Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
File:                     33280920734014336A0249C909A38E7BC1B49F29.mft (raw, json)
Hash identifier:          pctPp6qHiVujxPkUsgyP52ugud/sfyZR7AHvnO0DqCM=
Subject key identifier:   7F:21:B3:0D:44:A1:39:A3:52:EB:4F:F4:A7:BA:59:58:0E:36:19:77
Authority key identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29
Certificate issuer:       /CN=33280920734014336A0249C909A38E7BC1B49F29
Certificate serial:       66664CA5F4EA565D3106A11B3E32F569E9BF9157
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
Manifest number:          6A
Signing time:             Tue 21 Jul 2026 01:27:35 +0000
Manifest this update:     Tue 21 Jul 2026 01:22:35 +0000
Manifest next update:     Wed 22 Jul 2026 02:03:35 +0000
Files and hashes:         1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: xR2Y5HZPSCwBzoLVtmjeFWlOGn7Q6tcdXN9P57xpYxw=)
                          2: 33280920734014336A0249C909A38E7BC1B49F29.crl (hash: MdwUwrzn1Mo1PX91UyZYqdApu1yuA18tRqqqKVzvXag=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl
                          rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:66:4c:a5:f4:ea:56:5d:31:06:a1:1b:3e:32:f5:69:e9:bf:91:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33280920734014336A0249C909A38E7BC1B49F29
        Validity
            Not Before: Jul 21 01:22:35 2026 GMT
            Not After : Jul 22 02:03:35 2026 GMT
        Subject: CN=7F21B30D44A139A352EB4FF4A7BA59580E361977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:06:5e:4e:05:96:87:e4:31:e2:45:12:84:
                    9b:5d:bc:60:18:b2:34:0a:d9:bd:9d:25:ec:4f:b6:
                    d9:79:1e:5f:ec:ec:76:78:1b:67:39:20:fe:a7:6b:
                    3c:9e:cc:bd:46:20:05:a6:e2:45:02:ba:eb:f4:1a:
                    d1:75:9f:69:27:21:83:54:42:dd:86:e5:e7:4c:64:
                    f1:de:72:68:34:0b:41:88:19:3a:85:17:45:09:42:
                    1a:99:12:35:1e:bc:e9:39:22:2c:a9:5a:03:a9:53:
                    73:18:ed:d5:d2:10:4e:fa:c9:b3:ca:6b:34:84:27:
                    e3:d3:89:b7:c0:6b:5d:af:92:9e:a6:d0:0c:1c:0b:
                    44:72:67:ee:d5:30:25:ea:8d:c2:d4:45:73:04:83:
                    65:04:c5:52:1c:01:22:36:63:1f:d0:38:c5:07:f5:
                    7b:f2:53:cd:29:a1:84:c8:b4:1c:ca:e0:d9:09:92:
                    f2:75:3e:82:ab:dd:2b:07:1f:89:e1:55:bf:c2:4d:
                    5f:7f:25:4c:5c:9c:52:73:22:76:a2:af:98:2a:cf:
                    fd:eb:1a:40:2a:c5:48:ae:10:6d:e6:ce:82:33:6c:
                    e4:66:80:29:8d:a1:b8:c0:a7:37:f0:21:9d:56:01:
                    22:ae:f1:24:59:b7:7d:67:1a:25:69:11:8f:ae:e2:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:21:B3:0D:44:A1:39:A3:52:EB:4F:F4:A7:BA:59:58:0E:36:19:77
            X509v3 Authority Key Identifier:
                keyid:33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:2d:ce:86:23:89:9b:ec:3e:75:34:73:c9:af:b3:08:3d:
         d7:d7:c0:5a:00:78:25:a3:9b:8e:16:e2:a1:e6:69:a0:a4:8d:
         66:7a:83:d9:96:39:51:db:4d:b3:04:23:33:22:58:ba:ec:11:
         73:b7:d1:f2:0a:2d:21:15:3a:c7:c2:f2:f3:8e:c8:35:34:70:
         66:53:9e:71:5e:5a:db:5e:91:1e:54:57:1c:1e:c7:6b:49:38:
         f6:98:3f:ca:03:70:c2:2d:b1:34:5c:72:8d:7f:d0:cb:ee:4e:
         67:a1:c4:89:cc:ad:46:62:e6:41:ec:bb:74:66:08:1f:8b:03:
         e3:66:ec:9a:5a:af:e2:f7:4a:6e:26:3e:f0:40:95:5e:8b:75:
         51:64:49:85:c6:41:93:2d:ba:56:bd:2a:c7:84:4a:ec:0d:96:
         02:63:a8:ce:14:48:a0:62:db:ba:31:f3:db:36:49:3c:51:1e:
         09:79:07:c0:15:eb:35:21:8b:67:0c:df:a3:bf:d2:b8:e6:4b:
         4c:02:d1:2e:9e:92:74:8f:67:57:b6:ce:1d:e2:88:a2:d8:48:
         1c:c0:54:9a:43:d6:48:06:0e:8c:35:39:83:4a:97:81:fe:3e:
         58:46:2b:6c:15:85:df:16:a1:aa:e5:00:42:0c:d2:05:eb:d0:
         c4:1c:7d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:21:41 2026 by rpki-client