Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
File:                     D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft (raw, json)
Hash identifier:          cMvZoSnQX0pSQz2OpDQX4P6ybA3YpTlyv/fSdqD4d6E=
Subject key identifier:   04:29:E4:6A:01:34:C1:48:C3:DA:BA:00:27:99:B8:18:08:B3:E0:C9
Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF
Certificate issuer:       /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
Certificate serial:       74505C43C4B4DB5B6AFDE1363A5E5281954A4F21
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 05:56:11 +0000
Manifest this update:     Sat 13 Jun 2026 05:51:11 +0000
Manifest next update:     Sun 14 Jun 2026 09:51:11 +0000
Files and hashes:         1: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc=)
                          2: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl (hash: ys0fWrNl8EJf7wN1k/lkfkAKWTzw8ySwtBQ0+2UdBaw=)
                          3: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0=)
                          4: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA=)
                          5: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=)
                          6: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: oeT54NjL50r7xCLxIqfzZvTu9HtL0qe2DtlLMw9OJ/s=)
                          7: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: uML5u30yWokqHzJ1SmFvpIB0jm9tfbVvuIh4MPBrSV4=)
                          8: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: QjvSUWXkehuis++c3tdVVUbDO47gQG2w6XSjtlUzYcs=)
                          9: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: tTZQRAZZ/xG34AQ1RUk/V3CgCC8lS878wnNuxBTMYiw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl
                          rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 09:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:50:5c:43:c4:b4:db:5b:6a:fd:e1:36:3a:5e:52:81:95:4a:4f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
        Validity
            Not Before: Jun 13 05:51:11 2026 GMT
            Not After : Jun 14 09:51:11 2026 GMT
        Subject: CN=0429E46A0134C148C3DABA002799B81808B3E0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:3f:4e:2e:e2:c6:5c:80:4f:45:94:a3:60:
                    62:18:81:87:8d:8b:5f:7d:42:e7:30:42:58:c9:86:
                    c9:ae:36:58:d0:80:12:be:9b:5f:6c:77:6d:67:b8:
                    80:cc:52:a9:67:ff:04:49:28:38:0b:73:2b:7a:cb:
                    4b:8c:9c:c6:d5:fa:d8:d2:19:a0:07:3b:5c:89:65:
                    dd:35:e6:cb:6f:db:58:06:15:64:93:e4:6f:32:2a:
                    19:70:cf:eb:1f:6b:da:60:18:2b:d0:8c:92:27:3a:
                    df:19:ff:05:c8:1b:81:ec:5a:cf:b3:80:d0:d4:bc:
                    ee:c0:19:38:6d:bc:c4:c9:b4:de:e2:ae:b1:35:d6:
                    fb:ca:5e:cb:d1:f5:34:4a:3f:2c:21:95:d4:aa:39:
                    36:f7:93:aa:f4:a4:91:b9:bd:76:7e:f6:0d:59:51:
                    7a:b4:4b:51:69:08:16:6e:a6:0c:59:f0:80:5d:fa:
                    7b:86:50:d8:f5:c3:e8:e3:e6:3c:38:be:b9:1f:dc:
                    a1:88:7f:23:25:f9:10:d6:0f:4c:60:3b:44:54:6a:
                    e9:a9:90:04:a8:c3:5d:c6:c9:a4:1f:3d:49:99:73:
                    ba:cc:fd:f3:26:bd:7a:2d:80:c8:ec:38:54:05:4f:
                    41:87:67:1b:b9:d5:d5:db:73:43:75:35:f1:4a:62:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:E4:6A:01:34:C1:48:C3:DA:BA:00:27:99:B8:18:08:B3:E0:C9
            X509v3 Authority Key Identifier:
                keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:94:f3:4b:82:32:f4:6b:50:22:62:c2:f1:c5:bc:94:82:57:
         42:c7:09:8e:18:9e:9c:55:c1:b1:d2:f2:45:5e:9a:4b:cb:00:
         1e:76:1e:9c:19:be:a1:3d:2b:ea:7a:f9:0c:ec:dd:2f:9d:c6:
         9e:cd:39:5b:8e:b6:a4:f0:4b:14:70:f9:a0:f6:6a:b2:72:d3:
         bd:24:a8:41:e1:a0:0e:46:24:a3:8d:d2:49:a5:e1:04:97:16:
         a5:7e:4f:eb:54:f9:e5:3b:70:a1:c5:57:19:08:6f:7c:ba:53:
         bd:36:36:8e:d3:f8:de:a3:76:75:ae:f5:0d:4f:e5:ac:02:e9:
         bc:df:b8:92:66:d4:f6:5b:12:dc:48:1c:8c:93:6b:a0:64:82:
         44:d1:cc:b6:6c:85:d4:a4:70:e7:d8:21:a2:c9:6e:24:31:f1:
         47:ab:2a:c5:ec:7d:8b:27:b8:5c:32:6d:13:a8:05:87:34:0f:
         0c:15:99:48:ff:ca:de:e2:bd:fe:7f:1c:f5:32:b9:4d:7a:9f:
         56:99:a0:b6:67:06:9a:c8:f3:8c:e7:d1:fa:61:24:13:1a:bb:
         78:1f:f8:56:22:eb:9b:41:57:25:56:b3:a6:63:ee:17:fa:21:
         83:33:d0:5d:cb:9e:15:f3:ac:fc:a8:78:59:a7:54:f7:67:bf:
         ce:0c:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:22:51 2026 by rpki-client