Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
File:                     9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft (raw, json)
Hash identifier:          AW6hHJZpQJjRWbvvsnMbbXELHPhXZTU/vR728H9kV7w=
Subject key identifier:   0E:10:B5:CC:7C:F9:AE:49:F4:9B:4D:D6:8F:7E:3B:0E:80:17:D2:7C
Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
Certificate issuer:       /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Certificate serial:       671A656C04D340FC94C5ACD74329BA6D37B08DDA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
Manifest number:          6B
Signing time:             Tue 21 Jul 2026 02:33:54 +0000
Manifest this update:     Tue 21 Jul 2026 02:28:54 +0000
Manifest next update:     Wed 22 Jul 2026 06:31:54 +0000
Files and hashes:         1: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl (hash: sXFKZO8TTqghUsTIL7+qlR1HxZaI1nCwG1JOqrib1uU=)
                          2: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: 0YvIC8wCtWvDa2HWmo5ajWyQO0v7nGfkKloFn4oUr5Y=)
                          3: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: TbeMR6DCS8oQZoWLlauGHIZkAoCLHj7Jp79qNO5aAvk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
                          rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1a:65:6c:04:d3:40:fc:94:c5:ac:d7:43:29:ba:6d:37:b0:8d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
        Validity
            Not Before: Jul 21 02:28:54 2026 GMT
            Not After : Jul 22 06:31:54 2026 GMT
        Subject: CN=0E10B5CC7CF9AE49F49B4DD68F7E3B0E8017D27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:99:d3:63:23:7e:fe:2e:4a:a5:28:95:54:
                    26:13:79:5b:20:39:65:d4:6f:01:d3:38:17:7a:ca:
                    ec:b8:6b:98:3b:71:62:b4:13:a7:57:cb:1c:0c:34:
                    f7:c7:62:e3:7a:9c:f9:25:f5:03:ec:46:5e:b3:47:
                    9e:37:30:b5:c9:aa:09:68:d7:f9:c5:10:13:f2:06:
                    07:14:f9:9e:c2:dd:31:1c:75:45:b4:84:86:76:ff:
                    fa:cd:a0:2e:1c:27:64:4f:70:6b:45:76:3d:46:90:
                    aa:20:31:2d:6d:f1:bb:28:67:77:d0:ab:b4:35:22:
                    bd:40:21:1a:5b:f7:24:dd:79:64:aa:ef:2a:8e:27:
                    82:87:59:6a:b1:76:68:c0:cc:1f:e1:39:44:21:3d:
                    97:93:a2:6b:85:d7:e7:e4:7e:14:06:fa:8a:72:53:
                    b1:02:35:02:70:14:a0:57:84:1f:c7:e5:93:20:a4:
                    41:c6:b2:94:1d:91:72:ce:4f:73:48:fb:1a:c2:38:
                    b7:16:a2:ad:63:36:97:f4:00:b3:00:a3:f2:ee:68:
                    09:ca:2f:8f:e3:84:3c:4c:75:fb:dc:17:52:62:cd:
                    ff:22:de:80:15:57:ec:65:b2:7a:81:7f:57:6d:f1:
                    71:e8:f1:88:4d:95:5e:d1:cd:dc:49:b3:dc:1b:e7:
                    76:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:10:B5:CC:7C:F9:AE:49:F4:9B:4D:D6:8F:7E:3B:0E:80:17:D2:7C
            X509v3 Authority Key Identifier:
                keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:17:98:8f:ac:79:a3:d2:88:6c:81:b8:2a:df:54:43:fc:50:
         89:05:d6:19:9a:be:25:0c:ea:2c:30:c0:cb:2d:ff:dd:88:67:
         fc:5e:04:04:5c:28:af:ef:3e:29:ea:2c:35:a7:3f:c5:e1:7e:
         b4:87:73:29:a8:77:d2:c0:31:07:d6:2e:bd:c0:cb:b2:9a:3d:
         29:ec:27:f8:2c:1d:f4:93:bd:30:9f:43:e9:1d:33:e5:92:21:
         e8:d1:d9:e4:d9:b7:d4:8b:4e:91:53:79:9a:21:ae:18:b0:41:
         0c:9f:b2:c7:0f:60:5f:ee:95:23:3a:65:c6:15:57:07:71:cd:
         88:ef:7a:6c:20:70:16:e3:df:3c:99:b0:15:cd:64:13:2f:c3:
         da:22:04:af:46:cb:b5:90:6b:74:54:2e:0a:01:59:ec:40:c4:
         af:10:61:e6:d0:92:52:84:f3:b4:0b:bd:55:79:81:ea:9c:cf:
         c0:5c:6b:83:a8:81:d6:be:83:ed:92:3a:92:2e:c7:b8:df:a3:
         0a:dd:cd:5a:88:29:6c:88:ea:70:e8:2a:30:42:38:8d:44:cc:
         ff:ea:1d:f9:49:71:63:3f:fa:a6:b6:dc:f9:46:4b:75:00:9c:
         6d:aa:b0:f9:95:e0:6b:33:48:f3:5a:a3:2b:c4:b7:af:cc:85:
         39:a0:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:47:43 2026 by rpki-client