Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
File:                     AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json)
Hash identifier:          iJluc81wGLnvRFlmTpWyZRKrdPI4eE695p/VlJaejxA=
Subject key identifier:   C8:D8:F8:93:EB:5D:BA:F2:2F:6E:7E:71:EE:C3:EE:F9:14:E5:2C:FC
Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76
Certificate issuer:       /CN=AF0C42FF385AC16D8868625322DDC9687E064976
Certificate serial:       33D9D4593149ACBE3C7C936BC98184E26401D364
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 17:46:53 +0000
Manifest this update:     Thu 23 Jul 2026 17:41:53 +0000
Manifest next update:     Fri 24 Jul 2026 18:23:53 +0000
Files and hashes:         1: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: /eJ9kbV5g8RTMU/OdVZVvJe9Sqpolf7m5LL5Pk4Qcns=)
                          2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl
                          rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d9:d4:59:31:49:ac:be:3c:7c:93:6b:c9:81:84:e2:64:01:d3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976
        Validity
            Not Before: Jul 23 17:41:53 2026 GMT
            Not After : Jul 24 18:23:53 2026 GMT
        Subject: CN=C8D8F893EB5DBAF22F6E7E71EEC3EEF914E52CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:83:21:7c:94:84:3f:04:f9:21:cb:58:98:
                    63:a1:59:c7:a1:e2:90:2c:cc:97:5c:0d:02:82:5a:
                    d4:03:93:67:3f:01:31:64:48:80:78:53:8d:b2:a2:
                    75:b3:15:3f:74:55:20:e5:01:40:0b:c3:b2:1a:cd:
                    4e:e7:c5:33:65:6e:44:21:ee:89:11:5d:ba:07:e4:
                    64:6b:9f:4d:c4:b4:53:3f:6e:51:b5:4e:fc:68:ba:
                    54:0e:ac:ea:6a:2a:e3:27:6e:71:03:a1:4a:35:82:
                    bf:20:3b:21:3b:76:59:1a:b5:90:43:46:92:31:04:
                    31:bf:59:52:44:66:c5:64:fd:a2:78:05:df:ec:01:
                    ab:c5:c8:50:ba:30:a6:32:f3:76:cf:69:fe:d8:c0:
                    7a:df:67:48:dc:3b:67:8a:6f:37:ec:26:fc:95:8e:
                    5f:39:f1:57:01:0e:85:ff:b0:ea:1d:2e:74:dc:e3:
                    01:f8:5e:aa:65:e4:ab:e9:d6:3f:1b:51:fc:95:1a:
                    32:8c:bf:31:be:7d:79:22:5f:97:63:04:93:67:a5:
                    f9:68:73:be:35:66:b8:cf:11:91:b3:f6:ae:9e:91:
                    14:41:32:06:e6:a3:86:33:de:d9:83:11:7f:c7:44:
                    4b:c1:29:ff:cb:b2:f6:1c:86:d7:2f:af:4b:25:85:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D8:F8:93:EB:5D:BA:F2:2F:6E:7E:71:EE:C3:EE:F9:14:E5:2C:FC
            X509v3 Authority Key Identifier:
                keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:91:8f:8e:fe:d6:27:66:98:ca:22:4e:12:2c:40:57:4b:33:
         70:94:05:b7:7b:93:8a:57:fd:64:cf:59:73:2c:08:7c:5e:99:
         58:a8:71:a3:33:bb:4e:ae:86:2c:c1:ca:b9:c0:32:6a:6d:bd:
         2d:04:ed:ef:43:32:07:25:0f:61:b9:58:a6:b4:98:ff:56:04:
         33:b0:80:ee:c7:25:3a:48:c5:21:90:98:e8:3f:91:46:0e:b4:
         46:a4:6a:b2:38:f5:3c:b1:79:e9:43:b3:45:a9:29:22:50:9a:
         46:e5:5c:32:ae:c3:33:45:dc:6e:19:a5:de:45:55:54:5d:80:
         fa:c3:35:a3:ef:16:35:db:47:57:1c:52:08:d7:14:0f:df:0a:
         40:c1:96:66:e2:9c:1d:d6:85:9f:a0:12:4e:72:82:96:04:8d:
         ff:11:34:9d:7b:45:35:82:de:50:99:38:8c:76:c2:c3:c5:4e:
         f6:1a:f4:b4:40:8f:90:21:55:f5:ee:a0:08:c9:c8:c4:ac:fd:
         48:3a:56:0e:02:e1:9f:13:af:9b:66:3b:c1:93:65:7f:84:fe:
         be:a7:49:63:2a:74:94:4f:d9:39:3c:bb:f4:2f:f5:eb:13:f3:
         24:ea:5b:6f:44:a9:df:2d:fa:b2:5b:a3:cc:b7:0b:39:e9:0a:
         c0:d9:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:16 2026 by rpki-client