Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
File:                     4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json)
Hash identifier:          ojH0+3ROjizHtusZ9dr/76tSQNVMDIcBNXNek6aoWUk=
Subject key identifier:   78:D9:0C:49:DA:9F:0F:6A:75:D6:20:8C:11:73:50:0F:DF:86:31:37
Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5
Certificate issuer:       /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5
Certificate serial:       75844303B7506D204FEE6B0B22913C374C44F4C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
Manifest number:          6B
Signing time:             Tue 21 Jul 2026 01:27:38 +0000
Manifest this update:     Tue 21 Jul 2026 01:22:38 +0000
Manifest next update:     Wed 22 Jul 2026 04:39:38 +0000
Files and hashes:         1: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=)
                          2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=)
                          3: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: FoameLzGPyNcbku2JnhRTzuItQDRYJ1pbDktRR9A9iM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl
                          rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:84:43:03:b7:50:6d:20:4f:ee:6b:0b:22:91:3c:37:4c:44:f4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5
        Validity
            Not Before: Jul 21 01:22:38 2026 GMT
            Not After : Jul 22 04:39:38 2026 GMT
        Subject: CN=78D90C49DA9F0F6A75D6208C1173500FDF863137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:22:06:5c:80:4d:cb:51:c2:62:6a:8d:0d:
                    1a:01:e1:c3:07:ce:73:e0:e6:c8:d7:a6:ae:b1:b9:
                    43:26:3b:a9:95:00:3e:fc:a6:53:6d:73:72:dc:38:
                    d0:30:1a:aa:b1:e1:93:3d:4c:6d:a0:24:c9:7d:b5:
                    c8:c8:f9:82:df:f7:ed:42:a6:2a:19:a6:67:27:08:
                    01:e8:9f:54:bf:90:1c:2d:fb:27:1e:4a:42:91:2a:
                    7a:a3:72:98:3a:8f:50:42:94:d0:4e:be:96:f9:2c:
                    87:e3:98:55:6b:24:44:34:6e:ef:49:5c:b8:6a:70:
                    17:57:59:d3:fa:3d:97:9f:25:17:e8:1e:d2:1a:a6:
                    a5:54:fc:ff:0a:63:68:43:ec:35:9b:89:5a:a9:b0:
                    af:d6:8d:f4:95:11:75:1c:60:b6:ad:99:8e:fe:f4:
                    ee:37:63:61:b1:fb:3b:cc:5e:fa:1f:3c:a5:d3:e9:
                    a7:43:80:96:4e:e8:8e:0a:51:7c:a2:ec:39:aa:d1:
                    43:d7:d4:18:bc:74:0f:bd:4a:74:10:0e:6f:4b:75:
                    86:80:47:f8:a1:5e:4f:c1:a3:ed:15:fa:11:ae:75:
                    20:bc:70:7e:16:26:af:63:28:c8:be:d5:8c:1b:1f:
                    07:5e:90:d3:ce:91:99:11:b3:88:a0:ab:f5:d1:e4:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D9:0C:49:DA:9F:0F:6A:75:D6:20:8C:11:73:50:0F:DF:86:31:37
            X509v3 Authority Key Identifier:
                keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b1:9a:d3:6a:28:48:2c:59:3a:b9:54:dd:72:c0:9e:ff:52:
         82:6f:18:2f:4a:95:58:aa:3c:db:43:6c:5e:56:13:f1:ae:68:
         a0:8f:24:ca:5d:d9:63:4d:53:2f:03:33:f0:cc:4d:bf:6b:8d:
         5b:56:f0:73:e7:b8:ba:bd:6c:fe:77:65:f0:5f:bd:80:7b:74:
         12:48:2f:24:66:db:73:42:af:92:d9:10:18:a5:e7:f6:09:69:
         7b:3e:01:32:68:33:28:82:e9:7d:f9:74:a0:a6:3b:dc:70:ce:
         b1:79:43:c1:72:2b:07:22:1c:a1:2b:03:95:79:bb:ea:10:31:
         f6:46:ba:9c:b8:07:78:3c:b4:d9:80:b6:2c:9c:fb:44:78:2d:
         4f:49:7c:3c:4d:a4:2d:59:3f:96:91:b7:31:e7:f0:bd:6f:8a:
         0f:5f:ce:ab:2c:b7:6c:1f:de:d9:7b:a7:57:85:35:e7:cf:fb:
         46:21:47:da:9c:25:92:c1:f7:b1:d2:35:8d:70:e2:c6:5c:0e:
         a0:95:04:f9:cc:15:ed:3c:03:a7:5a:25:fe:8a:fe:c2:90:34:
         4e:43:27:51:50:67:96:61:84:7e:12:7f:2f:8e:71:31:29:a6:
         5d:25:d2:8f:10:b8:6f:7d:01:aa:df:ee:e6:f9:f1:47:14:ac:
         e3:b4:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:28:51 2026 by rpki-client