Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft
File:                     647AC2310971579801DD46D3B271B994E9E436B8.mft (raw, json)
Hash identifier:          kLzh87AfikPXDvh6p3qEr87xVwcPX+iRXcTSMhiPRLY=
Subject key identifier:   A7:24:CA:81:F1:20:47:9D:8E:DC:87:0D:84:8D:C2:F1:19:66:2D:41
Authority key identifier: 64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8
Certificate issuer:       /CN=647AC2310971579801DD46D3B271B994E9E436B8
Certificate serial:       35A72F039FA41E64A3D84B49B8846B5BA87D0332
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft
Manifest number:          7C
Signing time:             Sun 02 Aug 2026 13:08:34 +0000
Manifest this update:     Sun 02 Aug 2026 13:03:34 +0000
Manifest next update:     Mon 03 Aug 2026 14:08:34 +0000
Files and hashes:         1: 647AC2310971579801DD46D3B271B994E9E436B8.crl (hash: 3ROM8ReWZbT5NXKQl6cKQ/zQRryQIkkGRrHIqi44jOU=)
                          2: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: yku2OKFmq6fXhF7DFYEYGMGLBbIVUHGQwGNi4OKZMJU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl
                          rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 14:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a7:2f:03:9f:a4:1e:64:a3:d8:4b:49:b8:84:6b:5b:a8:7d:03:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647AC2310971579801DD46D3B271B994E9E436B8
        Validity
            Not Before: Aug  2 13:03:34 2026 GMT
            Not After : Aug  3 14:08:34 2026 GMT
        Subject: CN=A724CA81F120479D8EDC870D848DC2F119662D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:fb:2d:73:26:c3:9f:a3:d4:05:96:80:b4:
                    75:45:8c:07:e7:dc:33:db:b5:d4:03:4d:f0:55:4a:
                    ba:9c:49:df:5e:53:4c:93:50:58:34:1d:4f:80:d8:
                    f2:e6:d2:a0:7b:aa:d2:59:aa:13:f5:33:b0:84:e2:
                    7d:1d:f3:71:4b:ae:ac:c5:84:48:39:aa:82:5e:e5:
                    25:d1:0d:da:86:81:c9:94:db:28:53:a6:fb:30:f2:
                    7b:c4:b1:ce:f2:2e:80:ad:91:a8:ed:55:64:89:7d:
                    22:d8:83:1f:65:60:d1:73:19:68:94:b9:3f:7d:d2:
                    f5:b5:ea:70:21:78:f8:2b:e9:7f:1c:a3:c1:2a:6a:
                    be:3f:81:18:fb:fb:1e:eb:df:1d:12:98:81:af:2b:
                    21:ee:49:a3:cd:0d:a3:de:40:dd:94:76:cc:7c:d7:
                    fd:3b:a1:25:7e:19:35:b3:e5:d2:ea:c7:1a:8f:c9:
                    7a:50:4c:16:c8:89:78:44:c2:ed:fd:dd:8d:79:07:
                    89:32:5d:c4:14:e9:24:02:90:f2:b2:f8:2e:cc:00:
                    d4:66:23:c7:31:47:3e:61:35:bb:0a:30:af:58:31:
                    4d:88:e2:49:84:de:14:e4:6e:0d:ca:ac:7f:c0:e8:
                    1c:3b:4f:2b:10:07:c0:88:8d:95:5a:d9:e3:ef:22:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:24:CA:81:F1:20:47:9D:8E:DC:87:0D:84:8D:C2:F1:19:66:2D:41
            X509v3 Authority Key Identifier:
                keyid:64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:58:e5:2e:46:64:91:64:4c:e9:24:d0:0f:14:e5:cb:8e:f5:
         7c:50:a8:cd:62:6d:fd:15:f4:86:a3:8c:2b:cb:29:34:9d:ac:
         c3:b0:93:4a:56:4a:60:2d:bb:2a:e8:ea:a9:85:bb:a3:c6:fc:
         8a:89:80:9d:63:83:96:f2:ac:22:0f:64:f0:27:99:ce:06:c7:
         5f:bd:49:70:1e:d6:7a:d3:ed:c6:93:0e:3e:6f:01:80:dd:84:
         90:12:7a:3c:74:16:e9:75:54:de:7f:06:25:f1:12:14:d2:eb:
         95:05:f8:9b:1e:61:de:a1:67:cc:84:cc:53:20:d4:5a:31:24:
         cc:2e:dc:ee:01:14:f0:b8:f7:22:ca:2d:f0:5e:4c:82:c2:13:
         fe:a9:37:7e:f1:40:a5:74:fa:4d:99:0a:d9:99:59:75:84:77:
         8f:ca:c4:54:92:39:59:ad:96:4f:bb:ff:5c:88:23:6c:6a:4c:
         e3:27:f4:4e:17:47:96:9c:1a:78:d8:ab:d1:0c:db:a4:4e:00:
         02:3d:f1:b4:5d:15:6e:c7:fc:50:3f:db:79:4d:3b:f7:3b:18:
         46:4d:9f:f1:cc:df:9a:a2:4a:df:87:bd:3d:eb:ac:ba:b7:4c:
         2a:bc:de:13:64:5c:22:9b:52:cf:50:ce:13:bb:d3:cc:95:60:
         4e:86:22:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:50 2026 by rpki-client