Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
File:                     F61FC33006E4D563052A74A3344CBDB712A9CE42.mft (raw, json)
Hash identifier:          OuorV3IeN07Cmi0FRe7VOPCdhgfr5r24FLk66MeRPqk=
Subject key identifier:   A0:28:B9:00:A7:9E:16:F4:DC:15:A5:0C:1C:38:C5:46:72:C8:F0:3F
Authority key identifier: F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42
Certificate issuer:       /CN=F61FC33006E4D563052A74A3344CBDB712A9CE42
Certificate serial:       38EE63EE74E6AB9F36ADA568A5FA9D9BA47BBBFE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
Manifest number:          7C
Signing time:             Sun 02 Aug 2026 17:13:09 +0000
Manifest this update:     Sun 02 Aug 2026 17:08:09 +0000
Manifest next update:     Mon 03 Aug 2026 18:15:09 +0000
Files and hashes:         1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: slYjvzyCrVX4GgCGyd9rvovLqFZzNIshufZkbhVSrC0=)
                          2: F61FC33006E4D563052A74A3344CBDB712A9CE42.crl (hash: vZZ7cgPc4/v4hHjqp41ZpUjA6u4YoZFPEe+X0nLEvCc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl
                          rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 17:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ee:63:ee:74:e6:ab:9f:36:ad:a5:68:a5:fa:9d:9b:a4:7b:bb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61FC33006E4D563052A74A3344CBDB712A9CE42
        Validity
            Not Before: Aug  2 17:08:09 2026 GMT
            Not After : Aug  3 18:15:09 2026 GMT
        Subject: CN=A028B900A79E16F4DC15A50C1C38C54672C8F03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:c8:19:03:c2:c2:37:7b:71:e0:16:2b:8a:
                    51:05:70:ce:0b:db:3a:6b:ea:c4:d8:ae:72:af:ac:
                    7b:f6:bb:a9:e1:52:f7:16:74:e5:e0:9b:ec:25:82:
                    8e:53:92:ab:95:c3:c7:78:d5:e5:52:38:c8:d6:2c:
                    8e:2c:a8:8f:49:fd:fe:df:40:f6:19:3f:38:55:5b:
                    8e:c6:8d:aa:e6:b4:4a:f4:1a:ba:27:30:6c:e3:ab:
                    a1:24:3d:90:21:1b:3e:d1:95:04:96:d8:47:91:fb:
                    d9:d3:ee:6e:06:c3:51:fc:e8:ad:13:d0:36:13:d9:
                    17:f2:c1:8c:ed:db:b2:ef:74:99:a6:f5:63:55:6d:
                    56:4c:19:9b:f2:35:01:17:e7:f8:87:77:57:76:c9:
                    dc:25:16:a4:14:bb:31:f0:85:15:83:b6:f5:6f:5f:
                    4c:dc:b2:94:08:7d:cf:2f:da:ae:43:a0:0d:63:06:
                    73:0c:f4:ed:77:f2:82:1f:31:fd:71:96:83:2c:d9:
                    e8:fa:5c:3f:5e:06:61:7f:f0:e5:cd:f1:d9:b1:ca:
                    f0:a1:2d:5d:fc:5b:5e:93:7b:27:f8:4c:e1:d7:23:
                    47:30:58:d2:2e:68:80:57:90:ab:ec:c3:c7:ca:81:
                    9f:c0:60:19:33:ac:0c:e1:df:84:03:84:dc:46:4f:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:28:B9:00:A7:9E:16:F4:DC:15:A5:0C:1C:38:C5:46:72:C8:F0:3F
            X509v3 Authority Key Identifier:
                keyid:F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:99:50:4c:c4:bd:35:a6:c8:ee:5a:2c:4c:6d:df:0c:54:
         f2:dc:78:f5:03:fa:a6:e8:d3:06:d0:11:c0:37:52:fd:51:d9:
         23:24:5a:45:1c:41:73:5f:ed:e8:b3:cc:3b:f4:bc:3f:ec:83:
         25:10:3e:76:30:73:d9:79:ba:8d:bf:09:b4:f7:8c:2f:49:09:
         7e:06:af:5a:54:96:10:e4:a9:c2:a2:91:8d:15:83:88:9c:5b:
         29:55:c3:eb:81:1a:64:9c:0c:5d:99:c3:44:55:18:77:32:b4:
         a8:83:ba:59:f2:35:0f:c8:15:1d:c1:3c:59:0a:5a:a7:00:94:
         36:74:9a:88:2f:0e:77:17:9e:4d:8d:96:8c:66:84:3d:8f:cd:
         6f:0e:f7:66:3b:25:77:fa:99:f8:0f:61:2b:c6:92:6b:80:ff:
         bc:a1:56:43:6e:2f:ff:a4:f2:19:f6:6f:3b:62:8f:50:b1:59:
         aa:6e:bf:15:cc:67:19:1b:d9:d7:dc:d4:32:be:bf:e9:1d:58:
         d9:b3:fb:e6:2a:05:27:2c:28:c7:8e:f3:57:b9:f6:14:0f:0a:
         d1:77:b1:e7:4d:e9:e9:96:e2:1a:a0:77:92:6a:4a:7f:50:a5:
         a4:df:a2:0c:a9:20:48:64:5d:c2:7d:44:bc:d5:b7:a5:ce:e1:
         e6:84:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:34:58 2026 by rpki-client