Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
File:                     9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft (raw, json)
Hash identifier:          9i5iaVWIxGpfuNoL/cLsLY7PHQsRV/2R3dvNX3jBavM=
Subject key identifier:   DE:13:6B:A0:2D:A1:FC:E7:DC:DC:F3:B7:C8:22:A3:57:34:6D:D5:6F
Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B
Certificate issuer:       /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
Certificate serial:       088686DA90767FF29E48FA326F528348CBBAC1F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 08:59:46 +0000
Manifest this update:     Sat 13 Jun 2026 08:54:46 +0000
Manifest next update:     Sun 14 Jun 2026 10:53:46 +0000
Files and hashes:         1: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: VOA028A1R3RrEVD4Qi7zXJp992kxYY/J4fv4wuhxPKY=)
                          2: 9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl (hash: AGY8Ie/BXfFdhAynl9pOfP79mInJYw3zLrZLBv2eLvs=)
                          3: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: lNPR2Tg6FsNQHU8b29t3TQ5Lu6T1+vm92/GyLs+/lXo=)
                          4: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: aDJ/BlhAr3ZuI6P3BU0POvE1//aOF15U+ofqLi0TcqU=)
                          5: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: aOkYTZDHg/L8yWlo8vIxFqsm7+o0K/8UpGxOwkkG7Ss=)
                          6: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: B7lLwYyGx/CkKBE8Qhv5JNipvmsoWuu5k92uqzr9wrU=)
                          7: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: v6dOLx0SCwjzqMjQ3ImqjGTnffSPJhWT9kStYUIxMa8=)
                          8: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: rtaQaHq+P5lP9auuPcmaB5K4uqxx/eB7GaUrzPNCTXU=)
                          9: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yzlUlkzhlS0Tkdbt12yLVL6Icb64xveQ3bA5i4msJ2M=)
                          10: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: oJcDC3gbkkbl6CgR5ozKOicxGaK/b8KkIxtfAPuJSR4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl
                          rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 10:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:86:86:da:90:76:7f:f2:9e:48:fa:32:6f:52:83:48:cb:ba:c1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
        Validity
            Not Before: Jun 13 08:54:46 2026 GMT
            Not After : Jun 14 10:53:46 2026 GMT
        Subject: CN=DE136BA02DA1FCE7DCDCF3B7C822A357346DD56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:07:fe:67:c0:8e:d7:84:29:d4:91:39:16:
                    39:f5:08:87:67:70:7a:4e:26:d5:52:42:5d:1a:6a:
                    1f:7a:01:69:3d:48:ff:f2:d0:3a:1e:a2:59:b6:2e:
                    8f:86:6b:62:b2:d5:8f:87:74:da:eb:01:37:11:c0:
                    c4:4e:95:5c:2c:45:d0:08:fe:15:fd:f9:52:e4:2f:
                    02:40:bc:e6:7e:f4:97:c0:51:2d:2c:e5:78:84:4f:
                    d9:9c:af:3e:b3:fa:bd:5e:2a:de:1c:36:90:78:47:
                    e3:10:eb:ee:8a:5a:b8:be:c0:4a:d8:ee:c1:ba:58:
                    ef:2b:7e:2e:b2:6b:f5:72:94:7d:74:63:c2:36:f6:
                    49:da:9f:6c:f1:a1:61:d5:9b:45:a8:90:b1:21:75:
                    da:45:f8:42:d2:62:18:a3:32:4a:fe:42:71:fb:ec:
