Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
File:                     D61B761F0598B8998BF802A069F51103270C6CC0.mft (raw, json)
Hash identifier:          96JlEs7/5i4FdSZFDDw9+TZ/4qp1cLOg1G1h+Q4+WXI=
Subject key identifier:   FE:68:DA:60:9F:39:EC:BE:73:08:3A:75:74:BE:F4:7F:AE:94:64:DC
Authority key identifier: D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0
Certificate issuer:       /CN=D61B761F0598B8998BF802A069F51103270C6CC0
Certificate serial:       1688E675253D1457F5831C8621850CCFF59A8D91
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
Manifest number:          E7
Signing time:             Fri 23 Oct 2026 15:48:36 +0000
Manifest this update:     Fri 23 Oct 2026 15:43:36 +0000
Manifest next update:     Sat 24 Oct 2026 16:56:36 +0000
Files and hashes:         1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: JV7kYNU81vIjUMbIQ9WaFlRn0Vf3tZeMtDHyZF3sYe4=)
                          2: D61B761F0598B8998BF802A069F51103270C6CC0.crl (hash: IA477oJ8Yrw2hkg1WqXrVhK8uhm+gN7TLlkWvEnjdLo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl
                          rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 16:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:e6:75:25:3d:14:57:f5:83:1c:86:21:85:0c:cf:f5:9a:8d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61B761F0598B8998BF802A069F51103270C6CC0
        Validity
            Not Before: Oct 23 15:43:36 2026 GMT
            Not After : Oct 24 16:56:36 2026 GMT
        Subject: CN=FE68DA609F39ECBE73083A7574BEF47FAE9464DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:c8:a9:cf:df:08:4a:0a:86:ae:1d:fa:a2:
                    c3:90:f2:46:14:d9:aa:4e:d9:1e:7c:63:5d:4e:36:
                    90:55:9e:02:67:b9:62:69:1e:2b:59:a2:a5:77:85:
                    be:f9:b9:33:b9:69:20:cf:64:c5:c4:be:a1:35:18:
                    db:21:f9:6a:e0:56:ab:81:74:7f:4d:9e:6a:fb:ad:
                    fc:ab:28:c0:e9:55:4b:e3:30:67:09:1b:a1:fa:08:
                    ee:db:fc:e1:52:12:a2:c3:12:7a:c6:67:8e:5f:9b:
                    1c:7a:e1:b9:9b:fe:c1:f5:bb:43:41:ec:aa:a1:97:
                    60:e9:49:a4:0e:b9:a2:f3:2c:f2:35:51:29:5f:34:
                    aa:d6:42:44:59:33:9c:21:01:4b:0a:18:85:d2:cb:
                    18:71:75:7d:23:c9:4d:42:c5:b4:40:b7:eb:5c:d7:
                    b4:d6:92:59:48:7c:2f:a5:02:c6:a5:ad:92:a1:e7:
                    3f:66:7e:b7:6c:6a:d9:b7:43:06:f0:18:45:af:32:
                    54:8d:d9:e5:c7:4d:ba:ad:97:1b:b4:0b:73:ee:4a:
                    e9:87:b7:c8:ef:9f:a5:88:87:2c:39:fc:fc:7b:91:
                    0a:c0:01:03:7f:ad:57:d0:cc:ad:57:cc:27:ee:b6:
                    ea:bc:54:b7:71:a8:9c:71:8d:d6:a3:02:d3:eb:fe:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:68:DA:60:9F:39:EC:BE:73:08:3A:75:74:BE:F4:7F:AE:94:64:DC
            X509v3 Authority Key Identifier:
                keyid:D6:1B:76:1F:05:98:B8:99:8B:F8:02:A0:69:F5:11:03:27:0C:6C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D61B761F0598B8998BF802A069F51103270C6CC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/D61B761F0598B8998BF802A069F51103270C6CC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:ea:16:d6:6e:79:ef:61:ad:ca:ed:67:c2:fb:7d:68:f7:
         6e:97:43:93:4e:1d:4b:b1:a1:a9:88:80:29:8f:61:b5:71:57:
         8f:1c:9c:62:3c:34:16:5d:47:d6:1a:34:20:32:f4:e3:4c:04:
         3d:8a:14:7b:9f:e6:73:66:c2:6c:97:55:3a:83:d5:2d:d3:bb:
         14:fa:cd:28:af:1d:2e:82:3b:ea:f9:7c:91:7f:20:ee:46:bc:
         76:01:87:63:50:24:7b:6b:22:db:4e:3b:bf:2f:84:9e:00:f0:
         fd:42:55:81:24:b3:af:b4:2f:2d:73:81:f8:51:42:a0:ad:b0:
         46:4a:ce:ff:e1:79:5a:47:1f:d2:de:4a:f5:2a:95:02:94:7b:
         52:5c:a3:c0:ee:23:b1:bd:83:66:21:88:75:29:34:75:82:a7:
         20:10:0b:d1:a0:7c:2b:cd:ad:30:1d:68:9c:13:fa:a9:16:db:
         3b:c9:8b:76:04:4e:1a:6e:c0:e3:73:97:35:88:e4:c1:85:57:
         bb:bd:f3:c9:af:da:83:91:07:cf:32:26:1b:0e:45:37:e2:50:
         e0:42:7b:6f:87:bf:77:ba:cb:a3:04:13:98:46:bb:1f:9a:ae:
         f1:d1:a8:e5:aa:be:2d:51:39:ab:57:92:cd:e0:48:97:4f:2a:
         c9:b0:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:38:25 2026 by rpki-client