Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
File:                     6D171A25D57FF823724FB6208343D200F64CBBB9.mft (raw, json)
Hash identifier:          rzQzAsuysjboL1ZYAGpxYhWkfCtp3uh5BcD8RiJA4FU=
Subject key identifier:   7B:E6:20:A2:20:81:3C:BE:AC:B9:77:A6:D8:DD:47:4E:A9:C4:88:70
Authority key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
Certificate issuer:       /CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Certificate serial:       2085696C4B22B03EEE304EB95CE135106676C8C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
Manifest number:          B8
Signing time:             Wed 16 Sep 2026 22:36:55 +0000
Manifest this update:     Wed 16 Sep 2026 22:31:55 +0000
Manifest next update:     Thu 17 Sep 2026 23:59:55 +0000
Files and hashes:         1: 6D171A25D57FF823724FB6208343D200F64CBBB9.crl (hash: rPm+LuihFyqysJ8yKq5b7KgRjwQT5hEjuKmO7/Y5vuI=)
                          2: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: 2UjxxTGC1nNXBGbq1J0Vw32Q3bb9jyytfhNHGdS8EJk=)
                          3: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: opRYiyX8Gzxcov3p6XrBWNKwC4F/IpDzv8/YLsBUDfE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
                          rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:85:69:6c:4b:22:b0:3e:ee:30:4e:b9:5c:e1:35:10:66:76:c8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D171A25D57FF823724FB6208343D200F64CBBB9
        Validity
            Not Before: Sep 16 22:31:55 2026 GMT
            Not After : Sep 17 23:59:55 2026 GMT
        Subject: CN=7BE620A220813CBEACB977A6D8DD474EA9C48870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fa:65:9f:55:cb:8d:9e:ef:b3:68:16:12:53:
                    31:85:c5:52:7e:2d:4c:ec:dd:7e:7f:b3:15:d4:77:
                    55:07:f6:03:89:9b:be:b1:a0:9a:02:ab:3d:21:9c:
                    5e:31:51:65:86:f0:28:5b:cb:06:08:90:7e:66:ad:
                    3e:d4:a0:2e:1e:a2:af:fa:84:60:d5:98:13:4b:ba:
                    10:ed:29:b3:ff:fb:57:5d:39:b3:50:f4:9e:b8:9a:
                    c8:2e:0d:65:71:26:64:92:65:62:78:38:f1:d6:17:
                    59:0a:cf:11:a4:20:5a:cb:00:b1:b1:74:56:48:18:
                    a9:b2:94:5a:b8:41:70:34:28:ba:8d:3f:2e:d3:aa:
                    48:fe:67:89:b4:7d:8c:1e:8c:ef:59:33:a5:ad:08:
                    84:a6:07:3c:92:da:e0:ab:50:68:8c:b7:df:bb:5a:
                    94:06:cb:47:7b:35:f7:18:fa:12:6d:e4:c7:1c:5c:
                    50:86:cb:4e:fd:9e:fc:97:c8:8c:aa:56:ea:c9:e1:
                    01:0c:d7:3e:ce:ac:bb:f7:6b:23:1d:9b:85:1a:6b:
                    5a:24:1a:a0:1a:e1:b5:be:64:39:21:c7:f2:c8:e7:
                    d0:86:bd:d3:9f:2f:37:88:fd:0c:b9:09:9b:43:50:
                    21:d1:6e:5f:f7:dc:13:b0:5a:a8:0a:70:9d:8e:56:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E6:20:A2:20:81:3C:BE:AC:B9:77:A6:D8:DD:47:4E:A9:C4:88:70
            X509v3 Authority Key Identifier:
                keyid:6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1f:43:7e:87:97:dc:bc:cb:49:98:11:c5:4c:96:43:6a:69:
         84:3a:09:70:31:98:6f:5f:63:33:95:b6:ac:fa:e7:f0:28:2e:
         0f:74:d4:c7:68:33:0e:bc:33:19:67:b0:0c:0a:c6:a8:6d:15:
         98:0b:d6:d1:d1:d4:b9:da:2c:8c:91:e5:6f:57:10:85:dc:49:
         4e:6f:0e:4e:be:4b:dd:f8:4b:85:06:db:b4:b2:0a:81:6f:0b:
         80:4e:ca:11:b4:39:d6:ca:09:6d:3f:a3:c7:47:ba:be:32:e0:
         0e:95:6b:6e:c2:34:8d:68:10:fa:b6:ad:ec:3c:4d:0c:ba:03:
         2d:10:1a:79:45:f5:1f:2a:18:16:12:92:54:00:6b:cd:b3:4e:
         94:c3:f7:03:81:5d:f7:6f:92:53:7e:14:81:2e:2e:17:86:d1:
         dc:e4:8a:2a:32:50:da:c3:f9:dd:2f:2e:1f:d7:f5:7b:7f:40:
         69:f4:73:db:cd:42:bc:ba:73:d9:45:75:30:f1:ab:0d:3f:5b:
         97:75:d8:64:69:8c:2e:67:7c:79:c8:a4:1d:a6:31:7c:fa:12:
         2d:3c:fe:30:ff:e8:c7:a4:e4:d1:65:11:20:b5:3b:f4:92:8e:
         17:f2:a9:b9:46:86:83:90:a0:ec:76:ce:03:b0:9d:94:d6:65:
         2e:3b:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:43:55 2026 by rpki-client