Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
File:                     6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft (raw, json)
Hash identifier:          GZndPpE3PscKBHmG/Ii8gMyVLFQ+NOQgPdPGLjM9wiA=
Subject key identifier:   69:3B:16:50:95:A1:00:AC:C7:99:82:9C:E5:67:27:08:4D:33:B2:36
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       129DE137B5102D3FC08B9C84FF9BD033AE0A8C7D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
Manifest number:          C0
Signing time:             Tue 22 Sep 2026 19:05:06 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:06 +0000
Manifest next update:     Wed 23 Sep 2026 20:20:06 +0000
Files and hashes:         1: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: cwuInxrHcmUcjS9mdJBqkUWmxRheczWjceRV75wKsAU=)
                          2: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: rudZyii7Lfn+6okPP2nCFidqxEenNHuTRiklT0/cCEo=)
                          3: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: 5LO3t2ec+zSYnCCLyJbszIEpzPO5hPTaFRVOpZoVwb8=)
                          4: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: yXjHOo1VGbJmJqyGKpG7QhsHY0G1S2EWqXUcTRW8WwE=)
                          5: 6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl (hash: Fv3N5Yv7Br7HgyxWF4sLwvjxyCj6tV70rYU4rR1//IE=)
                          6: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: /xP/BGJ/T56GUz9rKdqDuLuvM0oUPcvbASLwBYqfNoc=)
                          7: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: bcguRSTNIvY7rQWdHUJuBPCFUG/a1bSosrWujs3HsG8=)
                          8: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: wgVvr0GfPg6coWh3Xe95X5cFnSDCPizf4FPOmRoPulE=)
                          9: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: nlEA9xUBNBAj9ND4TVjIFUzBFmwE5L2VS2arw13QDV8=)
                          10: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: q2LZg0zPA/HJmUlCZRt+sM1EA4mJwCgzRoQLJXxQSgQ=)
                          11: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: kJg5+UCDAgaArEK7/bYT2qXA/yuQ9gOq7vOoYhIRuNU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 17:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9d:e1:37:b5:10:2d:3f:c0:8b:9c:84:ff:9b:d0:33:ae:0a:8c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: Sep 22 19:00:06 2026 GMT
            Not After : Sep 23 20:20:06 2026 GMT
        Subject: CN=693B165095A100ACC799829CE56727084D33B236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:21:21:ae:2c:60:1b:de:0b:d5:fb:3c:3f:a3:
                    bd:fd:8e:f9:9c:77:46:3f:94:9e:a6:98:f9:c0:08:
                    ff:10:8b:b5:74:b2:a0:f9:b2:65:9f:b3:14:57:0a:
                    d4:93:b0:d9:67:80:bf:39:35:49:46:38:3e:7f:25:
                    db:af:64:d4:02:aa:7f:9d:9f:8a:51:a1:02:47:a6:
                    34:84:23:ec:90:c9:6e:a0:30:c5:d0:26:67:bf:53:
                    04:d1:c8:af:cb:00:14:34:49:80:fa:c4:43:51:7e:
                    29:a6:28:2b:35:e6:09:46:af:e7:9b:4b:27:b3:0f:
                    d1:fe:de:ff:b9:f5:6b:1a:0e:f9:67:57:3d:df:79:
                    fb:a3:42:68:80:dd:6f:3e:d6:57:7a:0a:c5:dd:b5:
                    fe:2e:69:e3:f2:8d:45:86:28:16:58:7a:b0:cf:6b:
                    5f:fe:fe:7b:c5:b5:3e:d8:55:d6:50:8f:53:dd:e4:
                    08:3a:8a:45:ba:67:76:3b:0b:07:63:43:e9:37:49:
                    1f:ee:ac:43:cd:c0:98:30:85:8f:6c:67:72:ad:d0:
                    86:a5:e8:0e:ba:8f:5b:a0:45:66:23:78:15:e0:23:
                    2d:f5:d1:61:de:ac:8e:10:47:a0:41:50:3c:07:3c:
                    a3:8c:15:7a:0a:64:36:b6:a4:80:05:2b:f6:eb:f8:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3B:16:50:95:A1:00:AC:C7:99:82:9C:E5:67:27:08:4D:33:B2:36
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:14:6c:48:dd:65:dd:b3:ed:3d:aa:a7:85:2e:19:4b:ad:a4:
         7f:0e:db:be:46:79:1c:9c:24:4e:f2:31:4b:34:2a:4b:97:2c:
         e3:2a:70:ea:d6:16:51:f6:53:58:52:76:a3:bc:ee:64:98:47:
         68:b4:ae:00:c6:fb:e7:7f:dd:21:c5:d2:03:cc:36:cc:14:3a:
         28:68:a4:d9:07:0d:b4:3a:d7:fa:57:43:d6:0e:d7:43:50:c1:
         35:3c:34:0e:f9:f3:f2:3b:6f:e0:fb:6c:08:af:96:a8:b1:a9:
         31:91:f5:37:c3:00:38:cf:2e:09:98:dc:de:32:0d:92:13:2c:
         ca:b9:01:fe:33:a5:af:b1:b3:d5:2e:11:08:5e:d5:f1:b8:48:
         8c:9c:49:7e:dc:83:33:20:57:8e:38:2a:bf:83:f0:e5:11:f8:
         84:32:cf:83:0c:d1:7f:5b:77:ba:43:74:5b:3b:b0:1a:28:c0:
         a6:4b:a5:d1:d2:63:07:a3:63:b4:ac:94:26:d9:d4:ed:c1:22:
         63:a0:8a:88:09:6b:57:3a:a9:91:2b:dc:6f:95:e1:96:7d:8d:
         90:37:16:af:eb:2c:9e:9f:56:ee:7a:9e:83:87:86:da:bf:a3:
         13:c0:77:09:b5:aa:14:f3:a6:f3:f0:bd:cf:e4:5e:11:58:56:
         a5:de:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:25:22 2026 by rpki-client