Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
File:                     60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json)
Hash identifier:          Jev2lBcEwCFoJr1CEy8n7yI4CQnk/hAc70MBtykdjoU=
Subject key identifier:   64:23:BD:D9:FC:33:B7:DE:8D:9F:F3:9D:DC:BC:B2:04:28:8F:1F:C4
Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
Certificate issuer:       /CN=60E799376F38EB181976A659060E6D998B4DB2D3
Certificate serial:       7ED27C241D3B8D4133A5C874A2F0534DF574CCDF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
Manifest number:          EC
Signing time:             Sun 25 Oct 2026 21:03:02 +0000
Manifest this update:     Sun 25 Oct 2026 20:58:02 +0000
Manifest next update:     Mon 26 Oct 2026 21:23:02 +0000
Files and hashes:         1: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: QzSfzBYmqtz4iPPc1ZovFOjxack3dVdL/EPO08vIx3o=)
                          2: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=)
                          3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=)
                          4: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
                          rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 21:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d2:7c:24:1d:3b:8d:41:33:a5:c8:74:a2:f0:53:4d:f5:74:cc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3
        Validity
            Not Before: Oct 25 20:58:02 2026 GMT
            Not After : Oct 26 21:23:02 2026 GMT
        Subject: CN=6423BDD9FC33B7DE8D9FF39DDCBCB204288F1FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:36:e4:9a:c7:c0:1a:4c:82:7b:1c:81:d4:
                    28:8d:37:49:31:7b:f0:46:41:ab:aa:af:13:16:3a:
                    a9:2c:bc:ce:77:2f:c6:c5:31:9f:ca:87:88:cc:2c:
                    ed:5e:3f:ce:0b:66:28:d2:de:37:22:c8:49:f5:a3:
                    81:12:43:20:d4:d9:36:c7:f7:f3:f5:af:c5:c0:f2:
                    76:8e:af:82:d6:5f:1a:ce:3a:94:70:84:d9:8d:3b:
                    4a:3e:bd:56:08:32:76:55:2d:2b:53:1d:9a:97:75:
                    ea:c8:2e:f5:b8:01:c9:d1:60:40:17:d6:7b:42:65:
                    9a:c4:be:be:3b:8b:f6:17:f2:67:54:dd:05:31:9a:
                    5f:8c:c5:eb:19:43:b3:cd:e9:5f:4c:cc:22:ee:ba:
                    96:b4:7f:5a:88:88:6f:5b:24:5b:0b:40:c0:e4:ac:
                    7c:ce:d9:b4:55:f5:92:8e:b0:f2:f0:c2:0e:6c:a2:
                    46:dd:63:f0:0f:08:b6:3e:5b:3e:03:0c:61:f4:9e:
                    d0:8b:88:dc:d9:ee:55:be:e2:cb:33:f1:79:82:21:
                    55:77:c8:db:da:05:3b:d2:3b:87:5a:4a:79:58:bf:
                    04:02:18:4c:6b:a7:a1:dd:22:84:4d:94:62:d5:f3:
                    29:9f:8f:76:be:74:9b:74:b6:b9:ba:ec:b2:e2:ab:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:23:BD:D9:FC:33:B7:DE:8D:9F:F3:9D:DC:BC:B2:04:28:8F:1F:C4
            X509v3 Authority Key Identifier:
                keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:59:a8:f1:1c:b1:58:3e:62:b7:ef:28:a2:86:11:a8:e3:23:
         c1:d7:3c:a3:ca:0e:7b:03:29:e0:7a:d6:6a:ec:65:7e:a9:14:
         0e:37:f1:db:3e:df:83:75:b0:2a:cb:69:a5:e9:d7:ce:4c:03:
         46:5a:b6:68:7f:f3:3f:62:cd:21:58:73:59:2a:7f:4c:13:c3:
         7d:e8:8e:76:2f:d0:a7:ec:a8:37:46:c3:be:f3:15:05:0b:9a:
         fd:3d:3e:b8:03:b6:4e:04:eb:06:f2:a4:be:c2:0c:e6:12:d0:
         cc:fb:98:74:e9:0b:52:cd:18:17:18:d7:0e:47:a6:b8:37:35:
         70:4f:a0:3c:70:f8:63:6a:c3:6f:a3:c2:0f:9f:5f:e4:77:66:
         4b:af:43:86:20:10:fb:38:bb:3f:d5:5d:70:34:08:2a:e3:98:
         7e:07:96:72:ce:3c:be:e9:e3:bb:e4:ea:49:f2:6b:a4:4a:34:
         39:b1:ca:30:fc:01:7a:19:2a:5a:9d:94:3f:ea:21:1c:07:ad:
         15:45:9e:2d:08:c5:dc:bf:0a:b7:fb:f9:99:45:41:21:05:ba:
         9f:89:3f:49:91:8b:e7:66:53:7b:8c:d8:63:ee:95:15:a9:63:
         57:ef:d3:2e:99:ef:25:60:2b:ff:2f:7e:ba:72:6e:54:f7:1e:
         10:f4:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:00 2026 by rpki-client