Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
File:                     5EC020FF41231134DE16F43F92714D434626A05B.mft (raw, json)
Hash identifier:          qsob9HPUVMVX7h9kX7bzh6Wvhi48V3FwYFfbcxxKFyk=
Subject key identifier:   01:A3:E2:C8:13:D9:06:B2:12:7C:BC:3B:57:FD:B3:A0:C1:64:49:B7
Authority key identifier: 5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B
Certificate issuer:       /CN=5EC020FF41231134DE16F43F92714D434626A05B
Certificate serial:       4524CA4F80AA0E56E3720CD25FF0870CF2C4A350
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 03:59:18 +0000
Manifest this update:     Fri 24 Jul 2026 03:54:18 +0000
Manifest next update:     Sat 25 Jul 2026 05:56:18 +0000
Files and hashes:         1: 323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (hash: mxf66wCv3huHr7+y00gKhj0SFSiQHrPhglnN0dDJ4UY=)
                          2: 5EC020FF41231134DE16F43F92714D434626A05B.crl (hash: 2MISITLR6ug6p0t+O5rpET5/5yEOYt1iiriDiabSNEM=)
                          3: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: 7EVkvK54oj3Ks8SpMiOp0AT2jMsnJWuUCj85YBui5p0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl
                          rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 05:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:24:ca:4f:80:aa:0e:56:e3:72:0c:d2:5f:f0:87:0c:f2:c4:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC020FF41231134DE16F43F92714D434626A05B
        Validity
            Not Before: Jul 24 03:54:18 2026 GMT
            Not After : Jul 25 05:56:18 2026 GMT
        Subject: CN=01A3E2C813D906B2127CBC3B57FDB3A0C16449B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ca:84:05:b9:71:1c:9f:18:9f:25:9d:4f:a1:
                    18:0c:d9:72:dd:55:66:24:dc:7e:16:2b:11:c3:b5:
                    a1:f5:76:52:8b:6e:19:4f:c6:7b:e6:73:e3:5e:f3:
                    b2:30:25:07:a9:dc:48:bd:17:6c:d7:3e:c4:98:7d:
                    a8:5f:0a:b4:f2:ec:9c:10:6b:6f:96:7e:63:26:ac:
                    26:81:b8:64:34:20:04:a2:bf:10:c3:86:26:2c:48:
                    f6:f1:ee:b6:c4:8f:ec:14:3b:0c:b7:81:27:87:b1:
                    df:92:65:d6:4c:73:7a:bd:3f:02:9f:29:03:c1:08:
                    b9:5a:f5:8b:a7:9a:46:4e:48:a3:ee:dd:1e:d2:20:
                    15:e8:53:4d:23:4c:bf:af:48:4d:b4:7f:2c:e2:97:
                    28:65:55:4c:4d:57:a8:7b:ec:ad:86:f7:35:fe:16:
                    5a:4a:7f:d6:e6:6f:47:55:d5:14:2d:db:96:d4:aa:
                    69:a6:56:cb:10:c4:fd:0c:ae:76:20:12:a3:74:cf:
                    08:12:74:84:22:5c:08:37:91:ff:2a:94:bf:f6:ab:
                    53:df:d3:d3:6f:ec:d6:36:0a:0c:5e:b7:96:ab:a8:
                    7d:27:ad:bb:23:04:b8:51:96:73:dc:1f:bd:47:b8:
                    b5:e4:bc:94:34:60:08:46:06:f2:3a:4f:01:e6:ea:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:E2:C8:13:D9:06:B2:12:7C:BC:3B:57:FD:B3:A0:C1:64:49:B7
            X509v3 Authority Key Identifier:
                keyid:5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:17:85:3b:3d:8d:9c:72:13:f4:fa:84:c4:24:0e:16:a6:f1:
         3f:a1:17:ae:8e:73:9f:33:45:b2:4e:2d:79:c4:68:e2:be:d3:
         19:5d:29:71:7b:19:f2:1f:ff:38:34:3f:ad:fe:bd:e6:ea:0a:
         9c:d0:31:3c:2c:36:51:dd:f5:f1:d8:fb:d6:12:0b:e8:d2:18:
         b4:bc:6d:6a:1b:ee:ae:1e:b7:ef:7d:be:f8:be:fe:b6:2c:ec:
         a9:35:2e:84:2b:fd:48:be:2e:d7:15:2f:9c:1c:44:03:26:a9:
         b5:53:85:3b:e9:4f:f1:47:ad:1c:06:05:af:a7:e7:08:e0:c8:
         c4:3e:b9:a8:02:b2:43:a3:dc:cb:04:dc:b3:23:6a:e4:43:60:
         57:1d:f3:d1:91:b9:58:ed:8b:76:fd:f3:c2:6b:7f:3b:dd:b2:
         de:c0:41:c6:5e:58:6c:b6:b4:c4:88:35:58:e3:cc:56:e3:7f:
         e5:91:d9:1e:1e:96:35:62:3f:fb:ab:7d:1e:6f:d6:36:3e:44:
         90:73:62:1c:a8:c6:cf:41:7b:8d:17:dd:5a:4b:b5:34:3b:a8:
         8b:7f:ec:1c:db:47:cc:cb:d3:03:78:7b:9c:4b:62:38:91:9a:
         b8:13:ca:f3:8a:55:c5:a5:37:82:59:03:c1:0b:0d:54:bf:44:
         92:05:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:01 2026 by rpki-client