Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
File:                     6807307655CEA502796E1026C663C4A882D37E72.mft (raw, json)
Hash identifier:          gxSv08MRw9uXsP/zYsUXSyaiDg8CyMh0Jm62dU4GH4E=
Subject key identifier:   03:B5:B2:05:31:81:6B:D4:9E:F2:A8:1C:F2:C7:55:32:E9:5A:92:EB
Authority key identifier: 68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72
Certificate issuer:       /CN=6807307655CEA502796E1026C663C4A882D37E72
Certificate serial:       5D7B647646A41500C4D22FC975FDB3BA360DFA20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 06:39:44 +0000
Manifest this update:     Tue 22 Sep 2026 06:34:44 +0000
Manifest next update:     Wed 23 Sep 2026 07:26:44 +0000
Files and hashes:         1: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: k002Muyqc9cS3UpWT7uJHqyqbjEHyYRWloXEdO7c7yA=)
                          2: 6807307655CEA502796E1026C663C4A882D37E72.crl (hash: L3DpnJVkMitNFV1vcX3xQwdWtyikBF/tIAbJglMOEDQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7b:64:76:46:a4:15:00:c4:d2:2f:c9:75:fd:b3:ba:36:0d:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6807307655CEA502796E1026C663C4A882D37E72
        Validity
            Not Before: Sep 22 06:34:44 2026 GMT
            Not After : Sep 23 07:26:44 2026 GMT
        Subject: CN=03B5B20531816BD49EF2A81CF2C75532E95A92EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:3e:88:5a:f0:37:80:8e:68:28:cd:23:06:
                    1e:17:eb:10:c7:65:7e:91:0c:1e:55:14:fe:9c:3b:
                    bf:92:78:2b:d3:41:38:a1:42:26:19:77:05:94:07:
                    44:36:b7:97:29:b9:4c:e5:5a:b8:2c:5c:b7:2f:54:
                    bd:fc:bb:62:a2:52:9b:bc:4c:ad:81:e9:0b:a1:3b:
                    7e:e3:a6:c8:ed:21:e4:4f:61:d0:9f:6b:b6:ab:b8:
                    5d:82:9d:90:ac:42:d0:a1:a1:59:a8:ff:e3:c4:95:
                    fd:1e:57:66:c1:62:98:a6:b6:ab:c2:1d:a6:25:5c:
                    8b:b4:e6:b0:41:15:81:f4:f8:49:b9:a7:e6:38:75:
                    0b:68:b5:f3:e2:e7:87:14:d4:65:1a:39:00:15:88:
                    60:6a:5b:b0:db:5a:cd:5e:3b:84:b5:17:e2:78:7f:
                    01:5b:8d:cf:5c:cd:1e:ec:7a:d7:88:9d:ad:c8:60:
                    d6:3d:4b:f1:56:02:a5:05:f0:41:ae:0d:51:9c:b1:
                    83:96:79:d0:57:06:be:d8:a3:cb:92:9f:88:89:d8:
                    87:e0:8b:14:2d:aa:53:a3:f4:e8:a7:7f:6d:e8:55:
                    1f:66:05:4d:23:fe:f8:f7:f5:37:ad:ee:e2:71:e3:
                    03:a4:bb:1b:f5:83:a1:ef:48:02:78:e7:1c:90:4c:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B5:B2:05:31:81:6B:D4:9E:F2:A8:1C:F2:C7:55:32:E9:5A:92:EB
            X509v3 Authority Key Identifier:
                keyid:68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5a:a6:82:70:4b:4b:96:d9:3f:9f:23:21:e2:66:72:30:79:
         21:11:d2:2d:e1:50:cc:09:4c:c0:e3:30:e4:16:b3:ff:2e:2b:
         c1:10:93:38:41:65:70:68:08:8c:45:02:0d:30:c4:04:f3:bd:
         d9:c8:f8:cb:78:d7:8a:65:9a:01:2b:e4:83:2f:09:5a:bd:51:
         2c:d3:e7:7f:b5:90:ff:a1:11:be:11:cf:f5:5b:86:0b:a6:95:
         53:d5:45:16:0e:60:46:09:33:4d:70:3e:5c:43:7f:db:80:e0:
         f6:0e:c6:de:7a:fd:24:f7:f4:61:f0:53:cd:9c:5e:21:97:d1:
         51:33:7d:35:63:bb:f6:0b:8e:45:2a:1f:b4:e0:21:a9:9b:12:
         01:76:70:d8:fd:c1:a7:00:4c:c9:af:41:88:34:a5:b5:a1:d7:
         74:fa:26:3e:fd:c5:d7:d7:d1:12:b9:33:d3:60:6a:1f:d1:af:
         5c:ae:13:bf:a4:ae:59:b7:17:e2:21:96:f7:81:77:6f:21:69:
         cf:c6:8f:04:42:a6:ca:58:dc:58:33:8e:ec:7c:0c:d6:79:d7:
         fe:49:71:ee:de:f1:ad:bd:7d:74:83:47:32:d2:cd:b8:9b:26:
         db:4e:7c:bd:d5:e1:8e:c0:69:ac:4a:c1:e0:58:bb:7a:42:23:
         43:39:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:06:11 2026 by rpki-client