Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
File:                     C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft (raw, json)
Hash identifier:          9nFW6JdRcAQ8nGv6YGMaftDPp+fEA/3rvc35pqHK+zI=
Subject key identifier:   EE:31:7D:BF:2F:E2:56:65:FA:18:CA:3A:AA:F7:DC:3A:64:85:1C:0A
Authority key identifier: C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA
Certificate issuer:       /CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA
Certificate serial:       206D3CA37DD06825A0F691BB71B35A36C4E675EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 03:33:42 +0000
Manifest this update:     Fri 24 Jul 2026 03:28:42 +0000
Manifest next update:     Sat 25 Jul 2026 06:58:42 +0000
Files and hashes:         1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: RpKB88H1EeRDg7tfcTBSl+Zo5Y84iIg06W/eVC4GSFw=)
                          2: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl (hash: BuFzpRzkQN/f4nOBPkfykjpfmwwA1w/WZTgbTwLKcsE=)
                          3: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: f5TuDn3JjBtU4GdimjLsODFHOZ5ohDlcPjaFqwt/1vs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl
                          rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 06:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6d:3c:a3:7d:d0:68:25:a0:f6:91:bb:71:b3:5a:36:c4:e6:75:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA
        Validity
            Not Before: Jul 24 03:28:42 2026 GMT
            Not After : Jul 25 06:58:42 2026 GMT
        Subject: CN=EE317DBF2FE25665FA18CA3AAAF7DC3A64851C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:49:d8:f4:ce:a8:97:18:5c:d6:b3:cf:53:3d:
                    e9:18:de:4b:d2:c7:0d:85:9b:9a:ea:02:81:ae:af:
                    25:9f:f3:06:fb:0c:e2:66:9b:3e:e1:a3:a7:4c:1c:
                    25:76:e4:a9:f4:d6:ff:c5:ec:34:eb:46:7f:a2:77:
                    c4:ca:3e:6f:9b:18:e1:9d:3c:1a:96:8d:ff:a2:5c:
                    43:4c:61:15:41:14:a2:2b:1b:85:b3:1e:35:f7:60:
                    fe:13:f7:70:ac:b1:ee:04:fa:1b:de:7b:e2:26:b1:
                    22:8a:fe:c9:4b:8c:4a:5e:d8:fa:60:f1:02:cd:38:
                    55:2b:40:67:c1:07:34:db:65:76:d1:be:d7:b4:f4:
                    9a:4e:7f:09:1b:5b:59:39:88:2f:cd:48:3a:d3:07:
                    e0:53:a6:21:7d:ad:ae:5e:e9:5e:6f:0c:1f:f1:76:
                    92:b8:7b:f2:bc:fa:75:f8:86:08:2e:b6:17:2f:d0:
                    01:ce:78:fa:d3:cd:88:3c:70:12:a6:85:41:c3:e2:
                    56:8e:22:ac:f5:c9:a0:32:61:85:12:fc:42:30:49:
                    dd:36:77:5b:a8:bf:83:72:0e:39:4b:45:15:b6:9d:
                    52:ce:95:f7:10:d1:24:b6:81:71:98:ee:77:27:a4:
                    1d:82:00:b3:d4:7b:3c:b1:ed:48:6d:f2:a3:9d:1d:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:31:7D:BF:2F:E2:56:65:FA:18:CA:3A:AA:F7:DC:3A:64:85:1C:0A
            X509v3 Authority Key Identifier:
                keyid:C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:c9:43:74:a3:7d:0d:39:f6:78:74:f1:22:f5:b2:42:dc:
         ff:f9:94:40:9f:b7:a3:cf:ab:7e:4e:e9:55:28:83:72:b0:a2:
         17:35:88:31:1d:08:c5:86:9b:ff:cf:93:03:bd:34:65:6b:fc:
         b3:fb:81:09:87:26:99:38:1a:e6:38:40:35:17:77:07:5b:c2:
         87:d8:c8:68:10:43:d6:f0:f1:60:40:84:cf:bc:a3:36:18:04:
         06:1b:35:b3:2d:55:54:1c:ed:2b:3a:cc:48:ed:ad:8c:3c:0e:
         2f:42:c0:3f:f9:ad:89:60:71:3b:62:33:7b:5c:79:fc:d3:40:
         fd:f2:b3:d1:c2:ea:1b:3f:29:52:c6:94:ed:a4:9b:2a:11:c7:
         3f:6e:47:9a:37:5c:35:47:ad:14:ad:4e:83:12:07:96:6f:9d:
         b5:da:91:c9:0d:9b:3d:68:b2:5b:4f:f7:b4:de:75:cd:df:bc:
         4a:d7:17:a6:fc:72:5a:db:11:33:a2:8e:1d:1e:5e:66:20:2f:
         b5:d4:ed:04:17:ba:c4:27:7c:31:03:19:84:c2:57:3c:ae:a1:
         dc:7e:63:db:22:42:87:27:bb:f3:c0:57:7d:c8:66:3d:99:fa:
         a6:7d:aa:d0:95:6e:53:b5:66:ee:60:2e:25:e9:fa:93:3b:e3:
         e2:84:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:27 2026 by rpki-client