Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
File:                     6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft (raw, json)
Hash identifier:          vkSrXvD26qSd9r7lxS8KTlq3vZdQgKVl1X9RFzu5uRw=
Subject key identifier:   15:7D:87:E2:FF:30:A3:6C:9D:C7:50:0E:AF:9B:3F:30:26:6D:30:46
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       1450E156E4CD42027887487A1FE2470962F7ED7A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:56:33 +0000
Manifest this update:     Tue 12 May 2026 22:51:33 +0000
Manifest next update:     Thu 14 May 2026 01:46:33 +0000
Files and hashes:         1: 6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl (hash: Nm1tRqK7UVNH5WEDsMXvLjvk/+sUvW9wkqsJvJvCFX4=)
                          2: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: /xP/BGJ/T56GUz9rKdqDuLuvM0oUPcvbASLwBYqfNoc=)
                          3: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: rudZyii7Lfn+6okPP2nCFidqxEenNHuTRiklT0/cCEo=)
                          4: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: cwuInxrHcmUcjS9mdJBqkUWmxRheczWjceRV75wKsAU=)
                          5: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: nlEA9xUBNBAj9ND4TVjIFUzBFmwE5L2VS2arw13QDV8=)
                          6: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: 5LO3t2ec+zSYnCCLyJbszIEpzPO5hPTaFRVOpZoVwb8=)
                          7: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: yXjHOo1VGbJmJqyGKpG7QhsHY0G1S2EWqXUcTRW8WwE=)
                          8: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: q2LZg0zPA/HJmUlCZRt+sM1EA4mJwCgzRoQLJXxQSgQ=)
                          9: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: bcguRSTNIvY7rQWdHUJuBPCFUG/a1bSosrWujs3HsG8=)
                          10: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: wgVvr0GfPg6coWh3Xe95X5cFnSDCPizf4FPOmRoPulE=)
                          11: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: kJg5+UCDAgaArEK7/bYT2qXA/yuQ9gOq7vOoYhIRuNU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:50:e1:56:e4:cd:42:02:78:87:48:7a:1f:e2:47:09:62:f7:ed:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: May 12 22:51:33 2026 GMT
            Not After : May 14 01:46:33 2026 GMT
        Subject: CN=157D87E2FF30A36C9DC7500EAF9B3F30266D3046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:c6:82:c2:6b:71:b1:e6:3c:03:34:c0:13:
                    28:85:a6:ae:7d:5b:0a:60:e6:8d:dc:e4:76:88:da:
                    45:d3:6d:e3:33:9b:93:55:c0:8c:3b:28:4d:bd:44:
                    5a:af:83:b2:2d:33:0c:cb:17:cb:56:dd:30:3e:13:
                    c1:75:84:4b:94:c4:e4:de:2c:47:08:10:13:fb:13:
                    f1:03:13:da:c2:78:91:43:30:2e:1d:35:e6:bb:45:
                    14:2e:c6:c6:7b:f4:cd:56:44:ee:41:cf:cd:7c:02:
                    a8:3f:0a:16:ac:5e:32:30:3c:eb:61:56:74:e7:e3:
                    f5:08:7c:c6:d5:ed:a4:54:ff:52:44:ce:9a:01:8b:
                    a1:d9:71:c1:91:9c:a0:d7:15:d6:29:bf:61:7b:19:
                    39:e5:28:fd:7c:dd:d3:9b:dd:60:97:53:77:4d:cf:
                    d1:b1:46:cf:48:40:32:d1:33:58:0f:d6:cc:c7:b6:
                    47:63:ec:37:ac:d6:05:1f:a9:ad:03:a3:a0:bd:01:
                    dd:e6:99:02:24:54:e3:8c:da:0f:e4:47:c0:e6:31:
                    48:36:13:f6:88:85:01:17:63:58:82:5c:e6:1a:33:
                    e3:07:1f:e1:fd:ce:6c:88:67:bd:ad:3c:3a:ae:cd:
                    6b:09:c6:87:47:5d:15:3d:4f:06:e7:91:12:d9:c1:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7D:87:E2:FF:30:A3:6C:9D:C7:50:0E:AF:9B:3F:30:26:6D:30:46
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a8:93:68:c3:f3:f2:f1:27:b0:aa:04:67:c9:21:15:29:29:
         b7:3b:3f:74:16:2a:7f:88:d4:7c:e3:1e:81:8f:90:f0:c4:2c:
         21:1c:bd:4e:20:33:ab:7b:a8:fe:aa:c0:0d:90:84:0e:09:43:
         fa:df:3b:8f:c8:07:16:4f:e3:96:25:4e:c8:bd:30:56:49:5d:
         ca:c9:b4:b2:0a:2a:4c:ea:b2:e0:ca:9b:20:54:33:62:c5:c6:
         18:cd:d1:ad:13:70:6e:57:26:27:d3:af:4c:6b:90:40:a7:e4:
         2e:f2:dd:58:95:7b:16:0c:dd:20:6b:5c:95:bc:54:35:eb:74:
         47:ea:5b:37:12:fb:84:66:db:33:b8:88:2a:d2:3e:c3:50:f0:
         70:10:e4:08:5f:21:35:fd:c0:c7:cb:ac:1f:d1:de:f7:e4:5c:
         85:c7:fe:cb:ad:fb:22:b2:ee:52:fa:fb:f6:0e:91:9f:b5:9c:
         6a:f6:84:28:a2:0c:5b:71:05:40:6d:1a:37:d0:78:3f:df:1d:
         10:f9:95:ef:8e:e7:fd:7e:c5:6e:0b:df:fc:62:92:db:28:c3:
         b2:bf:de:01:17:f4:f2:28:8c:ef:ad:ee:34:b4:7d:07:07:eb:
         df:68:67:13:df:41:46:34:29:00:3d:b0:19:3c:c7:68:09:ca:
         cc:05:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:29 2026 by rpki-client