Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
File:                     FBA3638DA562505698B924E173281E46359B1617.mft (raw, json)
Hash identifier:          y4VuJzQN2c4rvrN/cNDhcVbcspkO3/rXYppElAozLtI=
Subject key identifier:   94:E3:7E:32:37:1D:2A:92:67:6C:23:E9:87:DA:3A:CD:7F:C2:D1:6F
Authority key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
Certificate issuer:       /CN=FBA3638DA562505698B924E173281E46359B1617
Certificate serial:       2865106D2C799BAA521393347E3A4658CAEF65B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 23:35:15 +0000
Manifest this update:     Mon 20 Jul 2026 23:30:15 +0000
Manifest next update:     Tue 21 Jul 2026 23:58:15 +0000
Files and hashes:         1: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: 5FPAtwhecwsubL80r6cuw6LZHftwyRq85ZxJM6Kqd/0=)
                          2: FBA3638DA562505698B924E173281E46359B1617.crl (hash: PEuCF1qTMiIg8FQV9NDK+xozHLQaPCCjjVtOQyOFRHQ=)
                          3: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: tNCHVLpKWfY3fZ8ZfZRRYmaRD6tD5GGqANd/n3olcLk=)
                          4: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: aWv2LNdALgBBdR5J3vxMwq5LFZy/FvWsDrFbKxxFcx4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
                          rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 23:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:65:10:6d:2c:79:9b:aa:52:13:93:34:7e:3a:46:58:ca:ef:65:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBA3638DA562505698B924E173281E46359B1617
        Validity
            Not Before: Jul 20 23:30:15 2026 GMT
            Not After : Jul 21 23:58:15 2026 GMT
        Subject: CN=94E37E32371D2A92676C23E987DA3ACD7FC2D16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:ee:8b:f7:c2:ac:bc:75:79:44:1c:b3:00:
                    3a:ba:29:21:55:9c:4c:eb:f8:2a:0e:28:18:42:47:
                    ac:e6:aa:0e:23:6a:82:e5:e1:d6:52:22:2c:5d:a5:
                    ad:ff:e7:27:18:c0:51:e3:38:1b:9c:ba:8e:ad:c6:
                    13:24:8e:34:2f:9e:34:c5:ea:df:41:53:5a:29:bd:
                    fa:cb:b0:d9:f0:99:4b:11:47:af:d9:30:1d:1a:f2:
                    a6:1b:ae:fe:60:f1:d4:ae:f9:7a:ff:a5:47:dc:90:
                    20:c0:11:f5:f7:ab:e2:6b:34:56:31:90:a0:44:ca:
                    2d:d4:02:89:48:94:19:1a:fa:10:6a:c4:1d:0e:b4:
                    7c:86:c2:d9:f6:71:aa:82:9b:86:31:3a:fd:57:97:
                    6a:18:55:8f:9a:6f:03:88:84:dd:7a:9e:7f:00:22:
                    b0:57:3e:47:df:a5:00:e2:f0:34:f6:51:36:c3:b8:
                    00:17:3f:49:f6:83:92:a7:5f:47:13:53:47:47:c7:
                    3f:f4:ee:db:d1:13:1f:f7:d8:8b:6a:fa:43:4f:00:
                    68:a8:95:d4:c6:94:f2:d4:12:26:33:4a:6e:dc:61:
                    9b:6a:cb:38:f3:61:cf:8a:b9:d3:0f:e6:96:2f:ac:
                    82:4a:eb:42:fc:16:bb:84:03:22:91:9a:96:f2:78:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:7E:32:37:1D:2A:92:67:6C:23:E9:87:DA:3A:CD:7F:C2:D1:6F
            X509v3 Authority Key Identifier:
                keyid:FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:63:15:98:5b:f8:2a:1a:3b:0f:bf:8f:51:ec:35:c9:52:a2:
         d9:78:58:58:41:58:5d:2e:bd:ed:79:ab:15:92:be:03:19:62:
         36:3c:d1:1e:a8:33:0c:98:e3:15:b0:67:d2:cd:c5:e0:06:d2:
         3c:ce:71:1c:1d:83:cf:d5:41:d4:e6:0e:82:1b:b0:ed:6f:22:
         30:84:e9:66:e7:25:e3:55:96:ab:65:a5:97:f7:00:74:23:0d:
         a6:eb:00:d5:d5:4e:d8:fc:b2:1c:d6:d6:53:38:d3:48:e4:5f:
         2a:2b:b4:b0:78:54:06:2a:5b:77:85:c1:13:d5:52:f6:e1:eb:
         ec:93:41:d2:e9:11:b8:5b:0f:74:7b:30:67:a3:5f:8f:b2:32:
         84:7d:2d:c5:d4:70:eb:d4:ac:64:b3:7e:0d:90:f4:71:3a:73:
         9c:c0:95:eb:80:d5:d0:6f:02:27:8c:87:d3:6b:f1:16:c2:3e:
         aa:8b:0c:b0:e1:bf:12:0c:2b:57:16:ba:cd:ac:76:eb:2e:7b:
         ee:11:57:b2:55:8d:d6:f7:bb:ac:da:d0:f7:89:8f:36:c3:80:
         fd:d6:e2:38:c2:2c:55:04:08:6e:d2:2f:37:a0:d0:f7:2d:91:
         ef:da:3e:b9:75:95:e2:93:20:db:95:bf:fe:8f:e5:f3:3f:9b:
         1e:1f:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:47:16 2026 by rpki-client