Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
File:                     6D171A25D57FF823724FB6208343D200F64CBBB9.mft (raw, json)
Hash identifier:          ZPosbum54xcavp3NBdYogh+BgCh+8YJCGWIBfU2AntM=
Subject key identifier:   2B:D4:4D:CA:CF:91:3D:E9:9F:81:5C:94:5F:C7:1F:B3:12:CA:F5:ED
Authority key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
Certificate issuer:       /CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Certificate serial:       657C2252DF9684F4BFDB5FAFCD84F3CD3075725F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
Manifest number:          75
Signing time:             Tue 28 Jul 2026 14:54:54 +0000
Manifest this update:     Tue 28 Jul 2026 14:49:54 +0000
Manifest next update:     Wed 29 Jul 2026 16:39:54 +0000
Files and hashes:         1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: opRYiyX8Gzxcov3p6XrBWNKwC4F/IpDzv8/YLsBUDfE=)
                          2: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: 2UjxxTGC1nNXBGbq1J0Vw32Q3bb9jyytfhNHGdS8EJk=)
                          3: 6D171A25D57FF823724FB6208343D200F64CBBB9.crl (hash: KtmQvOLc1YFu21Rw63jW7RwAXG9zgc+UJUiaLOUJI94=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
                          rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7c:22:52:df:96:84:f4:bf:db:5f:af:cd:84:f3:cd:30:75:72:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D171A25D57FF823724FB6208343D200F64CBBB9
        Validity
            Not Before: Jul 28 14:49:54 2026 GMT
            Not After : Jul 29 16:39:54 2026 GMT
        Subject: CN=2BD44DCACF913DE99F815C945FC71FB312CAF5ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:47:26:81:c3:d0:90:46:b0:24:4b:8f:01:
                    d8:17:20:37:60:97:22:da:52:0e:b4:d4:5d:77:81:
                    4d:fb:b0:e2:b1:68:26:3a:28:fb:b1:8a:4a:17:1c:
                    e5:40:3c:a3:26:b2:2e:eb:45:1c:9d:de:50:40:a8:
                    a4:84:50:2a:34:ae:0f:d8:44:0b:44:84:c4:7a:0c:
                    ac:ac:7a:2f:05:2a:1a:40:5d:0f:28:53:ae:43:85:
                    8a:6b:7b:cf:cd:db:f7:f1:71:ca:a2:fa:27:1c:07:
                    79:54:ee:29:9a:3e:8d:e4:3b:92:59:62:ca:d4:2a:
                    46:bb:9c:b9:25:10:ff:6f:ab:34:cd:b5:b2:31:01:
                    d5:10:b4:2e:aa:64:85:79:c8:e1:2e:aa:55:8a:d2:
                    07:67:94:1f:f8:e7:26:be:a8:7a:5f:75:4c:98:25:
                    43:9e:7b:ff:af:ed:a4:89:be:02:9f:ec:b2:b1:e1:
                    a3:e3:e9:e4:a6:ef:da:e7:79:43:ae:50:c8:a9:d1:
                    df:88:2b:f2:e4:a2:14:8a:21:2b:0d:6b:f2:3c:c5:
                    37:7c:fd:da:70:46:ee:7f:fb:9b:89:24:0b:35:05:
                    a9:e9:a6:aa:1a:76:ac:28:58:16:1d:42:01:8c:7e:
                    96:f7:fa:fe:df:5c:f3:8d:6e:be:fc:1e:47:06:97:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D4:4D:CA:CF:91:3D:E9:9F:81:5C:94:5F:C7:1F:B3:12:CA:F5:ED
            X509v3 Authority Key Identifier:
                keyid:6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:55:f0:6c:53:a9:a7:42:46:40:28:15:f9:5d:ed:53:be:4f:
         4b:9e:d4:01:c6:40:2c:dd:ad:b7:20:a8:1f:a8:1e:e4:d6:9f:
         44:4d:07:bb:58:e8:fe:24:25:bd:28:cb:fc:f7:6a:83:36:f4:
         8e:94:30:01:76:e7:a2:38:eb:2a:40:39:0b:41:9f:21:ba:8c:
         c5:16:87:8a:89:fc:b1:ab:61:4a:00:6b:cb:d6:63:87:c2:f5:
         f6:b7:fe:ab:a9:f2:a4:e0:16:64:c4:78:e8:f4:1a:d2:7d:78:
         07:25:48:fe:c2:2f:bc:20:6b:00:7d:1a:75:ee:be:e7:e6:3b:
         6d:30:92:d9:67:89:73:68:45:25:01:4a:6e:a6:eb:9e:a5:26:
         c6:e9:94:11:3c:ef:40:62:e3:30:ca:ae:25:9c:b5:73:ef:82:
         c5:c6:f3:0c:b6:e0:18:41:ff:97:4e:8c:72:1e:08:65:5c:db:
         49:88:34:13:f0:bc:31:47:ca:f0:ee:c9:51:3c:fe:6a:fd:76:
         14:b2:06:08:b3:ca:01:9b:f9:76:c8:fe:f0:e0:b9:41:20:f2:
         af:c0:9d:5e:d8:23:ee:df:8f:21:3f:d6:b1:61:8b:4e:12:7f:
         15:7e:4f:b5:27:2b:2e:a3:e9:c1:8d:f0:9f:27:1c:7a:6f:52:
         54:d5:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:06 2026 by rpki-client