Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
File:                     7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json)
Hash identifier:          nsksp0IDFeADMFHfdQ6Lha4Ju+a0MRmzTW/+Mtl6C4s=
Subject key identifier:   5A:44:0A:F9:FE:03:C0:AD:C9:30:EB:66:A3:C6:F1:DC:B3:AA:DB:9E
Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
Certificate issuer:       /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Certificate serial:       53772815ABE01F47C96D218083F3B69668B479B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 16:19:49 +0000
Manifest this update:     Thu 23 Jul 2026 16:14:49 +0000
Manifest next update:     Fri 24 Jul 2026 20:12:49 +0000
Files and hashes:         1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=)
                          2: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: hIa8CrS0q70z1t3J4aaDNUr0gi7TAQi/ecpshCZxKAk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
                          rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:77:28:15:ab:e0:1f:47:c9:6d:21:80:83:f3:b6:96:68:b4:79:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
        Validity
            Not Before: Jul 23 16:14:49 2026 GMT
            Not After : Jul 24 20:12:49 2026 GMT
        Subject: CN=5A440AF9FE03C0ADC930EB66A3C6F1DCB3AADB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:56:4a:be:b2:12:ee:ac:b2:37:9d:f6:49:
                    7e:9c:02:95:a0:7f:3d:24:c8:8b:8b:cd:05:53:fd:
                    d1:d5:e2:15:09:3c:c1:1d:2f:14:a1:03:db:c2:af:
                    6b:de:ad:23:3b:d2:b0:0a:c4:4e:78:c2:e5:aa:0e:
                    8f:e3:a7:2f:34:b5:06:aa:1f:51:d3:14:a4:d3:d9:
                    79:c9:b7:62:08:23:69:26:2f:5b:87:c7:42:a7:85:
                    60:6e:a5:18:25:10:b8:1a:a6:ce:f1:bc:25:04:04:
                    73:d8:7f:ea:a4:f1:b2:10:57:8e:31:12:e0:72:79:
                    b1:60:6e:49:5b:32:e9:d1:86:3c:64:a4:a3:0a:ca:
                    1b:13:a4:01:2f:92:66:e3:cc:3b:fd:07:8a:39:a4:
                    13:9f:84:66:ed:91:bb:82:a7:7f:da:e9:8a:4e:73:
                    91:8e:53:20:90:66:e0:59:ac:fa:a2:cd:f8:8e:e8:
                    51:02:64:e0:57:e8:70:af:e6:31:9d:35:95:4e:ae:
                    44:0f:e8:ee:16:18:8e:ec:06:e5:65:19:2e:1d:5b:
                    9e:4e:67:2a:b6:09:f0:05:34:43:d1:dd:c2:d6:42:
                    e7:6e:c4:31:49:2e:03:1f:99:5b:e4:f8:c2:a3:01:
                    6c:72:4e:25:bc:9a:48:34:d1:d7:c5:b6:c0:98:dc:
                    66:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:44:0A:F9:FE:03:C0:AD:C9:30:EB:66:A3:C6:F1:DC:B3:AA:DB:9E
            X509v3 Authority Key Identifier:
                keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ce:ba:3f:c0:d5:de:e6:46:00:23:55:51:38:27:c3:b7:b3:
         ea:3e:81:7e:e8:7b:5b:63:0c:d2:64:d8:5d:8f:50:21:fc:ac:
         45:94:da:2e:31:99:85:bd:66:7b:75:54:8c:ea:aa:e8:bc:d3:
         b9:41:56:64:ef:49:81:ad:ad:56:65:c9:de:70:79:07:82:97:
         de:14:98:19:57:5a:f2:ef:2c:12:07:d1:ce:ae:b0:8b:78:19:
         99:84:c6:18:3c:fe:dc:30:30:6e:db:51:14:ce:d4:bb:83:02:
         b5:d0:8c:ca:d1:ff:c0:75:85:cc:ff:08:d3:af:07:9e:50:09:
         e5:c1:80:02:ee:0f:a5:24:d0:a7:b0:9b:89:3b:dd:b9:f3:de:
         e1:e3:27:98:41:02:03:c4:a9:7f:14:55:cf:fd:fe:2c:e2:7c:
         b2:f5:68:41:ea:08:6d:43:be:76:9d:02:18:b0:a7:c0:20:a2:
         64:35:92:b7:7e:06:5a:01:74:fd:67:78:4f:df:ab:8d:5a:ca:
         c8:42:d7:b0:5e:1e:7b:ab:c2:9c:27:b0:91:77:b9:a5:31:df:
         3c:d3:fd:ad:34:0a:cb:5a:31:a3:da:d7:db:a4:cb:6d:b7:19:
         7a:d2:8b:54:84:0b:10:6b:59:2c:49:e5:08:30:d7:56:9d:f8:
         8c:e6:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:32:05 2026 by rpki-client