Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
File:                     064B9E28C1AE598921210EB5E94CAE9E89533533.mft (raw, json)
Hash identifier:          6wgL/k5w7ccGoD1VBhSg/t4LO/zNYflLrlZf+UkU4qo=
Subject key identifier:   D7:F1:1A:C2:15:8B:F3:F9:09:6D:88:CC:33:36:50:DA:83:C1:DF:E7
Authority key identifier: 06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
Certificate issuer:       /CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Certificate serial:       028AEBEFDD6C853512BA6F5386F846A46C035F25
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
Manifest number:          6C
Signing time:             Mon 20 Jul 2026 17:02:33 +0000
Manifest this update:     Mon 20 Jul 2026 16:57:33 +0000
Manifest next update:     Tue 21 Jul 2026 20:29:33 +0000
Files and hashes:         1: 064B9E28C1AE598921210EB5E94CAE9E89533533.crl (hash: NM40NvHZ01EcVAK2s4LSYLMsAg0THWisXOsIFd/FCwA=)
                          2: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: rh0sBxj81btPPODPu5P0eEgRgLm8ewf9kn1GsH7FYgE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
                          rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 20:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8a:eb:ef:dd:6c:85:35:12:ba:6f:53:86:f8:46:a4:6c:03:5f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064B9E28C1AE598921210EB5E94CAE9E89533533
        Validity
            Not Before: Jul 20 16:57:33 2026 GMT
            Not After : Jul 21 20:29:33 2026 GMT
        Subject: CN=D7F11AC2158BF3F9096D88CC333650DA83C1DFE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:37:f4:db:cc:3f:10:5d:bd:9f:1c:6e:1c:
                    2f:ad:45:8f:3e:68:f2:58:60:e6:c0:0e:60:5a:f1:
                    65:00:a1:c7:0b:b8:0d:f6:6b:64:df:9f:ee:ef:55:
                    37:f7:0f:43:57:fa:c0:d6:7c:b3:6c:14:ab:30:3d:
                    3a:1c:80:4a:be:45:ee:3e:78:08:d3:b3:6a:38:1c:
                    56:93:3c:ac:23:ff:52:bb:f6:27:d2:5e:13:25:bf:
                    cd:67:75:3e:9d:aa:39:4f:02:b3:d9:4d:bc:86:7c:
                    36:65:19:3b:b3:cb:96:fa:00:00:05:a1:4e:ba:75:
                    6f:96:b7:1a:21:41:14:cb:b7:d0:00:e4:09:2c:7b:
                    43:07:f9:a9:d5:b5:b9:9e:52:92:2d:e6:2a:89:da:
                    72:6f:bd:ad:76:2f:09:b5:99:3c:5d:13:03:fe:f0:
                    42:54:b6:5a:18:ea:11:b5:ae:61:d4:64:8d:96:1e:
                    60:3e:8f:49:90:4f:8d:e4:90:23:fb:20:9f:82:9f:
                    15:ba:d4:81:e7:ee:c3:0d:dc:3d:0a:d2:5b:92:f2:
                    a0:6b:fc:32:fd:b2:dc:47:96:29:13:ca:fa:5a:f4:
                    37:0c:51:46:fe:b4:13:3d:5c:09:90:d1:62:74:eb:
                    78:2c:01:07:16:fb:fa:e7:46:9c:58:b6:e1:70:3f:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F1:1A:C2:15:8B:F3:F9:09:6D:88:CC:33:36:50:DA:83:C1:DF:E7
            X509v3 Authority Key Identifier:
                keyid:06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:56:09:85:5c:da:06:67:0c:00:93:b5:fe:d1:35:bf:d1:
         eb:b0:c9:dc:05:68:df:8d:c3:f7:9d:85:db:3d:8c:41:b1:a4:
         f8:b8:f6:e6:0f:7f:6b:77:19:70:bd:66:95:5d:f5:be:d5:d8:
         f5:30:1f:f1:39:e6:74:fc:7f:77:d3:d3:ab:a2:aa:dd:ed:3d:
         ce:78:48:40:30:fe:64:3a:07:a5:2a:02:a0:6f:03:34:7e:81:
         af:73:f5:9a:9f:13:4f:4f:8c:bc:fe:dd:44:e9:b6:0f:d6:12:
         8a:af:96:d9:07:a6:2e:f1:f3:10:7b:18:2c:fd:55:1c:f1:12:
         7e:28:d3:53:09:da:2f:c0:9e:59:2e:f7:1b:a4:0e:f4:63:da:
         9b:a6:69:1b:e8:49:3a:fc:b7:5d:8b:73:fd:a2:bf:f4:32:4e:
         d3:d9:2c:05:96:19:9c:a2:e8:15:6f:a5:20:59:60:60:15:61:
         db:f3:cb:06:0b:5f:42:6e:bd:de:5f:f6:8a:e3:40:78:a7:6d:
         ee:38:e0:9f:ca:25:68:19:d9:6d:90:01:80:b1:0a:08:43:f3:
         89:81:9c:d3:52:75:87:01:52:84:5d:2e:4f:68:89:35:55:10:
         a8:0c:3a:f6:22:84:ce:21:3d:2a:f6:86:81:c1:a2:b3:c6:9f:
         cf:1d:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:27:18 2026 by rpki-client