Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
File:                     B68C761C821AA1629C9F6105D99B85E34433B478.mft (raw, json)
Hash identifier:          4w0ufQcacOFXU05BmJxhEnvgyvVmW8Iko0vz0Elli+s=
Subject key identifier:   74:3D:9E:C0:E0:45:4A:CA:BF:AC:CE:6E:B6:BC:E2:28:F0:6D:8A:F2
Authority key identifier: B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78
Certificate issuer:       /CN=B68C761C821AA1629C9F6105D99B85E34433B478
Certificate serial:       735E683B7D94D1720F38D9B06C8828A3EF68838D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
Manifest number:          6C
Signing time:             Tue 21 Jul 2026 02:44:11 +0000
Manifest this update:     Tue 21 Jul 2026 02:39:11 +0000
Manifest next update:     Wed 22 Jul 2026 05:24:11 +0000
Files and hashes:         1: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: eM4zTeT5x8zRTCedGRk54XligMqqPoDVVW+mAmQIEvQ=)
                          2: B68C761C821AA1629C9F6105D99B85E34433B478.crl (hash: FC7VsaxxSDTNH20marhV1dTo9nDmHRGCEdstuV8PhbU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl
                          rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5e:68:3b:7d:94:d1:72:0f:38:d9:b0:6c:88:28:a3:ef:68:83:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B68C761C821AA1629C9F6105D99B85E34433B478
        Validity
            Not Before: Jul 21 02:39:11 2026 GMT
            Not After : Jul 22 05:24:11 2026 GMT
        Subject: CN=743D9EC0E0454ACABFACCE6EB6BCE228F06D8AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:d7:2f:a5:15:e4:f5:5d:a0:5b:38:c9:2e:
                    fe:43:02:29:39:b7:01:81:3f:05:27:12:95:2b:d5:
                    b5:27:2d:85:c7:32:8a:52:ff:67:16:46:c4:3b:a9:
                    77:6e:89:09:1a:a7:06:87:a5:13:c3:18:79:3c:dd:
                    6a:ee:a3:ea:5d:23:bf:00:2c:8c:eb:64:d1:8b:d5:
                    23:58:23:26:a1:05:a3:c7:7d:ff:28:9c:0b:16:92:
                    87:33:18:e8:36:b1:47:0c:e0:7e:f3:dd:80:65:00:
                    c4:7d:fc:72:6a:74:ec:70:18:9e:84:44:0d:a7:47:
                    04:bb:10:8d:46:67:a1:55:87:b2:fe:02:35:3c:7b:
                    d2:05:f3:51:84:42:1d:72:c8:b8:7e:53:96:69:60:
                    84:a7:96:52:bb:2b:8f:84:d1:ac:17:93:18:71:f5:
                    be:53:36:53:1f:57:31:76:be:5a:58:25:01:23:57:
                    12:67:4e:f4:1f:d8:5f:b8:13:d6:fd:cc:13:cc:c3:
                    ee:b3:de:5f:8e:62:d0:4f:ad:99:e7:e8:ea:cf:5f:
                    19:ff:7b:b0:e9:09:2a:58:0c:a6:a5:10:eb:48:fd:
                    27:dc:0d:3f:73:d4:eb:52:6e:59:70:f3:62:78:e5:
                    1c:10:4c:29:80:67:45:d0:72:13:93:d4:a5:8b:33:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3D:9E:C0:E0:45:4A:CA:BF:AC:CE:6E:B6:BC:E2:28:F0:6D:8A:F2
            X509v3 Authority Key Identifier:
                keyid:B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ec:4d:80:04:55:66:04:39:81:a1:9f:01:d6:9a:a3:3a:ad:
         06:a3:bb:e6:dc:ef:5f:84:2b:fe:a7:b1:91:14:09:90:bd:74:
         f2:7b:93:37:a4:aa:5c:70:1c:63:8d:e8:a0:2a:23:5b:70:89:
         fa:78:8c:a2:f4:b2:9b:fe:48:8a:91:46:bd:76:00:6a:9c:28:
         11:75:f0:ff:ae:ff:65:51:2a:7f:ad:aa:c6:c2:00:47:62:72:
         16:81:f5:09:f6:f6:e0:5c:c7:e3:4f:79:a8:ad:0f:f0:7e:52:
         50:fa:ad:8f:9d:e8:fe:9a:d0:f2:09:3b:02:e7:85:76:9a:fa:
         d6:6e:04:54:0a:09:9e:a5:f0:3f:9a:a8:b7:ae:ae:da:01:35:
         7c:7f:8c:8b:71:0d:1c:3b:b1:98:02:01:70:47:54:13:90:1a:
         9c:dc:38:8e:71:3f:26:6e:28:90:7f:c5:a8:38:57:e6:3f:70:
         71:36:47:0f:ae:04:a8:63:d8:94:94:22:cc:3f:df:a1:5c:85:
         3c:91:86:8f:78:2d:7e:c4:cc:3b:5e:c0:da:c4:59:80:41:5c:
         48:80:65:50:75:28:3d:07:4f:a6:f7:94:1c:4d:0f:8f:dc:cd:
         42:10:ec:55:6f:97:c1:c9:67:f0:15:bb:40:0c:d5:7b:c1:46:
         6f:6b:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:16 2026 by rpki-client