Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
File:                     6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft (raw, json)
Hash identifier:          j/6GRhUaBHPMvqhKDPcrKxEmejGsYKoK852Mu1iTxVI=
Subject key identifier:   4F:F9:DF:11:DF:41:41:BF:7B:C3:BA:F5:77:00:FE:80:93:8E:DC:21
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       01C7FDCC6658089A8574777AC162DAFD690AEA14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
Manifest number:          76
Signing time:             Wed 29 Jul 2026 08:10:31 +0000
Manifest this update:     Wed 29 Jul 2026 08:05:31 +0000
Manifest next update:     Thu 30 Jul 2026 10:19:31 +0000
Files and hashes:         1: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: /xP/BGJ/T56GUz9rKdqDuLuvM0oUPcvbASLwBYqfNoc=)
                          2: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: rudZyii7Lfn+6okPP2nCFidqxEenNHuTRiklT0/cCEo=)
                          3: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: kJg5+UCDAgaArEK7/bYT2qXA/yuQ9gOq7vOoYhIRuNU=)
                          4: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: nlEA9xUBNBAj9ND4TVjIFUzBFmwE5L2VS2arw13QDV8=)
                          5: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: cwuInxrHcmUcjS9mdJBqkUWmxRheczWjceRV75wKsAU=)
                          6: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: yXjHOo1VGbJmJqyGKpG7QhsHY0G1S2EWqXUcTRW8WwE=)
                          7: 6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl (hash: 0D/GvzMwjhvm+A2MwWkyg6qo1Chjd6WQmUzL4IEUEn4=)
                          8: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: 5LO3t2ec+zSYnCCLyJbszIEpzPO5hPTaFRVOpZoVwb8=)
                          9: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: bcguRSTNIvY7rQWdHUJuBPCFUG/a1bSosrWujs3HsG8=)
                          10: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: q2LZg0zPA/HJmUlCZRt+sM1EA4mJwCgzRoQLJXxQSgQ=)
                          11: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: wgVvr0GfPg6coWh3Xe95X5cFnSDCPizf4FPOmRoPulE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c7:fd:cc:66:58:08:9a:85:74:77:7a:c1:62:da:fd:69:0a:ea:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: Jul 29 08:05:31 2026 GMT
            Not After : Jul 30 10:19:31 2026 GMT
        Subject: CN=4FF9DF11DF4141BF7BC3BAF57700FE80938EDC21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:b5:ed:67:15:48:fc:63:0a:c2:4e:0c:a0:
                    4d:36:89:38:48:fa:e7:d5:55:31:dd:2e:6c:26:73:
                    36:20:19:69:48:0a:39:8b:97:41:65:c8:a8:83:ab:
                    14:83:8c:c4:be:89:7d:42:a1:71:d8:2a:fe:30:98:
                    e8:56:af:82:9d:8a:cd:6c:38:61:97:2a:fb:ef:39:
                    8f:d9:ec:11:ad:2a:91:ae:27:5c:d5:22:3f:00:29:
                    b7:32:eb:12:2e:44:df:02:60:df:77:d7:f7:cf:8e:
                    62:3a:47:10:c9:07:a5:60:b9:21:bd:57:26:1b:0e:
                    5f:b0:08:33:15:85:ee:29:24:e3:7d:35:48:cf:cb:
                    d9:d5:11:b6:01:c6:ea:b0:64:cb:73:ee:0b:ea:1b:
                    9f:da:52:da:b7:80:b3:1a:0e:d2:7c:6a:2b:a9:ca:
                    b8:6e:d5:dd:ba:b3:15:d9:b4:d9:a8:5c:e7:cd:ca:
                    ed:55:82:2f:e2:8a:63:0b:e8:6e:b7:cd:fb:3f:fa:
                    4d:c5:fd:66:28:6f:1e:08:bb:be:ff:80:51:fb:54:
                    f2:0f:57:b7:a9:14:ff:73:2a:a4:d1:8a:4b:78:0a:
                    d3:57:0e:4a:dd:66:85:8d:d1:d7:a1:06:86:80:23:
                    36:0a:27:ed:e2:fd:20:08:08:57:1f:5e:fe:41:06:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F9:DF:11:DF:41:41:BF:7B:C3:BA:F5:77:00:FE:80:93:8E:DC:21
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:89:c9:8e:aa:44:12:57:33:f2:32:36:2c:ca:c8:0f:e3:f1:
         90:4d:b5:f9:d4:86:bf:7c:ab:44:bd:1c:de:4f:33:8a:5d:72:
         e6:bf:2e:a4:d4:8e:43:ce:63:00:fa:77:36:06:d2:77:2d:72:
         6e:b3:2e:d0:67:76:12:ff:72:4a:e9:0c:5d:d1:1a:1a:9d:bd:
         fa:67:fe:ac:27:ad:bb:23:8d:ff:ea:ae:9c:8f:65:e6:9a:51:
         8d:63:f7:c1:41:e6:9c:fc:43:83:ad:8a:3d:7a:19:08:e1:15:
         9a:f5:3b:49:a7:c4:7d:a7:0d:15:e2:ff:91:dc:57:44:95:54:
         94:75:c8:0d:e7:65:2d:c4:f7:04:79:1f:3c:05:06:c6:24:ad:
         20:68:62:50:4d:74:8e:3a:1c:45:af:c6:62:70:72:7c:ff:04:
         d8:44:ca:5e:6a:df:2a:df:3b:24:e5:bb:fe:f9:b2:54:92:53:
         ff:29:fc:43:01:9f:ee:60:52:4e:5b:47:13:de:54:0e:96:32:
         6a:a2:f3:b6:3a:77:44:44:1d:f0:17:c6:79:f3:7a:f4:a8:84:
         90:c7:e9:1b:96:5c:49:5b:b4:bc:1a:c2:21:d2:77:e2:75:bb:
         2d:84:e8:a5:d5:1c:85:94:92:3d:33:6c:03:09:41:e1:95:87:
         6a:e1:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:51 2026 by rpki-client