Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
File:                     6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft (raw, json)
Hash identifier:          KpU+yAplufRsk9LOlW83IYUldD5Izi6ngLbZyWHt7AI=
Subject key identifier:   3D:AA:60:50:7F:5A:AF:2B:3A:9D:F3:51:95:38:2C:8E:43:E9:F6:6D
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Certificate issuer:       /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial:       75D01F14795872869910424AE50628DC37BE234C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 16:49:40 +0000
Manifest this update:     Tue 16 Jun 2026 16:44:40 +0000
Manifest next update:     Wed 17 Jun 2026 18:21:40 +0000
Files and hashes:         1: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=)
                          2: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os=)
                          3: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=)
                          4: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: pjt/PoMD2rISkjEBbEVdFpq3Lfkti0ImQZr5UDhsxdI=)
                          5: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl (hash: dDHsIUcPRcktvox01kIn2cTdaG3FElmtz85ZQGN0zZA=)
                          6: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: S7UAzIZzLebBGoPx8HW74rT6/bn+VmPadNNYeTv3kZU=)
                          7: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=)
                          8: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=)
                          9: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: 2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d0:1f:14:79:58:72:86:99:10:42:4a:e5:06:28:dc:37:be:23:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
        Validity
            Not Before: Jun 16 16:44:40 2026 GMT
            Not After : Jun 17 18:21:40 2026 GMT
        Subject: CN=3DAA60507F5AAF2B3A9DF35195382C8E43E9F66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:41:2e:ab:3b:df:f0:56:3c:f0:ba:ae:ec:
                    51:6c:b4:56:ee:c9:85:ea:b9:05:4d:09:c0:5e:17:
                    74:2e:96:92:7b:2a:9b:1e:55:4d:9e:c3:22:64:2f:
                    53:20:79:f3:12:6a:53:9a:4e:50:1d:50:39:91:0f:
                    42:a5:72:e4:eb:d4:94:52:de:ac:65:83:9c:f5:f0:
                    d7:f4:da:7f:e2:67:43:71:d1:b1:c0:8f:61:75:45:
                    f1:f0:86:6c:55:93:8d:a8:9f:e3:eb:99:c5:cf:dd:
                    81:28:8c:07:cc:11:ee:f1:14:ee:67:2a:bc:ba:90:
                    26:69:fc:f9:3d:5f:44:ca:35:24:88:fa:c7:0f:87:
                    77:93:8c:91:7e:91:b1:ec:c4:d5:1d:80:f3:fe:9c:
                    f1:5c:b9:c0:85:44:08:0a:74:8a:36:36:19:e4:0c:
                    5e:97:80:59:e5:e7:ff:a5:c7:3a:c4:b1:1f:23:0d:
                    61:7e:72:aa:9a:a9:34:6d:5d:2f:ad:e9:f8:0c:bf:
                    d2:b4:04:59:dd:3b:6d:19:63:7f:6f:ea:1f:f4:f7:
                    0d:76:e7:cc:c7:9c:1c:a1:13:5f:18:11:5f:97:06:
                    13:ad:f2:67:eb:08:d8:7e:dc:f0:fc:a5:ae:02:12:
                    60:cc:31:cd:e1:8c:ae:2b:86:d6:99:29:61:47:ff:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:60:50:7F:5A:AF:2B:3A:9D:F3:51:95:38:2C:8E:43:E9:F6:6D
            X509v3 Authority Key Identifier:
                keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fc:7f:0f:28:9c:52:b3:bd:37:70:aa:af:93:8b:8d:28:49:
         42:db:8f:0a:df:71:f6:7e:c5:e8:cb:be:bf:68:20:b9:d6:3f:
         68:a4:91:b2:9c:a3:be:8d:aa:80:ba:5b:56:44:28:80:cd:68:
         95:fe:03:a9:af:69:a4:d9:38:e1:df:42:ac:d4:7c:6e:33:fc:
         d5:f5:1b:8d:b9:ab:25:9f:61:fe:8d:49:2d:99:70:30:03:f3:
         89:6c:cc:a2:90:22:88:6a:46:b9:cc:82:bc:cd:46:7e:b2:27:
         77:0b:8f:7c:25:4f:33:07:41:13:fc:7f:b2:c6:1b:51:b2:c1:
         08:dc:1a:00:39:7a:e1:6d:b0:6b:81:fd:89:75:66:4a:3a:ec:
         f9:5e:50:5a:d6:18:3f:5d:06:26:82:8f:51:29:08:bc:d3:d1:
         bf:71:87:89:dd:03:fa:a9:2c:03:d8:40:a1:23:b8:11:97:fc:
         02:7a:d2:2d:e4:6d:6a:bf:ec:05:72:6a:6e:e9:94:9a:dd:86:
         b2:d6:0f:5a:bb:e7:47:ce:a3:c6:6e:f9:e5:33:f3:4a:18:e6:
         2a:8e:2d:51:8d:54:ab:f0:81:32:90:1b:a9:3f:f2:5c:49:ad:
         7d:9a:94:39:67:4e:bb:54:49:65:d9:00:8a:08:e1:21:10:11:
         99:0f:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:39 2026 by rpki-client