Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
File:                     256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json)
Hash identifier:          gHcHO7H2u3ZTMxhZ+De4HeDiKqVyXf8fThWKylpw17s=
Subject key identifier:   82:C7:73:8E:FC:BB:61:76:B3:6F:B7:25:F1:43:49:AA:7A:E0:E6:3B
Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED
Certificate issuer:       /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED
Certificate serial:       412A0E6C54BD4FC56315D12D4F1E667621D94E08
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
Manifest number:          60
Signing time:             Mon 13 Jul 2026 00:14:02 +0000
Manifest this update:     Mon 13 Jul 2026 00:09:02 +0000
Manifest next update:     Tue 14 Jul 2026 00:32:02 +0000
Files and hashes:         1: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: jvPRsv10Ihj5T/leFreVl9mRYSPevnz7jPVDnrDwW+M=)
                          2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=)
                          3: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl
                          rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 00:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2a:0e:6c:54:bd:4f:c5:63:15:d1:2d:4f:1e:66:76:21:d9:4e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED
        Validity
            Not Before: Jul 13 00:09:02 2026 GMT
            Not After : Jul 14 00:32:02 2026 GMT
        Subject: CN=82C7738EFCBB6176B36FB725F14349AA7AE0E63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:42:e8:a8:76:0a:2e:32:29:1c:24:93:60:
                    e3:da:5f:05:27:e3:eb:9f:46:e7:23:86:5e:09:eb:
                    32:8c:d7:d9:39:a0:67:5d:02:44:54:f3:c7:c3:3c:
                    2c:47:8d:f5:0c:77:69:7a:28:6f:ee:79:b1:49:2f:
                    4d:ff:e7:c6:bb:de:dd:53:7e:2d:5f:d6:2f:7f:9a:
                    7b:50:81:74:0a:f4:b5:83:13:7e:63:c5:fe:2e:17:
                    5b:05:c4:57:ee:39:a5:d3:1f:26:03:a7:06:05:de:
                    fb:a7:9f:53:62:a2:39:91:13:ff:25:c9:90:00:d7:
                    b2:d7:a7:37:42:ef:d2:89:20:4f:8e:39:3c:15:50:
                    63:ef:1a:d0:52:6d:ad:98:ad:6f:db:0a:d3:c9:ac:
                    5c:ac:c5:34:07:2e:2a:ba:79:70:90:84:15:fb:de:
                    07:b5:9d:cc:2c:0c:cf:60:1d:0a:ec:74:ef:01:31:
                    b9:e6:80:5d:3b:0a:3e:6f:0e:75:63:56:5b:73:52:
                    4c:f2:c0:75:59:c8:5d:fd:49:7c:79:78:68:63:58:
                    3a:50:96:06:6f:87:67:04:2e:04:ed:00:f8:53:91:
                    b4:97:c4:8a:2d:4c:5b:ec:5a:01:ba:ff:f0:55:75:
                    1c:b3:9b:e8:cb:92:2b:c0:a1:38:97:aa:1c:f1:2e:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C7:73:8E:FC:BB:61:76:B3:6F:B7:25:F1:43:49:AA:7A:E0:E6:3B
            X509v3 Authority Key Identifier:
                keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:14:2f:e1:b8:2a:e2:3a:c9:44:20:18:1d:25:02:e2:07:
         e3:e0:f4:29:95:9c:3b:96:2e:ab:84:19:97:06:ed:47:be:00:
         ab:b2:21:ae:b6:67:d2:e8:85:5a:8f:28:a8:56:70:ed:dc:35:
         49:f8:9f:27:3c:eb:03:f1:43:57:29:8a:45:91:fd:e5:15:85:
         78:ea:99:43:3f:c2:af:d8:6d:bb:d1:e1:19:25:a6:ef:96:3a:
         b7:ea:0f:2a:04:cc:f8:d4:1c:fe:8e:fe:b1:52:08:0a:78:2b:
         fa:ab:a4:96:7e:40:dd:fa:67:b7:ea:9d:3f:3f:dd:d3:59:4f:
         8d:cf:af:4e:85:6b:64:e0:1e:1b:cc:0c:3e:b3:9d:c0:53:fd:
         ed:ae:36:ab:fe:cc:9c:6a:4a:da:12:df:f9:e5:4d:85:b5:b5:
         8a:b2:5a:ad:fe:74:e6:c9:6c:7c:f4:91:ec:12:fd:26:92:cf:
         f3:8c:01:d6:2e:b6:69:7a:0b:da:5f:61:a9:98:f3:75:e3:a3:
         65:31:bd:2d:07:5d:72:0d:8b:6d:a9:f1:32:64:3c:08:da:5d:
         41:58:30:97:04:ce:44:30:34:6c:34:37:77:97:fc:da:6a:2b:
         f2:f4:56:db:7c:cb:60:9b:7a:3c:b6:d4:2d:28:a1:2d:13:93:
         2d:72:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:45:22 2026 by rpki-client