Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft
File:                     DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json)
Hash identifier:          Pv5/zgbKLzmuiElgl8T8JkpXFhYIaPFReJwTWhYs4is=
Subject key identifier:   93:58:FD:30:2C:31:9D:A7:BD:C9:C3:4F:DA:E1:A3:33:C7:D9:EC:42
Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D
Certificate issuer:       /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D
Certificate serial:       67BFD0EF02836981276BA6805C52DA4FE297D064
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft
Manifest number:          60
Signing time:             Mon 13 Jul 2026 01:46:06 +0000
Manifest this update:     Mon 13 Jul 2026 01:41:06 +0000
Manifest next update:     Tue 14 Jul 2026 01:51:06 +0000
Files and hashes:         1: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=)
                          2: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=)
                          3: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=)
                          4: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: aDZKO7hsg88B8c2lYFd0EtLmygV/ohKT5F3yDt9Bzmg=)
                          5: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=)
                          6: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=)
                          7: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=)
                          8: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=)
                          9: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl
                          rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 01:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bf:d0:ef:02:83:69:81:27:6b:a6:80:5c:52:da:4f:e2:97:d0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D
        Validity
            Not Before: Jul 13 01:41:06 2026 GMT
            Not After : Jul 14 01:51:06 2026 GMT
        Subject: CN=9358FD302C319DA7BDC9C34FDAE1A333C7D9EC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:79:b2:40:b7:90:95:a0:d8:45:ac:2f:71:
                    73:ed:ea:85:58:2e:9b:e4:60:c8:e2:09:f5:84:9c:
                    d6:3a:79:83:a8:dc:9b:75:bf:e4:fe:ce:90:cd:12:
                    a2:61:62:8a:ba:ae:11:c7:a6:d3:88:2f:a4:50:01:
                    dc:d6:af:e8:9d:2c:b6:9b:f6:09:66:1d:4e:05:25:
                    ef:62:fe:bb:d7:9f:2c:3e:20:bd:ee:26:bc:a7:9c:
                    e4:40:ac:71:af:7d:a7:d3:5c:6b:d0:56:b3:90:fd:
                    78:aa:b2:4a:3b:fe:f5:d9:20:fd:65:8b:38:04:00:
                    c1:fc:22:71:6e:16:ca:98:35:33:75:c9:6a:c6:e5:
                    84:22:06:e0:77:f4:0b:78:39:9e:6e:4c:9e:3e:5a:
                    37:d1:1e:05:59:a1:95:4e:ca:fc:01:67:45:0d:17:
                    2a:f3:61:a2:c6:9b:a7:28:da:0b:0a:02:c0:16:6c:
                    c3:23:5b:e1:a4:4d:7c:66:d3:81:17:20:31:bf:b5:
                    ce:7e:97:da:cb:67:aa:82:4a:a0:4d:b8:d6:43:d3:
                    10:69:39:cf:84:71:dd:63:95:2c:61:ea:8f:46:84:
                    1b:0e:f0:1c:d7:ec:a5:84:e1:5c:b8:25:03:e8:2b:
                    f8:63:b0:94:53:17:c8:06:60:4f:6d:ac:9c:94:05:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:58:FD:30:2C:31:9D:A7:BD:C9:C3:4F:DA:E1:A3:33:C7:D9:EC:42
            X509v3 Authority Key Identifier:
                keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4b:7b:0d:8e:64:8f:23:b6:9a:6a:f4:50:83:16:6f:a1:bf:
         a0:eb:70:cf:7f:59:20:c2:31:45:a4:da:49:f2:73:07:c9:fe:
         81:29:68:ad:54:ab:89:09:c0:7e:e9:af:07:f6:6a:e6:9d:83:
         58:7f:11:32:7b:3e:ee:42:f9:f0:26:c2:ae:19:a5:6b:bc:99:
         80:6c:06:6f:fe:8a:21:7d:ef:e4:14:5c:a7:d0:49:b0:63:fd:
         81:68:f6:2d:d3:b2:10:57:24:c8:11:09:6d:4e:91:75:a7:e7:
         60:85:52:8d:76:c9:f6:09:ea:8f:9c:11:46:bf:dc:d1:c6:49:
         70:c1:12:c1:0e:7c:01:6c:96:6a:59:7d:22:f2:26:28:28:44:
         fd:91:48:b2:5f:cc:d2:ee:bd:14:9d:f3:a2:a0:11:58:34:01:
         cf:54:e8:4f:6d:27:76:f7:ce:76:4a:39:8e:af:0f:b4:04:19:
         cf:f1:23:96:fb:64:62:88:48:67:ee:43:cb:fa:0a:35:fc:be:
         58:0e:ad:80:e7:95:bc:f8:0c:4e:78:4f:68:8e:48:42:00:f2:
         f0:84:09:8d:08:5f:87:70:78:bb:fb:57:e3:d5:2f:9c:64:ef:
         98:5f:48:87:61:8e:0d:04:fd:ae:45:2b:8e:66:2f:c8:0c:38:
         5b:3a:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:23:12 2026 by rpki-client