Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
File:                     4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json)
Hash identifier:          sKQP1t9Jw5Jt3Q54w6eNLj6c73tcdEGoX/hvWsvwedk=
Subject key identifier:   D0:3A:7A:68:CA:7D:D1:E6:60:A0:57:C9:90:7F:D6:E0:F4:B3:87:AD
Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
Certificate issuer:       /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Certificate serial:       53CDA732549A458C590A2EA623E92EE21428399B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 15:00:07 +0000
Manifest this update:     Mon 20 Jul 2026 14:55:07 +0000
Manifest next update:     Tue 21 Jul 2026 17:20:07 +0000
Files and hashes:         1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=)
                          2: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: Ayu7aYBKDdeyprSVRqjQF7yU4efa40nbp3Acci3zv1s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
                          rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 17:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cd:a7:32:54:9a:45:8c:59:0a:2e:a6:23:e9:2e:e2:14:28:39:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
        Validity
            Not Before: Jul 20 14:55:07 2026 GMT
            Not After : Jul 21 17:20:07 2026 GMT
        Subject: CN=D03A7A68CA7DD1E660A057C9907FD6E0F4B387AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:08:ff:06:5c:2b:55:85:d1:63:53:10:eb:
                    0d:9f:4b:a0:e9:90:55:0d:ea:d8:72:65:ce:35:24:
                    90:73:bb:36:af:c2:4f:73:81:4f:f9:7b:66:27:2e:
                    46:fa:24:5e:b0:0b:ee:f2:f1:82:3c:db:a2:9d:2f:
                    85:e3:b5:48:c9:9a:54:07:03:92:16:ff:56:95:e9:
                    9d:0f:05:c1:8c:8b:48:b8:0a:f6:62:d6:42:94:62:
                    5c:e5:82:85:a8:9d:11:5c:ea:36:d9:00:20:be:98:
                    df:91:75:d6:fe:19:ea:bb:a6:9a:5f:b2:14:50:e3:
                    e2:1d:10:d2:dc:c0:91:eb:ce:74:df:96:66:1f:8c:
                    cc:2a:f2:26:bd:ac:39:8f:e5:d9:e3:5d:af:20:a9:
                    3e:6c:78:0e:c7:52:ad:63:e6:23:68:ab:21:8e:9f:
                    ba:a8:37:9a:7f:d4:5a:1f:60:24:bb:8d:c5:ee:b7:
                    8e:d7:e3:29:ab:bc:d6:ff:7e:37:65:4b:4b:d3:3a:
                    6f:b9:ea:af:46:80:9e:f8:89:7e:b4:b3:11:4f:ce:
                    09:1b:ce:a6:e8:da:f8:c4:88:0e:31:e6:f4:04:ac:
                    44:bf:df:9c:cd:7e:6b:82:65:79:b8:4c:39:3b:38:
                    68:b8:d0:c8:71:e3:1d:2f:66:55:e5:22:da:48:9a:
                    f1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3A:7A:68:CA:7D:D1:E6:60:A0:57:C9:90:7F:D6:E0:F4:B3:87:AD
            X509v3 Authority Key Identifier:
                keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:d1:19:61:6a:e2:af:39:52:1c:b3:c6:f6:00:e7:4a:23:
         16:54:8e:4d:4a:32:2e:fc:23:c1:3f:00:86:1d:bf:15:9a:00:
         20:55:c1:90:f4:b9:e4:06:f8:4c:b7:a3:46:61:0c:f9:6d:18:
         b6:40:96:7f:34:fe:5d:80:e9:2b:58:54:b6:c2:3e:ec:c2:b3:
         ff:d2:ef:2e:da:65:00:34:80:f2:42:2f:58:b1:3d:69:0e:ff:
         11:5a:78:68:94:8a:64:2a:64:a8:7a:b5:6f:15:5b:5c:80:9b:
         91:54:af:41:00:c3:16:ac:e2:62:f6:b5:4a:84:74:ef:3e:62:
         3f:ba:1d:c6:c6:13:bf:97:76:31:5d:3c:12:98:f1:03:4a:64:
         10:18:06:75:e3:27:be:65:22:91:89:a0:82:cc:5f:05:f8:8e:
         07:55:6a:d9:5d:25:4d:71:ee:c6:e2:1a:b9:8a:94:f4:9d:dd:
         ac:4b:c1:11:06:59:0d:2a:33:44:97:c5:56:33:63:e8:f3:31:
         ff:3d:9d:e7:ba:87:ab:79:d3:89:a3:95:2f:67:9c:38:ce:96:
         ab:a5:a6:f7:fd:14:9b:0e:d9:e8:9c:4e:45:dc:65:a7:08:40:
         27:45:8b:bf:d2:ef:ba:7f:70:95:bf:b6:16:77:cc:86:83:7a:
         a7:d1:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:38:41 2026 by rpki-client