Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
File:                     7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft (raw, json)
Hash identifier:          Ia2akZyUaMgxNXyAvCGrDVJ3GcNZ8MXtY3WCxrSgaY0=
Subject key identifier:   E3:DD:D5:B1:59:AC:6C:F8:FF:1B:6A:33:53:E5:6B:72:90:02:FB:0C
Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20
Certificate issuer:       /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
Certificate serial:       0A71CD41E2BFA1034386DD1B8ED6FCA70F493303
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 03:07:57 +0000
Manifest this update:     Sat 13 Jun 2026 03:02:57 +0000
Manifest next update:     Sun 14 Jun 2026 05:18:57 +0000
Files and hashes:         1: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl (hash: 2WMFfqLuS/Jn7ni6REv9QagZHGJ81T9hJbgkabZ+QCA=)
                          2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: WgEvnA7HrzP4zMt539LVlI9Pa+Gm1+otpgLRC+JlvSQ=)
                          3: 3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa (hash: naJE/Bidj2O+YOMcboAw9DP7KPCUYJEXAx9uQDGJprM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl
                          rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 20:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:71:cd:41:e2:bf:a1:03:43:86:dd:1b:8e:d6:fc:a7:0f:49:33:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
        Validity
            Not Before: Jun 13 03:02:57 2026 GMT
            Not After : Jun 14 05:18:57 2026 GMT
        Subject: CN=E3DDD5B159AC6CF8FF1B6A3353E56B729002FB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:da:b8:15:65:b0:29:93:11:da:e5:07:48:
                    90:2b:d5:9e:9c:93:03:9a:f2:d6:a1:db:12:b8:b0:
                    ee:eb:a7:d2:0d:46:f4:6c:20:4f:9e:65:ae:78:c2:
                    44:64:dc:d1:a5:8b:b7:a1:5d:e2:09:a2:08:17:6c:
                    c1:01:15:5d:58:8a:ec:aa:64:44:6b:6c:ee:44:7b:
                    11:a4:76:41:46:e2:95:d7:78:7d:a7:e0:36:c2:d3:
                    20:cc:c8:81:0e:b5:65:e2:db:27:bb:97:84:3e:d8:
                    dd:6e:bc:83:31:14:db:45:f1:a2:58:38:9e:10:d6:
                    7b:9c:dc:af:4c:10:7b:f3:d1:a3:57:fc:b9:32:1b:
                    6b:2b:5d:4a:88:f9:d9:76:fa:c3:c8:57:86:7e:f7:
                    ad:3f:95:c1:13:f6:77:e0:a6:e1:0e:a6:4a:ea:34:
                    42:3d:86:29:0f:76:70:33:4a:4d:ad:ba:54:c9:4f:
                    94:81:3c:a8:57:50:ea:4c:6f:41:01:1f:45:ca:66:
                    9f:24:8f:24:18:4a:51:5f:25:d1:78:7f:31:3e:2f:
                    e5:f9:f8:1b:7d:6b:76:65:23:b0:4b:4d:6e:a2:80:
                    78:bc:62:42:a9:63:43:32:14:c6:d2:87:28:04:57:
                    31:bb:b6:e6:56:65:a0:ef:ff:50:66:1f:52:4c:07:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DD:D5:B1:59:AC:6C:F8:FF:1B:6A:33:53:E5:6B:72:90:02:FB:0C
            X509v3 Authority Key Identifier:
                keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b4:45:97:0e:85:cf:d0:15:e5:65:91:f5:5b:80:27:d3:5f:
         18:38:79:14:0d:fd:f0:7a:1b:1b:00:6d:e3:41:a5:62:1f:8e:
         22:b4:b0:58:ab:74:cc:4c:eb:36:d8:78:b9:89:e3:25:8e:9c:
         3c:fb:cd:66:2d:1d:35:c2:10:7f:95:4e:15:ff:67:11:b0:2a:
         39:cd:68:24:b9:ba:30:1a:f5:04:7b:91:79:ae:ce:42:28:8e:
         94:54:65:1e:4c:45:14:a7:c9:10:05:1d:e4:64:dc:e6:b6:80:
         b9:39:3d:0c:90:98:0f:28:3b:8b:13:45:36:ec:9d:6a:eb:36:
         42:de:a6:a2:8f:1c:1b:44:d8:0e:6b:aa:16:ca:be:9d:88:dc:
         3f:df:4b:8d:3f:6e:e3:c0:67:88:91:27:07:c6:61:e1:30:c7:
         91:1c:c6:4c:6d:42:4c:35:41:8f:40:8c:f6:f2:a4:0e:a8:d7:
         60:4e:ce:74:6e:f7:1d:38:30:c6:01:f2:39:93:7e:22:2c:44:
         8e:56:6a:78:70:db:b5:43:e1:b5:4c:cf:e6:dc:0c:6c:b7:27:
         30:6b:07:31:5b:ac:70:b3:c5:d7:42:d2:41:b7:80:5d:93:5b:
         0e:78:af:37:65:25:54:eb:3c:4f:36:fb:3e:89:28:35:5e:4f:
         f5:07:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:43 2026 by rpki-client