                    2c:19:99:85:ef:17:7e:24:fc:57:f4:b3:1e:d0:e7:
                    b4:b4:04:2f:f0:1f:31:e0:8f:a7:ce:5f:c5:ad:88:
                    da:ac:93:c9:af:39:96:df:b1:1c:af:d2:d5:b8:ac:
                    aa:c8:e7:da:e8:65:1d:e6:fd:74:5c:e8:ab:6e:9a:
                    d8:b9:9b:ab:c5:9f:28:34:ab:26:cf:bf:5f:67:33:
                    e6:b4:5c:96:ed:ee:b5:45:0f:4f:74:c6:83:46:f9:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:6B:A0:2D:A1:FC:E7:DC:DC:F3:B7:C8:22:A3:57:34:6D:D5:6F
            X509v3 Authority Key Identifier:
                keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:44:2a:a0:be:cf:b3:39:ea:3d:88:bd:eb:de:a9:1b:1b:
         23:e3:c0:ba:05:5d:60:84:d2:62:e0:7a:3b:a4:a9:4c:47:85:
         c7:c4:45:44:e8:e6:0e:25:af:cc:f7:00:ed:f1:04:da:66:b5:
         cb:42:07:46:d7:0d:58:7f:02:d5:4f:32:99:33:98:1e:ea:39:
         fd:55:f2:29:46:39:24:d5:54:45:46:91:e4:db:a3:42:e1:99:
         c6:b5:b9:53:46:51:1b:eb:03:6f:1a:b9:88:0f:c5:09:4e:56:
         68:3e:57:d8:8d:cf:0a:26:97:f6:93:3c:3d:6f:fe:0b:99:da:
         f9:d9:e2:a4:60:22:8d:19:c7:3a:c3:c5:11:60:a3:94:22:40:
         ac:9a:d8:c3:29:10:f0:59:6e:e3:fe:da:75:b8:20:61:1d:90:
         15:bb:88:13:3c:59:06:14:7b:63:18:79:f8:cb:02:34:7e:e8:
         8f:a2:37:a6:c7:74:30:10:43:8c:34:47:cc:1a:36:dc:88:cc:
         c2:8e:de:59:1d:68:38:6f:e1:2b:87:53:bb:e6:3d:63:64:c7:
         80:21:de:56:3e:fc:20:bc:69:aa:1a:d9:68:4a:4a:92:84:0e:
         2a:86:ad:be:c7:d7:e1:da:a0:7f:27:5f:3a:f5:90:1c:8d:ef:
         10:2d:38:10
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCIaG2pB2f/KeSPoyb1KDSMu6wfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTczMDZD
Qzg4REEwQjAeFw0yNjA2MTMwODU0NDZaFw0yNjA2MTQxMDUzNDZaMDMxMTAvBgNV
BAMTKERFMTM2QkEwMkRBMUZDRTdEQ0RDRjNCN0M4MjJBMzU3MzQ2REQ1NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuAf+Z8CO14Qp1JE5Fjn1CIdn
cHpOJtVSQl0aah96AWk9SP/y0Doeolm2Lo+Ga2Ky1Y+HdNrrATcRwMROlVwsRdAI
/hX9+VLkLwJAvOZ+9JfAUS0s5XiET9mcrz6z+r1eKt4cNpB4R+MQ6+6KWri+wErY
7sG6WO8rfi6ya/VylH10Y8I29knan2zxoWHVm0WokLEhddpF+ELSYhijMkr+QnH7
7CwZmYXvF34k/Ff0sx7Q57S0BC/wHzHgj6fOX8WtiNqsk8mvOZbfsRyv0tW4rKrI
59roZR3m/XRc6Ktumti5m6vFnyg0qybPv19nM+a0XJbt7rVFD090xoNG+XqZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3hNroC2h/Ofc3PO3yCKjVzRt1W8wHwYDVR0j
BBgwFoAUnFjBxq+7W2bGQGlKmFlzBsyI2gswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmUwZjkxNjMtM2U1YS00ZWZhLThiZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZB
RkJCNUI2NkM2NDA2OTRBOTg1OTczMDZDQzg4REEwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QzU4QzFDNkFGQkI1QjY2QzY0MDY5NEE5ODU5NzMwNkNDODhE
QTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi
ZDktNGFjNGJjNjMwNDE0LzAvOUM1OEMxQzZBRkJCNUI2NkM2NDA2OTRBOTg1OTcz
MDZDQzg4REEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJx7RCqgvs+zOeo9iL3r3qkbGyPjwLoFXWCE
0mLgejukqUxHhcfERUTo5g4lr8z3AO3xBNpmtctCB0bXDVh/AtVPMpkzmB7qOf1V
8ilGOSTVVEVGkeTbo0Lhmca1uVNGURvrA28auYgPxQlOVmg+V9iNzwoml/aTPD1v
/guZ2vnZ4qRgIo0ZxzrDxRFgo5QiQKya2MMpEPBZbuP+2nW4IGEdkBW7iBM8WQYU
e2MYefjLAjR+6I+iN6bHdDAQQ4w0R8waNtyIzMKO3lkdaDhv4SuHU7vmPWNkx4Ah
3lY+/CC8aaoa2WhKSpKEDiqGrb7H1+HaoH8nXzr1kByN7xAtOBA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:17:31 2026 by rpki-client