Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
File:                     60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json)
Hash identifier:          tGTQ3pgXdsEgTur6fO9d3phR+7TEBh+gGnDqw0sdmQI=
Subject key identifier:   55:52:ED:05:88:E1:A3:51:64:88:71:42:6D:7F:83:A9:8E:74:B2:5E
Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
Certificate issuer:       /CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Certificate serial:       5F0DC07439890CC2195905239F103EB6FDFB7279
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 04:47:35 +0000
Manifest this update:     Mon 21 Sep 2026 04:42:35 +0000
Manifest next update:     Tue 22 Sep 2026 08:24:35 +0000
Files and hashes:         1: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: UQ0nzSCvAxGuRkUbDfhTsqM5Q4n/yeT7KnSffmE89PQ=)
                          2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
                          rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0d:c0:74:39:89:0c:c2:19:59:05:23:9f:10:3e:b6:fd:fb:72:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05
        Validity
            Not Before: Sep 21 04:42:35 2026 GMT
            Not After : Sep 22 08:24:35 2026 GMT
        Subject: CN=5552ED0588E1A351648871426D7F83A98E74B25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:5a:f7:0f:1f:4a:d5:d9:43:7a:6f:5a:85:
                    86:25:cd:a3:df:75:24:1d:2a:81:9f:62:fe:95:0a:
                    28:81:c1:5f:f3:dd:f1:f5:67:31:ce:70:fb:b6:ba:
                    01:90:8e:a2:af:5e:fc:d6:91:2d:80:21:af:8b:e1:
                    86:f6:b1:cf:87:82:6d:12:14:b3:87:6a:74:b0:46:
                    9f:9a:bf:b9:68:12:ed:94:08:8d:ea:e3:26:51:10:
                    d5:b2:76:48:e6:86:b7:04:62:81:4a:24:0c:d9:1f:
                    3b:02:02:80:1a:38:d0:8c:7c:98:ce:c3:09:6a:f8:
                    3a:79:de:4f:6f:58:12:eb:46:99:31:c5:48:43:63:
                    29:fa:a6:d4:7d:da:a9:50:40:62:32:c6:7b:1a:13:
                    a2:b3:47:02:aa:15:e5:31:59:be:26:4a:a3:3f:31:
                    2f:75:88:8c:57:d7:7e:3d:84:60:a4:8a:f1:76:fd:
                    09:72:a5:38:b8:95:65:bd:f3:a8:a7:9b:4a:ed:cc:
                    49:5d:ae:1b:57:8d:fd:40:c4:07:17:4a:1f:dd:60:
                    ab:97:89:84:73:8f:61:d5:fe:16:50:64:c9:cb:08:
                    c6:e8:b8:16:ea:81:a1:38:37:dc:d1:91:92:80:63:
                    25:46:2a:d6:eb:cb:75:5c:15:47:46:68:34:a1:c6:
                    aa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:52:ED:05:88:E1:A3:51:64:88:71:42:6D:7F:83:A9:8E:74:B2:5E
            X509v3 Authority Key Identifier:
                keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:78:a1:5c:cf:2d:8a:a8:cf:ee:07:9b:8b:b3:0c:45:91:d5:
         64:ac:9e:88:ff:a9:ca:f7:fe:01:22:8e:cb:24:fb:f6:bc:27:
         8b:86:03:0d:1d:36:de:d7:d8:12:cd:79:32:1d:e3:d8:20:d5:
         a5:17:3a:59:5d:82:fa:09:eb:a1:94:0b:52:47:73:d7:79:35:
         9e:1b:61:2e:fc:f5:c4:4b:b2:3a:98:89:fd:0b:f2:ce:1e:4e:
         54:ac:bf:b2:a2:78:31:4e:d8:b5:f3:b8:82:a1:af:f5:d0:a9:
         0d:80:91:f5:9c:08:03:23:e7:7f:eb:66:11:c2:37:c8:e6:4f:
         7e:b1:dd:ff:da:c8:dd:99:0e:c2:62:96:60:20:35:e7:55:6a:
         b5:0d:7a:7d:ca:b8:c1:de:db:42:03:0c:bf:82:29:b9:86:e4:
         fb:d5:3a:d3:a3:ba:0a:1c:a1:95:14:71:05:f4:ae:3d:6a:de:
         ea:73:06:97:dc:37:6c:21:8b:9c:5f:f1:41:70:a7:4e:b3:48:
         14:2e:7d:30:6b:89:2f:c7:c0:b0:dc:eb:ba:e3:68:d6:65:22:
         28:12:60:37:61:15:7d:19:2d:d5:08:61:f6:03:3a:4f:23:28:
         95:c9:b3:14:e8:97:f7:76:be:aa:95:a6:0d:b3:a4:39:5c:44:
         3d:20:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:16:07 2026 by rpki-client