Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
File:                     6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft (raw, json)
Hash identifier:          MkRow0UVaLha+l5+O/SjILMDzyw1oIT3yYyBgapnd0o=
Subject key identifier:   B0:60:7F:C3:77:17:64:7A:2A:78:5F:96:C1:92:41:B6:CC:BD:BB:54
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       4D7A898C9E557C42F90EC1F533FFD6C36A5D1D3E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 10:44:44 +0000
Manifest this update:     Mon 21 Sep 2026 10:39:44 +0000
Manifest next update:     Tue 22 Sep 2026 10:55:44 +0000
Files and hashes:         1: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: /xP/BGJ/T56GUz9rKdqDuLuvM0oUPcvbASLwBYqfNoc=)
                          2: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: q2LZg0zPA/HJmUlCZRt+sM1EA4mJwCgzRoQLJXxQSgQ=)
                          3: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: cwuInxrHcmUcjS9mdJBqkUWmxRheczWjceRV75wKsAU=)
                          4: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: rudZyii7Lfn+6okPP2nCFidqxEenNHuTRiklT0/cCEo=)
                          5: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: wgVvr0GfPg6coWh3Xe95X5cFnSDCPizf4FPOmRoPulE=)
                          6: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: nlEA9xUBNBAj9ND4TVjIFUzBFmwE5L2VS2arw13QDV8=)
                          7: 6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl (hash: 1v40TrV/CZgQeNMFsCsjjpM/EGUYuQwtfNYW9CJWdjw=)
                          8: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: kJg5+UCDAgaArEK7/bYT2qXA/yuQ9gOq7vOoYhIRuNU=)
                          9: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: yXjHOo1VGbJmJqyGKpG7QhsHY0G1S2EWqXUcTRW8WwE=)
                          10: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: 5LO3t2ec+zSYnCCLyJbszIEpzPO5hPTaFRVOpZoVwb8=)
                          11: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: bcguRSTNIvY7rQWdHUJuBPCFUG/a1bSosrWujs3HsG8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 10:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7a:89:8c:9e:55:7c:42:f9:0e:c1:f5:33:ff:d6:c3:6a:5d:1d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: Sep 21 10:39:44 2026 GMT
            Not After : Sep 22 10:55:44 2026 GMT
        Subject: CN=B0607FC37717647A2A785F96C19241B6CCBDBB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:b8:4f:09:dd:6b:3f:ca:38:56:c0:4d:9e:
                    ac:20:01:c1:55:a6:e3:6b:1c:35:34:10:a3:53:8d:
                    bf:25:d1:74:99:ec:67:aa:3a:8e:0b:ad:5b:cf:5f:
                    80:8c:a4:85:78:60:6e:b3:3b:bf:45:27:e0:14:d0:
                    0d:32:30:a4:6a:78:37:c2:d8:d1:01:26:d1:01:6c:
                    5a:d6:51:0c:59:d2:24:1f:fb:48:72:1a:1d:36:f5:
                    bf:ca:d4:0c:0b:53:95:62:b2:4f:f7:ca:31:e7:ea:
                    76:a8:c5:6c:ad:5c:d0:37:aa:93:2b:49:7d:78:47:
                    a0:b4:6b:f9:d3:08:f3:12:3b:c0:cb:71:3b:20:24:
                    b5:de:24:71:4c:50:e5:90:1b:c0:af:20:5f:aa:00:
                    b4:0c:a0:75:64:a5:72:e4:33:9d:08:26:b2:02:a6:
                    e2:f8:75:70:b1:b4:f8:82:6d:b6:84:b5:9b:37:2f:
                    40:19:ec:ff:35:e9:31:9f:82:c6:90:b0:e1:e4:e8:
                    25:3b:d4:cd:e7:20:0e:f2:65:73:f8:04:11:47:83:
                    31:e4:5a:e9:6f:d6:c3:b3:95:ef:02:73:01:cb:89:
                    8b:9b:13:61:27:46:11:80:46:32:c5:9a:ab:35:49:
                    5a:d5:71:e7:f5:94:69:3a:f6:55:18:17:42:ef:98:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:60:7F:C3:77:17:64:7A:2A:78:5F:96:C1:92:41:B6:CC:BD:BB:54
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2a:45:bb:60:93:a5:00:28:2a:12:21:0d:2a:34:be:b9:36:
         ed:3a:c8:98:4a:7a:73:56:47:49:77:86:08:ff:e2:0e:62:2a:
         30:44:02:ad:c6:b9:3e:5f:39:c8:b0:dd:73:39:cd:1f:54:71:
         94:a0:75:79:4c:72:6c:d3:17:02:4c:2e:b5:97:6d:51:1e:51:
         4a:90:d3:60:0d:18:20:2c:ec:d1:55:9c:71:9c:6c:ad:9c:34:
         8e:47:40:59:cb:87:3c:8e:da:2b:ce:7c:1f:b6:de:19:6b:98:
         02:d4:61:fc:f3:24:94:8c:5b:4d:98:c2:f4:f0:d1:1a:a4:b5:
         94:cc:82:cd:0b:36:d8:46:5c:14:f1:5c:eb:ce:c4:93:1c:12:
         8e:8d:06:2a:61:9e:02:80:bb:6a:dd:af:4d:fb:b3:fb:71:45:
         fa:08:d7:ea:0a:90:11:ee:55:0c:65:0a:01:e9:df:cf:16:d7:
         e6:f9:a1:72:ef:26:78:ee:a1:93:49:fe:cd:3d:14:b9:ef:d5:
         96:2e:d3:85:68:fd:3f:fd:f0:9e:4f:67:b1:d5:ef:3a:0c:47:
         7b:b5:24:42:b7:31:27:ca:d0:55:89:82:1b:d8:ad:1c:b6:8b:
         de:c3:64:d5:ac:8d:d2:8e:4e:dc:eb:48:13:4c:ca:a6:b0:f1:
         89:ec:c6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:46:29 2026 by rpki-client