Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
File:                     6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft (raw, json)
Hash identifier:          v9DZ6VWku6+Midu/dWUtHQ9GeFYdPA4LHiLZaWJroFY=
Subject key identifier:   90:95:4B:B8:4C:B6:7A:4B:C9:11:97:77:E7:D5:E9:E2:70:67:41:66
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Certificate issuer:       /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial:       70C80EC49B8BB3A2488A4F2AD6F61C53F215711E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
Manifest number:          F7
Signing time:             Tue 03 Nov 2026 20:07:41 +0000
Manifest this update:     Tue 03 Nov 2026 20:02:41 +0000
Manifest next update:     Wed 04 Nov 2026 21:22:41 +0000
Files and hashes:         1: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os=)
                          2: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=)
                          3: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: S7UAzIZzLebBGoPx8HW74rT6/bn+VmPadNNYeTv3kZU=)
                          4: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=)
                          5: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: pjt/PoMD2rISkjEBbEVdFpq3Lfkti0ImQZr5UDhsxdI=)
                          6: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: 2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=)
                          7: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=)
                          8: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=)
                          9: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl (hash: a1jbfmhgDrY7COammQyMutthYs5s4CSbKjx5UTg5sh8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 10:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c8:0e:c4:9b:8b:b3:a2:48:8a:4f:2a:d6:f6:1c:53:f2:15:71:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
        Validity
            Not Before: Nov  3 20:02:41 2026 GMT
            Not After : Nov  4 21:22:41 2026 GMT
        Subject: CN=90954BB84CB67A4BC9119777E7D5E9E270674166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:b0:f3:9a:de:18:bb:c2:34:d4:2f:91:2c:
                    7a:41:45:a0:fa:0c:2e:66:80:5d:18:53:9b:24:99:
                    cc:0b:80:5f:26:a5:53:93:45:53:a8:d5:c2:17:22:
                    96:8a:31:c6:0b:5f:35:b0:bc:2c:e2:13:22:cd:00:
                    8a:8a:08:9b:08:24:c7:c5:74:5c:83:5b:2e:01:4a:
                    4e:d7:55:a0:07:b9:5c:dd:19:53:ea:be:fd:9c:43:
                    3b:6b:b0:bf:ac:fa:e9:2a:1b:c4:66:b3:09:8c:04:
                    36:2b:e6:17:b7:f3:b9:3e:29:f0:4a:94:e2:95:42:
                    3a:7e:00:e1:93:4f:80:4f:69:64:6d:93:f7:18:de:
                    1c:a9:eb:64:bc:5b:c8:71:2a:df:e6:26:43:d5:11:
                    6c:bd:2a:43:f9:10:2b:b2:4c:09:2e:26:02:de:d2:
                    d7:69:fc:71:ce:73:a5:53:36:7a:21:d5:f5:4f:35:
                    71:9e:dc:7e:73:28:2b:9a:fb:b9:ee:9f:d2:7b:03:
                    1e:3b:2a:00:92:5e:7a:d6:de:81:3b:19:a8:8e:5f:
                    95:7a:4d:d7:b0:bc:5c:5e:19:22:d6:6b:f3:38:29:
                    7f:4b:5c:fd:8a:e6:93:78:87:ca:62:1a:45:6e:f2:
                    0d:00:6a:9d:0d:38:2a:3f:16:a6:f5:d6:0e:a7:bc:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:95:4B:B8:4C:B6:7A:4B:C9:11:97:77:E7:D5:E9:E2:70:67:41:66
            X509v3 Authority Key Identifier:
                keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a5:c3:68:f0:17:b7:62:12:4a:53:89:19:9d:58:92:49:19:
         2f:58:a2:7f:27:87:ee:43:6b:5d:8f:0a:56:92:b4:69:6b:b4:
         ff:04:0a:0b:ac:22:99:a0:e0:bf:3a:4b:0a:d0:c6:fd:3b:79:
         0e:63:9d:f5:d2:4c:62:20:54:59:b6:a2:c1:8d:c1:6b:1a:9b:
         5c:a5:f2:bf:3d:a4:a1:18:4e:4d:ae:aa:88:ce:26:c5:5c:7e:
         e8:cb:b7:8f:f6:af:42:79:d4:f7:bb:70:9b:af:88:b9:d3:14:
         6d:15:38:48:58:d0:6f:84:b9:05:db:b0:74:dd:d4:ce:ad:76:
         f6:8d:00:9a:40:7b:c4:e9:dc:a2:36:29:d8:ca:ca:f9:fd:50:
         05:8a:75:11:18:9f:63:73:08:40:8a:c6:c1:cd:d9:8b:39:f1:
         45:af:27:94:b6:6c:5d:15:d1:9f:7d:62:b4:da:8e:1f:9f:9b:
         67:21:3f:da:1b:19:e7:90:47:3a:ee:d4:a7:84:b0:e9:c8:b7:
         c8:a3:46:97:05:b7:cc:bf:90:e6:37:96:ef:61:c9:e4:51:b8:
         8f:8b:41:6c:22:43:91:64:08:80:dc:8d:9f:0c:ec:93:a4:fe:
         59:55:67:32:10:bc:cd:ef:68:4f:e0:c3:6d:41:5a:ce:ff:bd:
         5e:20:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:57:40 2026 by rpki-client