Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
File:                     FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json)
Hash identifier:          j09+uXYxRGcf6Vg8sgKDg8HIQdIsfZHkMYlkFzctc9o=
Subject key identifier:   75:BC:B3:CD:77:49:BD:26:D1:C9:32:C2:C5:09:AE:7E:77:88:8F:CE
Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB
Certificate issuer:       /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB
Certificate serial:       3BF5C01058D299F302A32595503785CFA2F4DD55
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 11:20:23 +0000
Manifest this update:     Mon 20 Jul 2026 11:15:23 +0000
Manifest next update:     Tue 21 Jul 2026 14:56:23 +0000
Files and hashes:         1: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: UptHsmoqpEyjjGSrJFg1khV1uhKh1oqEG1oYWVzK0ig=)
                          2: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl
                          rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 14:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f5:c0:10:58:d2:99:f3:02:a3:25:95:50:37:85:cf:a2:f4:dd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB
        Validity
            Not Before: Jul 20 11:15:23 2026 GMT
            Not After : Jul 21 14:56:23 2026 GMT
        Subject: CN=75BCB3CD7749BD26D1C932C2C509AE7E77888FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:ab:51:13:59:41:dd:b0:06:ed:03:52:68:
                    b8:4f:83:28:c6:fc:73:2e:6d:2c:28:0f:b3:98:6c:
                    53:3d:37:e3:5f:d6:9f:09:74:72:1c:51:70:e7:76:
                    84:f2:26:69:f4:40:c4:c1:5d:5d:3e:00:bf:77:42:
                    37:21:30:5a:33:2a:70:e0:e8:7d:11:b7:28:82:76:
                    95:34:66:32:44:bb:ec:93:28:95:bc:65:4c:44:f6:
                    61:b2:f9:23:dd:15:04:fa:16:69:3d:44:57:8e:c2:
                    8e:6a:9a:96:c8:d6:49:79:67:8c:49:d5:98:89:74:
                    dd:c2:15:97:bc:97:0d:4a:b4:66:d4:9c:26:ef:c5:
                    32:16:c5:7a:f2:5a:f5:12:a7:5e:38:0c:ec:62:12:
                    c1:c6:7b:1b:b0:1b:c3:07:34:82:15:4e:9a:03:34:
                    ad:56:dd:2a:e0:db:57:0d:fc:6b:2f:6d:33:04:b1:
                    4a:46:51:db:b8:2b:94:91:8c:0e:d1:54:d9:12:5b:
                    6d:82:f9:7a:25:42:67:e6:98:95:60:05:3e:24:97:
                    52:46:26:eb:06:db:9e:c1:17:c6:ce:be:66:c4:ff:
                    72:cd:fb:69:01:8c:c2:63:a1:db:5e:4f:cf:1f:69:
                    d6:71:ff:2c:a5:76:8f:35:12:3e:48:14:5e:93:58:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BC:B3:CD:77:49:BD:26:D1:C9:32:C2:C5:09:AE:7E:77:88:8F:CE
            X509v3 Authority Key Identifier:
                keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:71:7f:e4:e5:02:ac:a0:0e:2c:e8:cd:22:2c:23:59:e8:26:
         06:9b:da:00:e6:e6:6b:6a:21:d2:a0:c2:b7:2d:77:c1:95:8f:
         35:19:14:57:57:3d:12:85:62:23:39:e6:2a:79:63:09:fb:e7:
         6f:bf:97:ed:ae:a1:f7:6e:97:51:0f:08:0b:76:47:00:ec:b8:
         23:bd:b2:44:7b:46:e7:82:92:19:6d:ce:b4:dd:fb:a4:d2:c0:
         bc:b4:77:d0:12:c8:77:2f:1a:01:41:0c:66:99:d2:ca:69:42:
         1f:12:4e:28:75:e3:13:c4:91:e9:5f:67:f6:e5:4c:7a:0d:99:
         2a:70:6c:79:9b:85:47:f4:26:8c:f6:e9:17:1a:4b:a3:e2:07:
         62:05:e2:56:b1:a5:45:51:53:06:37:d8:ac:6d:99:4a:30:7e:
         20:31:8e:9a:f3:3b:a6:86:37:cd:d4:33:71:a1:33:d9:9d:06:
         44:1a:fe:58:69:95:be:0e:8e:18:96:cc:34:d3:23:72:88:26:
         d8:ad:1c:e3:ec:20:5e:f5:fd:01:94:fa:12:b1:63:90:50:9b:
         94:50:d4:14:d7:c7:75:20:0a:b8:38:d1:8b:2f:f3:53:aa:85:
         dd:3c:7d:65:1e:88:2d:e0:8a:0d:c8:72:96:9e:db:5c:ad:0f:
         2e:b2:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:46:37 2026 by rpki-client