key identifier:   A3:8F:5D:8E:FF:7E:47:B3:07:0B:BA:68:0B:AB:36:C9:17:AA:1E:7A
Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
Certificate issuer:       /CN=60E799376F38EB181976A659060E6D998B4DB2D3
Certificate serial:       194870F2E3753B77E3793A6649BF794E769AD67B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 05:56:40 +0000
Manifest this update:     Fri 24 Jul 2026 05:51:40 +0000
Manifest next update:     Sat 25 Jul 2026 06:30:40 +0000
Files and hashes:         1: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: tOu56qnwyqea4rAQSsxVgm5nRK1Nvs9c0X8uyisFamk=)
                          2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=)
                          3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=)
                          4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
                          rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 06:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:48:70:f2:e3:75:3b:77:e3:79:3a:66:49:bf:79:4e:76:9a:d6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3
        Validity
            Not Before: Jul 24 05:51:40 2026 GMT
            Not After : Jul 25 06:30:40 2026 GMT
        Subject: CN=A38F5D8EFF7E47B3070BBA680BAB36C917AA1E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:4d:15:96:24:87:0d:ce:e4:79:72:a4:30:
                    5b:bd:99:52:ed:5b:23:7f:d9:cc:0a:75:cc:fc:c5:
                    b1:2b:7a:7f:34:bf:bf:ac:c2:1e:af:9b:3a:3b:fe:
                    ee:cc:68:cf:70:50:ff:28:ba:f3:56:f8:74:5d:62:
                    03:8b:ea:6c:0d:0a:cd:cb:c7:2d:91:36:3e:88:7b:
                    38:a6:8a:de:d1:51:d5:41:62:ad:d8:fb:87:3e:ec:
                    3a:d6:3e:e3:9d:de:96:93:58:69:c1:ed:72:66:b6:
                    c0:fc:3e:fd:58:0d:69:57:e3:40:be:58:3d:43:c3:
                    be:17:8c:ba:b8:4e:53:e4:c0:be:0c:f3:32:80:3d:
                    00:99:9a:46:44:13:6c:35:40:d8:de:7b:06:ae:70:
                    83:f0:df:05:d1:e8:f9:85:64:c5:b7:22:6e:0f:a9:
                    d2:5b:8d:d5:83:c0:6c:ff:b1:ae:de:8c:fa:73:22:
                    ed:ff:97:af:13:d4:3a:4c:cf:6f:db:f7:31:f8:78:
                    3e:ee:51:58:8a:c5:19:31:54:a8:21:b6:fb:8f:93:
                    ff:86:5b:bf:8f:77:7f:7e:f4:d1:85:a9:c3:e6:5c:
                    d3:88:2e:5e:ad:74:ae:9b:8f:aa:2e:d2:a5:5b:b7:
                    2e:4b:1b:1e:b0:e0:01:18:96:55:7d:4d:cc:96:fc:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8F:5D:8E:FF:7E:47:B3:07:0B:BA:68:0B:AB:36:C9:17:AA:1E:7A
            X509v3 Authority Key Identifier:
                keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d3:42:58:97:32:7f:1f:57:43:cf:c2:15:17:28:17:1d:f7:
         31:f7:c7:d0:da:e1:a0:a6:05:fc:b0:a4:32:e9:d9:f7:dd:87:
         1d:b7:e8:4e:1e:22:c1:17:d9:ba:f4:c3:8a:22:16:b8:b7:30:
         8a:eb:55:d1:39:1d:00:e4:d4:a1:ba:8e:9f:cb:65:63:b9:39:
         4a:0c:67:74:10:b5:f9:1d:e6:67:8c:55:54:6e:2b:ea:01:6a:
         a2:fb:4a:68:61:06:42:78:88:19:e4:f2:dd:9a:c7:ec:68:77:
         2c:1f:94:48:09:ab:93:43:31:bb:ba:e0:f2:06:df:fb:95:8c:
         b8:da:b9:7d:5b:3e:fe:ab:fb:4d:11:7c:76:4c:3d:93:6b:f1:
         e8:7b:12:3f:9a:ab:e6:21:dd:af:39:ac:d0:60:b5:7a:0d:12:
         92:67:9f:5d:38:8b:cd:31:d2:6c:df:52:cb:99:40:04:3a:1f:
         9f:6e:7d:5e:13:55:da:06:b8:df:c6:98:e3:66:14:dc:d8:e7:
         0c:26:3b:67:fe:0a:d7:07:54:f9:ef:d7:4e:03:54:92:b5:57:
         8a:bb:8b:69:b3:4d:4d:64:86:35:17:c0:2d:9a:13:42:5e:a5:
         93:47:b1:fe:05:2a:55:d8:a7:54:ba:ed:f7:d3:34:9b:42:7e:
         0b:d0:75:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:00 2026 by rpki-client