Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft
File:                     20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft (raw, json)
Hash identifier:          i7iFzyZPRCv888A5CN/bDCgk5M5JSn2dwweasAdagkw=
Subject key identifier:   D3:3D:13:95:3C:43:FA:A5:5D:74:E3:E3:9B:FD:8A:57:44:52:F4:80
Authority key identifier: 20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0
Certificate issuer:       /CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0
Certificate serial:       4F3EAA1F9CB81D707FFC7CAD11DE4711652A555A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 02:11:56 +0000
Manifest this update:     Fri 24 Jul 2026 02:06:56 +0000
Manifest next update:     Sat 25 Jul 2026 05:59:56 +0000
Files and hashes:         1: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl (hash: Po4I06RzQGIGdD1x6uvcMVwKKtqv/K/oWF3NqJl8Jhg=)
                          2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: V8Sm4MJLCeArZFqOXIIvvpIosd8jOLT+tH/fFf0pEo4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl
                          rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3e:aa:1f:9c:b8:1d:70:7f:fc:7c:ad:11:de:47:11:65:2a:55:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0
        Validity
            Not Before: Jul 24 02:06:56 2026 GMT
            Not After : Jul 25 05:59:56 2026 GMT
        Subject: CN=D33D13953C43FAA55D74E3E39BFD8A574452F480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2d:e9:2e:f5:c8:c5:1f:9e:ad:81:93:21:0c:
                    33:9f:2d:da:32:ec:d6:ca:db:15:d0:63:53:61:74:
                    16:f1:1c:71:35:bf:cb:6c:5f:fe:61:6f:7c:1d:8b:
                    7b:61:27:2a:aa:cb:90:89:71:a7:65:33:22:e8:0e:
                    cb:0a:2c:4b:85:7c:85:9c:69:7c:fb:09:1c:61:2f:
                    95:90:08:72:51:b6:6a:c9:e2:c0:52:97:43:a7:47:
                    02:ab:2d:55:40:f4:0a:17:39:c9:40:4a:77:3c:1c:
                    c5:95:91:40:64:c8:68:cd:8b:fe:ba:7d:2b:bc:59:
                    c6:d8:ce:62:32:9a:d1:c7:1c:0a:39:58:57:f2:ec:
                    6b:3c:13:84:bb:71:ae:dd:2c:66:d7:e3:ac:d2:6d:
                    89:07:e0:0e:2a:6e:a1:73:21:34:af:62:9e:60:a6:
                    95:da:eb:0a:63:e9:6a:98:cf:d4:a3:da:d9:4c:2b:
                    07:99:fa:2c:e1:a2:14:4a:58:1d:55:d1:26:40:6c:
                    f0:6b:c5:cc:31:33:3f:5e:a7:f9:5c:db:30:47:f9:
                    f8:b8:ef:1a:f6:e3:0e:53:80:2f:6a:87:a1:49:4c:
                    de:32:a5:83:33:e5:ac:86:2d:9e:d9:9f:1a:04:83:
                    dd:f0:e3:11:69:b5:e6:58:23:9a:09:e5:a7:fa:fe:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:13:95:3C:43:FA:A5:5D:74:E3:E3:9B:FD:8A:57:44:52:F4:80
            X509v3 Authority Key Identifier:
                keyid:20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f5:0b:06:fa:fc:94:bd:bb:43:b0:d6:10:37:ff:74:ff:5d:
         7c:24:c9:d3:e7:8c:e6:24:a6:2c:70:ab:5c:4d:7c:10:bc:37:
         d6:d4:f9:04:1a:c7:c6:14:25:20:8a:ee:de:43:76:ff:c3:13:
         5d:91:55:e0:5c:63:2b:1a:47:f6:01:02:40:f7:5e:72:34:10:
         db:1d:58:09:93:51:93:da:59:b5:b7:70:d1:f8:97:d4:21:95:
         56:f3:bc:e2:16:5f:b7:22:c1:89:68:73:aa:c0:be:01:1a:49:
         00:c9:cc:0b:62:16:28:a6:31:df:24:86:a3:a1:e0:b6:6a:b0:
         ca:05:04:c9:02:0b:3d:6f:2f:4a:4a:f9:3a:26:41:ab:1f:c5:
         e3:b1:13:95:0a:9d:4c:85:a3:63:3f:c9:95:12:b0:27:a3:ff:
         d3:72:7c:84:1a:f1:04:50:74:91:ad:0d:c5:42:47:9d:01:37:
         44:51:7c:a4:da:82:22:40:c9:3f:07:4a:fc:50:74:21:b4:80:
         ae:ad:f8:db:de:ac:0f:04:f8:0f:11:19:03:17:b2:92:09:d9:
         c9:fd:d3:79:37:c2:ab:7f:47:f6:a2:fc:31:72:e3:68:1b:fa:
         2f:a8:bb:02:e6:28:c7:5a:f1:86:6d:c6:a1:1d:02:5e:ac:ed:
         d5:2d:3f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:27 2026 by rpki-client