Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
File:                     092239A9C28840E7E025454A2EA108ED5A8BF369.mft (raw, json)
Hash identifier:          PVRECyGUQr0n3Xk8H2UmYJulpQ4LnY1Yp4uP0p+HcJ8=
Subject key identifier:   62:35:03:AF:40:DB:34:1D:F7:A5:72:F3:34:57:9F:19:7D:50:03:E6
Authority key identifier: 09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69
Certificate issuer:       /CN=092239A9C28840E7E025454A2EA108ED5A8BF369
Certificate serial:       1A2CD48075BC8865D97179A81D5F4717D01DFA98
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
Manifest number:          6B
Signing time:             Tue 21 Jul 2026 00:46:52 +0000
Manifest this update:     Tue 21 Jul 2026 00:41:52 +0000
Manifest next update:     Wed 22 Jul 2026 00:46:52 +0000
Files and hashes:         1: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: 9NL2C7FOxcvOHwTRTmo9h9A795ncThfKAUagyOzQnW8=)
                          2: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: A/ozUYyvaDadcj+xsfOVvgriixFLbEAH6FL6zdv2bCc=)
                          3: 092239A9C28840E7E025454A2EA108ED5A8BF369.crl (hash: F/8EY0/Y5jQVoVrOj3mBC/R7Otf2gBr6HYpLvvP0ltU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl
                          rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 00:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2c:d4:80:75:bc:88:65:d9:71:79:a8:1d:5f:47:17:d0:1d:fa:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092239A9C28840E7E025454A2EA108ED5A8BF369
        Validity
            Not Before: Jul 21 00:41:52 2026 GMT
            Not After : Jul 22 00:46:52 2026 GMT
        Subject: CN=623503AF40DB341DF7A572F334579F197D5003E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:b0:2b:58:f6:e7:1a:63:46:fc:ac:27:25:
                    73:20:ad:16:04:6a:17:4e:8e:c2:14:55:42:d5:15:
                    c0:20:50:df:d7:74:36:d1:0a:23:f1:65:c1:c4:2e:
                    72:8e:d2:9c:7d:1e:45:86:0f:ce:a8:da:2a:3c:cd:
                    f1:67:c8:0d:d6:51:5c:e8:f0:aa:aa:6e:f8:27:32:
                    59:79:db:2f:4c:56:f6:6b:e9:d1:4c:cf:e9:12:9c:
                    5d:49:1c:74:18:2d:c4:ef:dd:b0:e1:21:73:b0:e0:
                    34:aa:15:4b:8f:66:d6:c3:45:a5:94:92:4e:6c:6f:
                    00:30:93:95:29:b1:e6:7c:08:a2:3a:75:7a:42:4f:
                    d6:f7:cb:b7:7d:42:12:4a:66:c1:a6:20:ed:f9:3e:
                    2e:5f:08:b9:3b:61:4a:4a:4c:51:66:62:d2:81:df:
                    72:6b:30:9e:75:e4:a0:1a:c7:30:b5:43:36:bf:88:
                    6e:76:7f:63:ea:d0:4d:0f:bd:fc:36:83:56:25:82:
                    38:9a:68:f6:03:7e:e2:aa:46:19:3a:f6:25:ef:c1:
                    5f:90:d8:a6:c0:57:39:78:c5:b7:44:9d:b1:fc:0d:
                    ff:2b:f6:90:42:17:02:d7:53:61:48:d3:d5:e4:6d:
                    4f:4c:79:54:af:c0:02:50:44:75:45:ba:d3:33:bd:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:35:03:AF:40:DB:34:1D:F7:A5:72:F3:34:57:9F:19:7D:50:03:E6
            X509v3 Authority Key Identifier:
                keyid:09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5e:96:3a:4f:57:5d:b4:2d:7c:06:7a:b9:c6:89:31:81:1d:
         1c:a9:fe:93:f2:0e:a0:24:db:80:5e:6a:b8:20:30:ab:b7:f9:
         af:83:c3:a2:84:89:68:8e:20:bb:e4:8c:98:8b:00:77:ab:10:
         6e:30:87:60:69:79:20:84:f5:fb:e1:cd:0c:83:eb:84:cf:d2:
         56:72:7a:1f:ff:e6:bb:23:c9:38:b4:78:8f:56:19:33:42:79:
         60:b4:5b:dd:b9:c0:7f:30:36:87:96:fa:26:ac:de:97:83:fd:
         79:08:b7:28:f8:10:99:4e:5b:09:cc:43:c4:a4:6f:88:7a:89:
         ef:8b:c8:b5:63:30:b9:17:b3:e4:b3:2a:21:78:ec:d4:30:0b:
         78:82:e6:d5:55:b3:05:f8:47:7b:e0:06:81:01:0e:a9:4f:63:
         f6:3e:5f:9b:12:03:a7:17:2c:9f:4b:26:94:38:16:42:86:74:
         08:48:30:9b:b3:45:85:1b:0e:a1:67:bc:0e:a0:60:d8:35:36:
         94:7f:73:f0:0b:03:67:69:19:3b:42:83:8e:c4:1a:34:4e:da:
         a2:0a:14:35:12:90:8b:0f:15:d6:ef:40:da:e7:e6:52:2c:c9:
         82:4e:53:86:9e:7b:eb:0f:d9:94:e9:63:94:fe:c5:c0:b4:85:
         37:7d:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:40 2026 by rpki-client