Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft
File:                     7521EB714EF9A5F0A697E8574714A86DCF234610.mft (raw, json)
Hash identifier:          0Y+ReuBLA831qBGzwebSrFOcUmZJV1oKrZfq03heBx4=
Subject key identifier:   07:77:0A:6C:07:1D:4C:6C:3A:10:9A:63:C1:ED:F1:FC:E4:DF:48:86
Authority key identifier: 75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10
Certificate issuer:       /CN=7521EB714EF9A5F0A697E8574714A86DCF234610
Certificate serial:       6AF80DFAF327627DE2FA31ED1577E60A09AEB92B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 09:15:03 +0000
Manifest this update:     Sat 13 Jun 2026 09:10:03 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:03 +0000
Files and hashes:         1: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: TS2p463fv/9DyZu6QnNhlvJI+JFIyXgQjG+Ob9/1Y6g=)
                          2: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: zskLNuuXyQpxVs+4KksAWAlYXKzx7CDbhiYyNpVsFrs=)
                          3: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: yffHTG+EllVLleEh6Oirz1/R0DaU0LdSs2f4Coe9+OM=)
                          4: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: dcVVKG4izCM1gb0p4eQeLHaBApqz8vGp0jvG9TGCAJ0=)
                          5: 7521EB714EF9A5F0A697E8574714A86DCF234610.crl (hash: tMNMNiKgsmAtTkA1bUaZOvzadOS1uSOukaDcwt/Q9aU=)
                          6: 3132342e3130392e32322e302f32342d3234203d3e20313431313037.roa (hash: iOYmug4IgOWAtbexlc92hDoV/tNe429g9AsNdYSsaJc=)
                          7: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: BP419rLo8u7KV+IdA+QhKzQqCTiad+JDOjmx+KPJYZ8=)
                          8: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: rQWHJknCSBXBPdquyEnbgQpik3OvzTZOMwyh2tsNM1M=)
                          9: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: c/ZF1aWYYnFDz5Gwg0w0tFfbUx8yzQQW9RzM+O5SB0A=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl
                          rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:0d:fa:f3:27:62:7d:e2:fa:31:ed:15:77:e6:0a:09:ae:b9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7521EB714EF9A5F0A697E8574714A86DCF234610
        Validity
            Not Before: Jun 13 09:10:03 2026 GMT
            Not After : Jun 14 13:01:03 2026 GMT
        Subject: CN=07770A6C071D4C6C3A109A63C1EDF1FCE4DF4886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:14:5a:c0:8f:1d:d9:43:08:3d:93:ae:2c:55:
                    7c:9d:a1:00:37:ba:ca:be:ae:59:71:0b:25:08:b9:
                    66:57:76:88:7b:ae:26:b1:cd:52:5b:4b:ad:82:15:
                    25:5c:54:72:d7:12:b5:5a:83:61:07:ab:4c:a5:af:
                    d2:a3:62:a0:0f:1f:35:2f:d9:5e:fb:78:38:8b:0c:
                    4e:78:85:99:05:8d:f5:90:27:22:c8:c9:a6:3b:6b:
                    73:be:04:33:b3:b1:92:0e:5d:0f:c8:b3:e2:ca:bc:
                    20:c2:74:5f:df:57:09:04:d5:8f:16:6b:d0:85:8b:
                    c6:d9:04:61:3d:c1:56:ab:09:04:13:6e:90:4a:99:
                    b2:0f:01:ea:c8:ec:91:2d:8f:0b:9f:f0:0d:44:58:
                    5d:07:f7:87:91:4a:01:12:41:36:58:94:59:96:1b:
                    cb:33:53:cb:da:9a:d4:d2:c9:0c:42:ea:f3:0b:40:
                    57:96:a4:db:95:bd:42:97:62:71:16:4a:71:ac:47:
                    1c:cf:5c:aa:c0:b3:33:3d:81:a4:97:c8:64:1a:c4:
                    6c:98:54:97:f9:88:06:7b:a9:f3:1b:dd:ab:37:10:
                    07:f0:9a:fc:1b:11:85:76:01:60:d8:21:f2:ac:95:
                    16:17:0e:6e:57:85:fd:2b:55:a8:7b:94:20:ff:6c:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:77:0A:6C:07:1D:4C:6C:3A:10:9A:63:C1:ED:F1:FC:E4:DF:48:86
            X509v3 Authority Key Identifier:
                keyid:75:21:EB:71:4E:F9:A5:F0:A6:97:E8:57:47:14:A8:6D:CF:23:46:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7521EB714EF9A5F0A697E8574714A86DCF234610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/7521EB714EF9A5F0A697E8574714A86DCF234610.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:91:58:16:54:5c:c8:93:58:21:c4:94:cb:f5:5c:6d:eb:
         35:f2:b9:64:a8:8c:32:f6:e8:65:55:40:7c:b9:5a:a0:be:cd:
         fc:9e:f2:da:32:c4:76:17:58:42:5b:01:87:6e:12:28:cb:01:
         e8:86:ea:6c:a1:55:75:6a:a7:eb:49:9c:f3:b9:36:c0:c0:0d:
         e4:cc:5d:2e:59:29:af:79:7d:b4:e0:c7:ce:0f:a8:e7:7a:b0:
         54:cc:de:da:fe:09:d1:9d:8e:aa:3e:5e:12:9c:69:02:f3:7e:
         4c:7f:b1:9d:c3:2a:df:ee:6f:98:9d:95:52:67:9e:2f:2c:79:
         78:94:ba:cc:76:1d:84:1c:bc:20:f8:0f:97:6d:7e:85:f5:4b:
         28:dd:44:21:b2:2a:6f:2d:02:6d:0a:c3:5d:d7:fa:5e:36:58:
         42:a8:8b:ba:de:00:c2:63:40:82:93:17:c2:63:6e:79:cb:d9:
         18:eb:06:a1:d7:b3:03:df:30:14:7e:15:0e:31:f9:7b:a1:cd:
         4f:f7:b4:8b:4b:22:62:86:ee:15:1f:af:dd:92:9e:e9:c3:59:
         99:3f:d7:8b:93:e3:3c:c7:8e:15:83:36:e6:3a:bd:9d:ab:83:
         0e:a6:f8:15:a6:de:23:77:87:fa:ce:cb:a0:45:95:74:f1:07:
         cb:6b:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:19 2026 by rpki-client