Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
File:                     C797413CFB24F6454A9F7473DF020BB107134EE7.mft (raw, json)
Hash identifier:          bc0GHgljhpEGm+j9ZvEA4JfTjbkV611lKhobuS4SuL8=
Subject key identifier:   A3:C0:2E:43:EF:E8:AA:E6:58:B3:2E:20:E5:12:90:CB:73:08:5B:B0
Authority key identifier: C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7
Certificate issuer:       /CN=C797413CFB24F6454A9F7473DF020BB107134EE7
Certificate serial:       1BAC7903A8B4B347357CF3C9CFEAD3BF639E08C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 15:15:25 +0000
Manifest this update:     Mon 20 Jul 2026 15:10:25 +0000
Manifest next update:     Tue 21 Jul 2026 15:28:25 +0000
Files and hashes:         1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: chSnFe2TA+OmeDv7yM6MlQKXcupUNd+M99kXzF+BQEw=)
                          2: C797413CFB24F6454A9F7473DF020BB107134EE7.crl (hash: HXApTgXja6gPvWxuavFL2ZEUDLdScT52Jos+GOyBoUw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl
                          rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 15:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ac:79:03:a8:b4:b3:47:35:7c:f3:c9:cf:ea:d3:bf:63:9e:08:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C797413CFB24F6454A9F7473DF020BB107134EE7
        Validity
            Not Before: Jul 20 15:10:25 2026 GMT
            Not After : Jul 21 15:28:25 2026 GMT
        Subject: CN=A3C02E43EFE8AAE658B32E20E51290CB73085BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:f4:ba:3d:1d:b6:d3:b6:11:74:cf:be:ca:
                    61:f5:dd:9c:48:4c:c0:da:be:3b:fb:06:c0:92:30:
                    f8:a0:4c:bc:4b:7f:93:65:bb:0e:47:ac:d8:15:78:
                    bf:81:e1:7d:9e:7f:ad:15:46:26:c3:79:17:45:66:
                    5f:ab:20:00:f2:f3:51:52:bd:ea:e1:5e:03:8b:8d:
                    3a:3e:54:e5:4d:e6:7c:bb:76:c6:65:26:71:c2:57:
                    c9:28:03:0e:59:4f:6b:8c:fc:33:16:31:70:4a:23:
                    1d:12:30:a8:b8:f7:e4:62:62:de:b6:1c:ff:48:c8:
                    e3:0d:77:25:c7:79:d8:c5:a8:81:e7:c2:d8:22:b9:
                    37:46:27:10:fa:77:f6:4e:f2:69:c3:0a:e0:ea:87:
                    84:73:e0:d4:74:5a:fa:e2:4d:bb:64:0c:41:d0:63:
                    b8:35:f8:32:0d:74:f4:51:7e:8f:e8:3c:b1:b3:7f:
                    3f:f2:bf:58:dc:33:b7:f6:a2:67:95:be:8d:e7:72:
                    1c:c9:33:a9:7c:0b:ef:7a:a9:22:30:0b:27:32:7b:
                    49:91:96:61:b1:f8:f9:78:ef:a3:42:74:2f:a8:77:
                    b6:fa:b6:e4:d3:72:d7:f2:67:0e:c8:1b:ce:57:0a:
                    d6:85:4f:55:52:22:ff:c5:5e:a9:e9:f0:14:84:30:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C0:2E:43:EF:E8:AA:E6:58:B3:2E:20:E5:12:90:CB:73:08:5B:B0
            X509v3 Authority Key Identifier:
                keyid:C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8d:74:9e:23:7b:c2:35:2b:5c:bb:6a:de:0f:79:56:26:71:
         04:68:21:43:d8:69:fd:37:9a:41:9c:a4:52:9c:23:93:89:04:
         d6:87:f0:6b:50:35:af:f5:31:4b:9a:f8:08:11:b7:a7:4e:76:
         95:37:6d:13:ca:7e:8a:7a:06:8a:77:ef:7f:ac:96:61:0e:8a:
         a6:75:3a:8e:d0:59:79:e2:86:78:dc:d6:6c:ca:db:63:2c:ab:
         41:c6:c9:73:54:8d:ad:70:68:36:d5:64:89:5b:24:22:db:1a:
         b9:b6:5e:17:9a:d2:1a:89:a0:83:14:c2:95:59:1e:33:0b:e1:
         4a:fd:aa:c2:d7:b1:94:2f:09:d1:9c:26:4e:ec:70:9f:92:f5:
         21:bc:0a:b8:10:17:52:6d:32:28:0b:43:b9:90:b9:cb:cd:e2:
         21:fb:1a:e4:df:58:2c:fb:90:79:fa:27:2a:a5:6f:51:26:a3:
         50:d5:d9:8c:e5:34:ad:4f:01:d5:67:21:51:bb:63:24:dd:cf:
         01:fe:89:4b:25:d7:78:22:89:88:91:23:35:53:f9:98:a7:e4:
         90:64:b6:43:59:0c:c4:95:67:52:6b:5f:bf:09:b2:7b:43:23:
         65:6b:ca:16:bb:f3:2e:13:eb:16:3d:e9:3d:45:8e:c4:da:0c:
         cb:86:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:33:06 2026 by rpki-client