Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft
File:                     E23AA0021573342645A2DFB669071A3FC460F128.mft (raw, json)
Hash identifier:          zLWWblb1kS/RhD4aAkZbIgCs2lLVPworXxDVsQGwXwU=
Subject key identifier:   A7:03:E1:4C:46:40:73:BF:E5:6B:D9:D1:3B:76:5C:92:5E:55:94:1E
Authority key identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28
Certificate issuer:       /CN=E23AA0021573342645A2DFB669071A3FC460F128
Certificate serial:       2D7A101234CEE6CF258F75C99FE2971FA5CD2D79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 16:11:29 +0000
Manifest this update:     Mon 20 Jul 2026 16:06:29 +0000
Manifest next update:     Tue 21 Jul 2026 19:20:29 +0000
Files and hashes:         1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: ehJTG/Z8MCWRpYE7Mv6MPXlKzKRx5WpLNTB9Vc1HLns=)
                          2: E23AA0021573342645A2DFB669071A3FC460F128.crl (hash: 79CCDdbLuRYRfCPHWvpXSiC4dUJ4tv4sBoZ3QQ1CUDg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl
                          rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 19:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7a:10:12:34:ce:e6:cf:25:8f:75:c9:9f:e2:97:1f:a5:cd:2d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23AA0021573342645A2DFB669071A3FC460F128
        Validity
            Not Before: Jul 20 16:06:29 2026 GMT
            Not After : Jul 21 19:20:29 2026 GMT
        Subject: CN=A703E14C464073BFE56BD9D13B765C925E55941E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:e2:5d:f8:bf:6e:d7:02:8f:4f:5b:38:91:
                    ef:89:69:8b:93:2c:f8:b7:3e:13:53:52:07:28:19:
                    04:4b:00:64:9d:1d:43:f0:c1:2f:82:18:26:e4:6e:
                    4c:67:72:a9:15:c8:d9:63:47:17:64:f2:29:20:91:
                    f2:a8:ea:a3:c5:a0:28:56:55:73:5f:c6:c2:d1:d5:
                    fd:f3:ff:d6:99:18:de:0b:be:9c:87:f5:bd:d2:41:
                    22:3b:68:9a:f4:fd:00:5f:e6:bc:6d:7b:cb:1a:8e:
                    90:41:ca:9f:a8:04:cf:38:38:bf:1a:b2:0f:25:68:
                    4f:0d:8e:01:0f:13:97:9f:0b:19:0e:49:14:93:d7:
                    b4:89:62:28:46:ce:7e:3a:c7:fb:39:cf:11:08:d3:
                    57:58:c3:b5:22:65:c0:3c:2c:66:d1:73:40:08:45:
                    3f:cd:c4:f4:43:15:df:c5:a1:c4:76:b7:af:3d:ad:
                    1a:f9:82:ac:57:5e:ec:47:72:88:86:41:01:ca:9d:
                    f8:b5:ce:9f:f8:47:85:fd:e8:19:c2:a4:ac:a3:d3:
                    c0:53:70:36:03:f8:7d:f6:53:57:04:fc:d2:1e:e4:
                    33:9f:70:41:9c:51:ce:c9:67:49:b3:88:12:ab:77:
                    ff:13:d6:18:0f:ea:21:b0:56:8c:a6:c7:de:f4:bb:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:03:E1:4C:46:40:73:BF:E5:6B:D9:D1:3B:76:5C:92:5E:55:94:1E
            X509v3 Authority Key Identifier:
                keyid:E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:84:5b:a1:c1:a2:f2:cd:43:39:34:40:63:ea:6c:da:92:fa:
         ba:67:c2:7a:2a:c6:2c:9a:86:a6:34:fa:f5:ff:23:c1:bb:d8:
         99:d4:d1:76:38:aa:6d:3b:db:e3:47:58:ef:be:06:ce:d1:07:
         f6:f1:81:65:04:e3:9f:04:75:5c:ee:98:93:d7:b5:0d:5e:ce:
         f2:b2:03:24:bc:56:04:1f:df:50:76:c6:1b:1e:fb:db:8b:5f:
         cc:e7:7b:dc:5f:71:6e:00:19:89:d7:3e:f3:06:df:c1:ad:48:
         92:d8:49:9d:43:aa:f1:6f:2f:1a:c8:d1:21:4f:2a:5c:48:29:
         24:4a:73:b9:a6:28:12:2c:5a:8b:d4:34:37:68:6f:15:91:a3:
         97:92:43:a5:63:ab:91:ee:d5:96:3f:1a:7f:6c:e5:66:f4:22:
         2f:65:7a:e4:64:cf:ac:6d:41:f0:fe:83:3b:c7:62:44:36:6d:
         2b:2a:d4:58:fe:af:3f:3e:9e:86:d5:bc:cf:00:86:c6:05:16:
         ed:06:08:23:55:4e:77:0c:7a:3d:ca:7d:d6:6f:b1:be:70:9f:
         40:08:bc:31:be:bc:c2:cd:40:fc:87:4f:8e:f8:71:d7:69:26:
         08:59:61:01:2c:c4:75:3b:06:f1:49:86:bb:b2:6a:03:98:38:
         16:d5:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:25:36 2026 by rpki-client