Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
File:                     D626CC25972BF9948C6B3BDE4E354C71F2570880.mft (raw, json)
Hash identifier:          jyv/0qDl6vQbrUZcApW2JiYfEpZTwEywmXhYwuXpHS0=
Subject key identifier:   51:AE:B1:25:4D:02:D7:24:8B:0E:82:F4:37:4E:98:4D:9C:BB:DB:FB
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Certificate issuer:       /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial:       15C9F8FC949A16E061BF8BFED274AF7DB685D90A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 12:31:52 +0000
Manifest this update:     Mon 20 Jul 2026 12:26:52 +0000
Manifest next update:     Tue 21 Jul 2026 15:35:52 +0000
Files and hashes:         1: D626CC25972BF9948C6B3BDE4E354C71F2570880.crl (hash: FHADM9y4bxfbAVxU0vBAWB95AGfhl0iS7/BABfaDZHY=)
                          2: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: nb8z2N9rnH96t5B0H624NhPlR7I0KYPMhvCR0O/fhs4=)
                          3: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: yo9Rg0RIu4bi5AvFSf1HgeoEO2ptRcGKCjbNNgnoU1A=)
                          4: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: 0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=)
                          5: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=)
                          6: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: jRI7u+pgcEtmrDDRmjulrcR4SRRZM/aGtsQfGUXuJ24=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
                          rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 15:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c9:f8:fc:94:9a:16:e0:61:bf:8b:fe:d2:74:af:7d:b6:85:d9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
        Validity
            Not Before: Jul 20 12:26:52 2026 GMT
            Not After : Jul 21 15:35:52 2026 GMT
        Subject: CN=51AEB1254D02D7248B0E82F4374E984D9CBBDBFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:dc:c2:69:ca:38:88:88:96:28:b7:ed:14:
                    df:da:63:9a:c9:41:a3:da:05:b0:0e:6d:55:40:3a:
                    40:fb:10:46:e5:88:b4:5e:e9:12:39:75:60:63:db:
                    d2:09:86:7a:56:02:06:ed:05:3f:f2:71:c6:e1:4a:
                    05:02:03:76:14:76:c1:d2:fa:51:cf:3a:ad:43:74:
                    e4:ba:d9:3c:ea:8b:11:3c:f2:1f:64:fe:a8:33:7c:
                    ec:5a:64:c4:d5:98:98:b5:65:3e:b9:10:bd:1f:56:
                    0a:ba:db:a8:ce:d6:32:c4:ef:25:ba:10:80:f3:a2:
                    51:64:54:0d:e8:21:1e:1b:45:34:14:10:59:a6:a1:
                    9f:ce:74:a7:00:c3:29:88:8d:e4:e5:13:dd:33:18:
                    74:53:9d:2c:a9:7a:e0:71:3f:3d:7e:ac:0d:df:e6:
                    3a:fe:7e:a5:85:c1:b5:1f:46:a1:c4:ce:6c:a1:e0:
                    3a:7c:f8:63:64:c6:5d:bd:f3:2d:a8:77:6f:c7:f1:
                    8a:f4:2b:97:cf:66:a2:05:9e:97:20:76:f6:c5:8e:
                    ed:63:ea:ca:b7:ea:0a:74:44:08:f7:77:f9:68:e9:
                    11:da:c5:b5:aa:8f:14:e2:30:89:42:ac:ba:8b:87:
                    fe:1e:fe:9c:6a:9e:ce:91:34:cc:f3:90:65:5d:35:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:B1:25:4D:02:D7:24:8B:0E:82:F4:37:4E:98:4D:9C:BB:DB:FB
            X509v3 Authority Key Identifier:
                keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9a:19:aa:d3:5b:5b:42:88:2e:f0:a1:70:4f:2b:01:e9:08:
         d7:d7:81:02:d0:ff:02:28:f2:69:4f:2f:9c:e1:fb:01:51:76:
         4e:92:44:9e:30:b2:70:34:03:a1:ab:a7:94:45:6c:d7:2d:06:
         7b:1b:69:f4:42:11:88:ed:6a:a9:e5:ef:53:76:81:02:2a:c8:
         1f:5b:eb:49:e3:ba:13:59:71:30:a7:bb:08:c1:0d:7b:93:a4:
         15:f1:22:18:53:11:42:24:e2:62:a1:0a:72:27:45:c9:80:d4:
         da:56:e6:8f:8d:77:73:47:20:8d:2c:32:75:19:6e:60:b0:c1:
         68:8e:e9:77:75:46:1c:c1:2c:86:11:e4:42:f6:9b:ee:15:7d:
         1e:ed:72:de:f1:57:9e:22:ab:5d:85:20:dd:17:20:c4:70:8d:
         6a:a9:e1:bf:97:65:5f:72:54:dd:d0:d9:04:4f:8f:db:d0:53:
         30:03:24:84:00:8c:1e:95:5f:de:ac:d9:c1:7f:d1:56:cf:db:
         7d:48:0c:e0:d9:52:f3:20:33:ba:ee:30:e9:93:7f:c9:1b:4f:
         44:ab:5a:31:ac:9f:da:ae:8e:aa:00:2e:27:64:df:d1:51:39:
         ba:69:00:f5:dc:4b:d6:16:28:88:9d:dd:15:50:f8:0f:94:48:
         65:ee:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:43:34 2026 by rpki-client