Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
File:                     60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json)
Hash identifier:          G7s2dhAgIgqqr+ELs1KeJ9YqLmwne7xHPY7mOfajIMw=
Subject key identifier:   18:E2:DE:06:E3:D5:87:A3:F6:69:81:AA:3E:95:AC:50:DB:13:BE:05
Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
Certificate issuer:       /CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Certificate serial:       248CF2C3056D50120F3BCE062411B58716A0348E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
Manifest number:          7D
Signing time:             Sun 02 Aug 2026 13:03:30 +0000
Manifest this update:     Sun 02 Aug 2026 12:58:30 +0000
Manifest next update:     Mon 03 Aug 2026 15:52:30 +0000
Files and hashes:         1: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: Xib0SQDiLiqF5Aa8fyIXYJCcUEwwPYJ3BOHbm5vR+Uc=)
                          2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
                          rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 15:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8c:f2:c3:05:6d:50:12:0f:3b:ce:06:24:11:b5:87:16:a0:34:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05
        Validity
            Not Before: Aug  2 12:58:30 2026 GMT
            Not After : Aug  3 15:52:30 2026 GMT
        Subject: CN=18E2DE06E3D587A3F66981AA3E95AC50DB13BE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:9d:32:20:9c:3f:90:7b:dc:03:7d:f3:c4:
                    d8:1b:cf:30:44:36:ec:11:29:f8:76:6a:93:16:22:
                    4c:eb:c6:14:c3:1a:f6:b7:d9:bd:cb:d5:25:3f:8b:
                    3e:d0:2a:f1:d7:37:ad:e4:9e:9d:1d:ea:36:41:e9:
                    39:2c:6b:fb:6a:f9:50:8d:51:a8:12:cd:7d:ff:d5:
                    de:49:81:1c:08:70:8c:12:b1:5d:11:6f:96:64:a7:
                    f8:03:d2:b8:6f:ab:6e:f6:45:4e:f9:f7:8e:64:ae:
                    75:19:78:3a:9f:61:71:3e:2e:74:22:ee:d8:19:46:
                    05:38:ca:b5:82:bf:04:0a:d0:e2:a5:40:1c:5e:cb:
                    9c:cc:4c:0f:9b:ac:b3:23:50:0c:b0:f3:bf:6b:4b:
                    20:65:29:be:3f:c6:cc:7e:9b:c7:78:29:d3:4a:39:
                    cb:fd:5a:3e:d4:5e:cf:a9:85:6d:f0:ac:41:58:7f:
                    d7:5c:79:ba:99:55:fa:97:1f:24:87:6e:17:17:17:
                    31:1e:dc:eb:77:bf:d0:c9:9f:ad:49:8e:e1:0f:70:
                    04:dc:4b:fe:24:4c:89:81:4e:1f:fa:90:98:29:40:
                    3b:f8:3a:68:c2:8e:3b:7d:10:4f:60:14:03:7f:49:
                    5e:d1:ab:a5:bd:f6:ba:bf:fa:8e:ec:a7:89:54:71:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:DE:06:E3:D5:87:A3:F6:69:81:AA:3E:95:AC:50:DB:13:BE:05
            X509v3 Authority Key Identifier:
                keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4e:c4:7b:3f:33:32:3d:70:b9:03:97:87:dd:e5:61:b3:c4:
         71:12:7f:a4:ab:69:1c:cd:29:78:76:47:27:4a:da:fe:32:02:
         0f:68:15:cc:ee:1b:54:70:c4:fe:b8:c4:2b:60:14:53:f5:f6:
         a8:16:11:4c:d5:91:db:b4:ce:10:7f:ed:0d:bc:75:2a:dc:67:
         6c:97:5e:9b:37:bb:b9:58:22:ec:27:7c:5b:77:3a:3b:18:b6:
         e6:81:5a:ea:c6:ee:a9:35:27:55:c6:cb:24:9c:84:20:f9:30:
         9e:ee:a1:14:09:b9:73:83:10:10:e2:a5:e7:53:9b:0b:01:22:
         3c:a2:34:48:84:db:14:db:c2:c8:36:24:2f:6f:d9:5b:c9:c8:
         8a:64:50:d3:85:83:a9:f8:01:f7:55:4e:89:62:02:c2:26:e0:
         f5:32:46:f1:ae:81:62:35:70:26:3e:cb:63:d4:87:00:8d:66:
         a2:77:ab:6e:61:96:bf:d5:4b:6b:5e:1f:fc:85:c4:bc:1d:f2:
         ff:36:37:c4:44:f0:48:2d:a1:e2:3a:32:fd:08:dc:92:aa:25:
         f1:1c:ed:58:ec:34:9c:26:65:c5:46:b9:7a:20:de:fd:68:e1:
         67:e3:56:ac:64:c2:1b:88:c9:10:93:bb:43:84:71:25:56:f4:
         ec:21:d6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:34:56 2026 by rpki-client