Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft
File:                     1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft (raw, json)
Hash identifier:          pVUtRAC2Bc9/Osm08/rAran4FqbU4OoPcRdwjIAjrGE=
Subject key identifier:   0C:E3:E8:9C:0B:CA:D5:15:BB:A5:C8:8E:95:76:5E:7F:8B:8E:21:A7
Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74
Certificate issuer:       /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274
Certificate serial:       06027F78D2EA0706F14CFD585CA98673416EF9C2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft
Manifest number:          7D
Signing time:             Sun 02 Aug 2026 16:22:14 +0000
Manifest this update:     Sun 02 Aug 2026 16:17:14 +0000
Manifest next update:     Mon 03 Aug 2026 16:43:14 +0000
Files and hashes:         1: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl (hash: p0+BeGCWgEHgsAnPmmcSoUBQL+xOBLVcYF3zPidWYJI=)
                          2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl
                          rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 16:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:02:7f:78:d2:ea:07:06:f1:4c:fd:58:5c:a9:86:73:41:6e:f9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274
        Validity
            Not Before: Aug  2 16:17:14 2026 GMT
            Not After : Aug  3 16:43:14 2026 GMT
        Subject: CN=0CE3E89C0BCAD515BBA5C88E95765E7F8B8E21A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dc:fd:61:04:b4:55:f4:b3:3f:fd:61:74:de:
                    f5:52:22:e6:bb:cb:99:20:dd:79:39:a9:2d:30:da:
                    3c:db:67:74:a3:42:f9:a4:f6:cc:63:10:4b:40:de:
                    ef:fd:89:b4:66:89:12:d0:3e:0b:ac:82:0c:0a:cb:
                    6b:a1:4b:24:d5:9d:55:16:a4:f7:75:e4:b9:4a:66:
                    c0:c8:e9:85:48:51:c4:46:03:41:24:9e:aa:92:d5:
                    12:01:ea:8c:9c:da:b1:36:60:0a:18:51:fc:b9:de:
                    af:06:49:65:fc:f2:e3:23:80:e3:14:50:41:73:e4:
                    49:a1:7a:18:97:0e:1a:72:aa:1c:cc:8a:64:b8:a4:
                    b6:bb:a6:5c:0e:f6:d8:c6:27:80:44:40:eb:e9:bc:
                    94:5a:df:22:ef:a9:2f:52:e6:4d:58:57:69:a9:88:
                    7f:d1:d8:a6:8b:31:cd:e3:9d:1a:e9:8f:d3:dd:68:
                    a2:08:d2:94:ef:27:1f:3e:89:8e:c5:aa:73:4d:e9:
                    8a:54:c7:e2:ea:e2:fa:8d:74:cf:7a:31:f3:33:a3:
                    68:81:fc:f6:77:f0:42:4a:b9:64:5c:1e:54:8b:a0:
                    6b:91:d1:77:d2:66:10:8f:94:8b:44:a3:32:d7:3e:
                    c5:e7:98:8a:c4:c7:67:5e:71:f0:6c:a6:eb:61:56:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E3:E8:9C:0B:CA:D5:15:BB:A5:C8:8E:95:76:5E:7F:8B:8E:21:A7
            X509v3 Authority Key Identifier:
                keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c9:ec:3b:33:0b:86:9a:2e:e5:76:51:5e:70:7f:c5:44:86:
         f4:b0:31:ab:0a:1a:fe:aa:7b:3f:f9:6e:1a:6a:13:8d:3d:43:
         b6:ef:ba:c0:bf:a2:83:c6:3e:ca:30:81:82:66:50:be:ff:8b:
         fb:45:5e:c8:79:f1:be:0e:3e:ec:ec:05:ed:11:1c:1f:ad:40:
         d0:86:7d:7f:76:1d:9e:f9:61:ed:f6:62:f6:65:21:a4:c3:bd:
         c5:7b:2b:7f:8c:55:6b:36:7d:b0:b1:dc:7b:64:7a:f9:0c:16:
         28:2e:15:e2:9c:df:82:60:de:b5:53:d7:ac:c5:a2:c1:17:08:
         1a:64:df:e4:35:cd:f7:ad:2d:fa:f1:7b:27:bb:e8:da:23:7e:
         f7:1e:9a:5e:d7:97:19:cd:3d:45:92:06:27:2a:e3:9c:bc:77:
         db:2d:cc:89:6e:4b:88:dd:0b:64:cf:9f:0a:6f:bb:3e:df:15:
         a9:19:d3:43:8b:ab:eb:62:9e:ad:73:54:31:82:4f:10:47:43:
         9b:04:c5:fb:47:90:61:44:98:3c:5d:57:13:30:e1:5a:0d:3d:
         f9:fe:04:25:d7:c6:ae:9d:55:97:9a:01:e9:cc:7a:6b:d0:f9:
         e7:a7:86:40:04:b0:c8:36:6f:cd:78:86:49:24:ca:03:6f:31:
         59:43:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:33:33 2026 by rpki-client