Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
File:                     60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json)
Hash identifier:          n/N1I0+fhcgn9Qx2+7KfJR/xONsTTIP79Ez99xCaIQo=
Subject key identifier:   B7:CF:B0:0C:37:3F:2F:93:F0:2C:F7:C5:1D:ED:75:79:24:CF:AF:A7
Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
Certificate issuer:       /CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Certificate serial:       5518BF436B537461DFE6FE23D262D22B55EA3E0F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
Manifest number:          B9
Signing time:             Wed 16 Sep 2026 16:34:35 +0000
Manifest this update:     Wed 16 Sep 2026 16:29:35 +0000
Manifest next update:     Thu 17 Sep 2026 18:44:35 +0000
Files and hashes:         1: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: jJk5AOC9UMtsycdaZ6uNtWHp81XJ0rTaRws46XyoW40=)
                          2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
                          rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 18:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:18:bf:43:6b:53:74:61:df:e6:fe:23:d2:62:d2:2b:55:ea:3e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05
        Validity
            Not Before: Sep 16 16:29:35 2026 GMT
            Not After : Sep 17 18:44:35 2026 GMT
        Subject: CN=B7CFB00C373F2F93F02CF7C51DED757924CFAFA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5a:71:13:f4:2e:8d:d1:d9:df:44:1d:9c:7f:
                    38:da:39:42:30:9f:1b:a0:37:0c:cd:bf:76:9a:f5:
                    f9:67:09:5d:d5:e5:2b:98:88:de:c8:52:dd:d4:c7:
                    be:e8:93:cc:91:11:18:1a:ba:97:8c:42:08:ea:81:
                    3f:07:ae:2f:35:07:8b:4d:b4:8d:93:2a:ff:b3:c5:
                    3d:d4:37:58:2e:08:e7:6a:4b:32:ad:3f:9c:b5:08:
                    77:ad:37:f6:87:e7:7b:bd:99:c6:5f:71:10:9f:d0:
                    16:13:03:af:fd:28:24:39:5f:52:52:9d:ff:82:fc:
                    0e:9d:c1:08:68:1b:4a:0e:03:45:1d:df:8f:51:65:
                    55:05:7e:12:35:dc:00:83:5a:28:11:93:8a:22:6f:
                    7f:d8:bc:20:22:06:91:f0:7f:39:80:3f:91:45:d4:
                    38:c0:08:38:5a:3b:89:10:56:d9:c9:c2:31:8f:53:
                    5b:29:1b:0a:79:31:ab:50:ab:c5:f6:10:08:3d:4d:
                    47:67:52:32:6e:26:4e:c3:1d:3f:79:42:78:1d:84:
                    a2:35:02:0b:ce:c1:60:40:0b:81:60:d2:c5:50:54:
                    29:38:52:05:ef:5d:cd:da:58:55:61:d2:c9:83:98:
                    b0:b0:ff:f0:31:70:43:a0:3d:09:1e:3f:d2:5c:36:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CF:B0:0C:37:3F:2F:93:F0:2C:F7:C5:1D:ED:75:79:24:CF:AF:A7
            X509v3 Authority Key Identifier:
                keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a3:e3:b7:be:ce:12:e4:07:a7:81:4e:2d:87:41:b2:db:16:
         bd:fd:25:0a:8c:e5:62:e1:43:82:b2:38:69:cd:2d:7e:f2:42:
         cf:e7:df:cc:d5:66:be:d7:c4:b7:a6:4b:65:ce:ca:9e:25:e0:
         e4:02:00:e9:a2:16:cd:3f:13:c3:1b:f1:ca:9b:69:bc:f3:1c:
         09:95:54:d2:f3:88:ee:96:9e:b1:28:48:8d:cd:eb:0d:77:7d:
         4d:33:ae:b7:f0:e1:f4:b3:87:09:4d:2b:ac:7f:76:c9:7e:94:
         61:bf:03:66:7d:2a:04:a9:86:8f:d3:75:fc:91:33:56:8f:36:
         f6:9e:34:ed:c1:4f:1d:0a:bd:34:21:f5:c7:32:91:f1:e6:a8:
         64:81:3d:bf:f3:59:e8:2a:a3:01:e7:9a:4c:32:d8:17:c4:7d:
         77:ee:18:d5:aa:c0:4b:dc:23:09:f1:30:11:0c:d0:06:6b:ce:
         e3:82:43:1a:f9:79:9a:da:f2:91:f4:5c:7b:89:52:82:1a:98:
         aa:46:dd:af:66:3e:dd:83:14:fb:a3:67:49:a2:56:72:65:a5:
         06:30:a1:4e:31:cf:39:79:7a:97:98:5d:fe:57:83:71:14:39:
         e1:01:f8:ae:53:fb:64:05:d5:32:42:3d:2b:c6:64:2c:6b:fd:
         bb:e5:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:04:41 2026 by rpki-client