Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
File:                     295E13E5C8926C8780CF0694E90F77298E60C812.mft (raw, json)
Hash identifier:          wpNqOFYUbTZSoxafbXiOe9CMURm2FrqWZsMXag7e4ek=
Subject key identifier:   C4:CD:7E:78:EB:7B:EE:8C:15:21:38:EB:30:E2:91:66:01:40:EF:41
Authority key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12
Certificate issuer:       /CN=295E13E5C8926C8780CF0694E90F77298E60C812
Certificate serial:       0A6B30D809F05D3482189217E683918605D2B2E8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 15:35:46 +0000
Manifest this update:     Mon 20 Jul 2026 15:30:46 +0000
Manifest next update:     Tue 21 Jul 2026 18:07:46 +0000
Files and hashes:         1: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 8uDSee80WU9BwE7TeL4b74xk08iB/J8lbI5bPlFFs2Y=)
                          2: 295E13E5C8926C8780CF0694E90F77298E60C812.crl (hash: glPwTsTL0uabqSrZmscgzamj2fmdbHuVXh6CVqXKQ0s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl
                          rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 18:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6b:30:d8:09:f0:5d:34:82:18:92:17:e6:83:91:86:05:d2:b2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295E13E5C8926C8780CF0694E90F77298E60C812
        Validity
            Not Before: Jul 20 15:30:46 2026 GMT
            Not After : Jul 21 18:07:46 2026 GMT
        Subject: CN=C4CD7E78EB7BEE8C152138EB30E291660140EF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:33:17:33:73:8a:b2:00:bd:5e:dd:58:0f:
                    8a:f3:28:39:2b:70:56:c6:e7:da:f5:03:75:87:b3:
                    07:7b:d1:62:a0:af:7a:4c:1e:e7:da:22:77:77:b1:
                    41:65:82:7b:be:a2:47:1f:dc:38:a0:fa:f0:9d:f4:
                    ad:58:29:ea:b4:ac:bd:7b:f0:3b:8e:dd:80:1b:08:
                    69:2c:93:14:91:1c:95:c5:35:3d:2d:e2:77:d4:0c:
                    63:ad:96:72:75:b3:2a:6e:cb:15:87:8d:d4:11:60:
                    ef:29:af:64:63:89:7f:9a:bf:5f:5b:26:06:67:a0:
                    65:41:7a:63:ce:e7:ca:cb:46:92:10:3c:ed:5b:ba:
                    b1:08:5b:7b:e1:79:54:10:ce:64:83:68:5f:95:3a:
                    c9:89:cb:39:dd:61:fe:55:13:1e:b3:b4:79:2b:71:
                    5c:a6:1f:d2:a9:d9:01:b2:3b:24:53:4a:21:46:c1:
                    de:ad:70:e8:80:c7:08:1a:93:d2:d8:b8:2c:d1:e9:
                    4b:dd:b6:e6:8c:9f:d5:01:6f:af:67:15:52:24:e1:
                    1f:2d:9e:c9:de:3a:de:e8:66:14:b2:32:56:0e:66:
                    6a:60:a9:2f:8b:91:7d:00:e7:8d:f9:a0:d9:76:56:
                    d0:cd:77:a5:d3:d7:f2:85:b9:cd:05:04:e1:75:7e:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CD:7E:78:EB:7B:EE:8C:15:21:38:EB:30:E2:91:66:01:40:EF:41
            X509v3 Authority Key Identifier:
                keyid:29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:14:94:74:86:97:32:de:72:f1:78:6f:d2:91:09:4a:92:53:
         17:e3:ed:4d:24:87:c1:6b:13:34:e4:16:d1:f1:8f:80:d4:ee:
         44:e3:a4:1d:66:10:4e:1f:59:68:f7:1b:26:a8:3a:9e:03:67:
         c3:03:e7:e1:38:97:4c:1b:85:1a:a4:21:aa:1b:3d:82:5e:21:
         da:52:6b:d8:c5:0b:09:a4:21:a6:b5:43:c2:d7:5f:ab:fd:9b:
         15:e6:76:f1:16:f3:a5:a3:90:99:2f:85:fb:f7:e9:56:89:1e:
         90:2b:cc:48:17:dd:75:77:ae:6e:54:1b:21:6d:33:2a:c9:16:
         20:da:4a:56:bd:af:16:bb:14:d4:dd:cf:62:8b:2b:8c:67:1f:
         81:e1:91:f2:58:da:1a:2a:16:49:dc:fc:96:ff:48:ef:90:d8:
         8f:f3:6f:96:07:ea:eb:68:05:de:8a:dd:a3:5b:23:95:5e:8d:
         6d:c0:b4:0a:50:6d:b2:8b:5c:84:04:b4:39:87:2d:b2:1b:f6:
         a9:5b:90:23:34:c6:38:c0:d8:da:a5:55:cb:41:c7:83:63:ae:
         74:65:bd:52:19:a0:5f:6b:c7:00:1f:f2:26:c5:32:1e:11:c0:
         a7:63:1b:4e:d5:78:ca:36:8d:97:f1:28:63:9e:dc:fc:e7:03:
         fc:95:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:53:32 2026 by rpki-client