Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft
File:                     8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json)
Hash identifier:          0ipgcvpzXJFjFgxDMeojz316yOZVp98TIfONRmSciMQ=
Subject key identifier:   E7:E7:7C:98:C6:85:7C:E2:F1:EB:BC:13:35:27:EA:06:6F:61:D4:3A
Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23
Certificate issuer:       /CN=8D7E0574648D2E037D2147F409FC002E56E42A23
Certificate serial:       30C40C5AAC7D1EBE373B381669BD8CF560E568B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft
Manifest number:          60
Signing time:             Sun 12 Jul 2026 20:54:58 +0000
Manifest this update:     Sun 12 Jul 2026 20:49:58 +0000
Manifest next update:     Mon 13 Jul 2026 23:35:58 +0000
Files and hashes:         1: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=)
                          2: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: l9eEjC/7F1QDXMw/GfeUAgDFRRlk2SCJcRmCu5I9Lhk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl
                          rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 23:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c4:0c:5a:ac:7d:1e:be:37:3b:38:16:69:bd:8c:f5:60:e5:68:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23
        Validity
            Not Before: Jul 12 20:49:58 2026 GMT
            Not After : Jul 13 23:35:58 2026 GMT
        Subject: CN=E7E77C98C6857CE2F1EBBC133527EA066F61D43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:03:69:5f:94:ef:39:b5:58:62:1c:c4:87:
                    0e:22:7e:26:e2:60:1f:01:c3:a9:10:c2:60:23:20:
                    96:39:cd:53:53:51:af:fa:e3:ec:69:75:68:3b:3e:
                    3d:c0:f1:26:6f:9c:1f:23:02:f2:50:21:f8:1a:cc:
                    6a:3f:7e:32:70:2c:18:79:16:8c:38:d2:79:fc:77:
                    b4:4a:21:95:48:63:73:75:f3:80:b5:49:d7:26:e9:
                    f2:4c:e1:7a:9a:a7:ea:bd:89:2f:a2:b0:19:56:31:
                    2b:0c:62:e6:43:ff:95:22:bc:bc:88:88:dc:58:1d:
                    62:83:cf:12:7a:30:83:69:71:ab:f0:b8:81:c6:28:
                    de:cb:0d:81:f5:63:72:df:35:bb:7a:4c:16:9a:a2:
                    9a:5c:56:78:3a:6b:0e:63:71:08:ab:11:8d:67:6b:
                    9a:91:c7:ec:1d:43:a3:51:f9:83:c3:86:87:e8:ba:
                    e2:37:cf:6f:de:f8:94:69:3d:8a:89:65:1c:97:ff:
                    bf:62:73:4c:ac:72:98:f6:26:d0:8a:b5:df:96:10:
                    85:9b:4f:21:ec:19:71:c0:fa:a6:31:74:ff:8a:7b:
                    47:15:29:38:c7:77:4f:a2:48:34:92:c3:86:cc:18:
                    ff:ab:d0:56:27:d2:b7:32:7d:c3:6d:48:29:3e:de:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E7:7C:98:C6:85:7C:E2:F1:EB:BC:13:35:27:EA:06:6F:61:D4:3A
            X509v3 Authority Key Identifier:
                keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:b5:cf:22:02:b4:6c:4a:6f:1a:e3:aa:8b:04:d4:b4:28:
         12:ed:73:fa:5a:4b:6e:11:8a:82:c6:2b:67:a9:a6:89:7d:6e:
         8a:a1:e9:5f:34:7f:3d:e7:f3:57:62:be:1b:30:e2:a2:0f:6e:
         eb:e4:f6:97:95:fd:ff:62:4e:15:fc:b9:37:2a:23:fa:0a:51:
         dc:a5:4e:31:e5:49:41:ea:5e:e8:09:9a:19:d4:5b:c9:46:48:
         7a:a7:fc:98:97:e9:2c:a1:2b:de:d4:77:d3:55:17:f0:6c:fa:
         ce:b4:cf:1f:79:f2:cc:52:5e:d7:52:fa:13:56:c7:1a:20:a9:
         30:e5:ba:f1:a5:7b:8a:46:13:de:90:ed:0c:30:bb:c9:f8:5a:
         05:f7:67:6c:18:87:23:a1:66:65:86:96:65:13:c1:d1:88:f9:
         13:3a:07:53:1b:91:55:f2:18:13:7c:a8:0b:c0:ad:5e:7a:c7:
         c0:4e:c2:f8:b9:ac:cc:7e:47:f2:cb:dd:23:d7:73:63:e6:3c:
         e8:75:24:fd:5a:ae:4e:e5:2b:13:51:5a:b3:be:cc:d2:57:95:
         b9:f4:cf:0f:3b:c8:7f:be:0d:95:dd:1b:76:db:be:aa:9f:f3:
         0c:67:8a:39:0c:95:d1:87:04:db:54:15:17:0b:89:d9:a0:a3:
         a4:67:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:06 2026 by rpki-client