Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft
File:                     6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft (raw, json)
Hash identifier:          gZvjMEmfrJhthjQbCP0V+ku4Im4d721RVHaH7/Gq5gA=
Subject key identifier:   D7:87:11:90:50:42:BD:0B:4C:31:58:59:38:31:04:19:15:5D:4C:B9
Authority key identifier: 6F:52:B6:F5:7C:8A:41:C8:D4:72:9A:32:13:AC:A8:CD:7F:6F:41:FD
Certificate issuer:       /CN=6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD
Certificate serial:       35E1ED5D39F9D7506D23A100C81710306F4ACBE8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft
Manifest number:          0106
Signing time:             Sat 14 Nov 2026 19:59:36 +0000
Manifest this update:     Sat 14 Nov 2026 19:54:36 +0000
Manifest next update:     Sun 15 Nov 2026 22:38:36 +0000
Files and hashes:         1: 6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.crl (hash: PBvQ81H8z9EL+i3Lim1+0ZR5r+hwZYLmKX6C9JxILBw=)
                          2: 3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa (hash: eGIvYDK8j1a468VtNW5nDUnb23Eu4VoycgMpA7/Jmsk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.crl
                          rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 22:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e1:ed:5d:39:f9:d7:50:6d:23:a1:00:c8:17:10:30:6f:4a:cb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD
        Validity
            Not Before: Nov 14 19:54:36 2026 GMT
            Not After : Nov 15 22:38:36 2026 GMT
        Subject: CN=D78711905042BD0B4C31585938310419155D4CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:fc:e9:e9:2a:3f:8a:d8:f2:c6:5b:eb:c7:
                    d2:f1:62:12:71:dd:61:e6:7e:86:74:c9:e8:74:a1:
                    1b:9c:59:d6:b3:f7:be:fc:b3:c1:69:49:0d:79:02:
                    88:c5:16:db:72:ad:89:27:e8:94:6b:2b:6d:b3:be:
                    38:b5:4d:d1:d5:6e:5c:5f:0b:f4:ba:d3:53:e5:87:
                    f3:ed:85:b1:12:6b:1c:4e:69:f8:ab:10:d2:36:75:
                    49:b9:c9:3f:c0:79:79:72:66:37:7f:e7:81:0e:d9:
                    d3:57:83:4c:1a:66:e2:36:53:bd:59:82:dd:df:6d:
                    df:eb:2e:12:57:f7:99:87:e5:93:bb:2b:03:37:32:
                    d6:18:26:1f:29:5e:1a:79:5a:63:05:78:23:b2:e9:
                    df:4c:21:9d:07:0b:b1:9b:10:9c:9b:7f:c3:75:31:
                    35:20:64:aa:f6:f8:5f:9c:00:0b:91:60:82:c9:db:
                    8f:8f:a7:26:6b:86:14:74:16:8b:8c:b7:08:c2:74:
                    bc:9b:e3:69:be:fa:04:33:6b:f1:42:be:d0:8b:95:
                    c4:79:bc:45:3a:a2:4e:71:13:d0:6d:c5:a4:c7:03:
                    a4:17:01:82:5c:c8:48:e9:b1:11:13:bf:63:a6:e7:
                    85:dc:be:3a:8d:f0:95:e0:0a:d1:5b:5d:8a:68:e2:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:87:11:90:50:42:BD:0B:4C:31:58:59:38:31:04:19:15:5D:4C:B9
            X509v3 Authority Key Identifier:
                keyid:6F:52:B6:F5:7C:8A:41:C8:D4:72:9A:32:13:AC:A8:CD:7F:6F:41:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/6F52B6F57C8A41C8D4729A3213ACA8CD7F6F41FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:da:84:3e:42:32:25:fd:55:f4:59:bb:52:3c:64:5b:22:
         ad:7f:2b:9c:68:ba:44:d4:03:cb:de:44:55:32:66:c4:1d:20:
         3c:43:43:d8:a6:8d:e6:a8:84:90:a8:2e:cc:78:d4:5c:8f:12:
         46:1e:6c:32:c9:54:e9:13:1a:d1:0e:83:b1:ff:2c:b7:ae:cd:
         9c:f3:d4:26:99:c2:07:e2:da:6e:2e:71:38:50:29:5d:6d:99:
         e9:10:fa:27:97:45:06:04:5b:48:9b:08:da:5a:41:f2:52:33:
         4a:26:7b:c8:03:29:62:29:36:27:b9:e3:48:df:80:2f:87:e4:
         19:6d:c6:e5:3e:48:19:18:67:40:ba:9c:8d:1b:de:4e:16:ed:
         84:47:89:92:6c:e7:11:f5:22:81:b7:a2:57:61:b8:96:6d:3b:
         79:fb:59:eb:ac:d0:36:6a:36:f8:7b:1d:01:29:d1:00:9e:8f:
         a5:e0:28:80:01:65:9a:46:26:78:33:59:f4:af:e0:ac:af:48:
         a8:ec:4c:09:fd:f7:86:cf:56:61:33:70:52:b7:17:06:ea:8c:
         d3:44:ab:c7:5e:f8:03:b1:29:7f:a9:58:92:42:5f:31:8a:95:
         e4:f9:b2:82:ed:a7:e9:bf:b4:91:1e:fb:be:ae:de:19:63:cc:
         5a:af:88:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:12 2026 by rpki-client