Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft
File:                     9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft (raw, json)
Hash identifier:          LM+ciYmPaexP0zLJgQRFAkctWRix/DDoSfxETd3VjWc=
Subject key identifier:   29:21:63:15:8F:3B:B1:BF:0D:81:38:85:64:CC:6D:EC:46:9A:A1:29
Authority key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13
Certificate issuer:       /CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13
Certificate serial:       78836E1EA6A465AC4C2D00AEE514AF431FF58F0C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 15:44:08 +0000
Manifest this update:     Thu 23 Jul 2026 15:39:08 +0000
Manifest next update:     Fri 24 Jul 2026 16:20:08 +0000
Files and hashes:         1: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: wInMUXHOP8RJI5eoz/+Dc4x331OyQaS/P4AI/7E+Chw=)
                          2: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: PjTS4Hn+0nQcRzsQo6Ms0LRYKKTZlFXIqpYw+ixRnkk=)
                          3: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl (hash: mJIPcBRjrTn2db9BAYdO3dclOGpuvb9kqCr+tjZXE1Y=)
                          4: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: vdwdHoa0dxzBT4qxWDgRcyQiniSgsgBOI6Tm2dJ4lDY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl
                          rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:83:6e:1e:a6:a4:65:ac:4c:2d:00:ae:e5:14:af:43:1f:f5:8f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13
        Validity
            Not Before: Jul 23 15:39:08 2026 GMT
            Not After : Jul 24 16:20:08 2026 GMT
        Subject: CN=292163158F3BB1BF0D81388564CC6DEC469AA129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:77:73:3d:4f:75:03:03:18:d4:db:d9:a5:
                    28:3a:68:47:59:63:e8:c7:e5:46:65:1b:03:83:3f:
                    06:2d:65:00:09:b4:8e:cb:11:7a:b8:88:25:02:fa:
                    05:4c:e1:18:1b:64:17:f7:f8:ac:00:e2:41:62:27:
                    45:89:63:51:ea:d8:16:8d:37:46:57:9f:65:a7:75:
                    9b:7e:0f:1c:1b:ea:39:20:e6:0a:f3:a7:c0:eb:25:
                    ff:f2:27:91:d3:04:93:42:c2:d0:d3:95:01:44:6f:
                    f3:40:f3:ce:28:31:77:6d:1c:52:dd:11:98:94:68:
                    04:1d:20:24:c5:1f:1e:83:05:25:3b:e1:2e:cf:d5:
                    3b:7d:87:b2:b2:da:ad:63:5c:9b:ca:88:1a:e1:21:
                    33:fb:10:d0:7e:ed:50:62:80:ec:69:24:03:dc:9a:
                    d5:69:17:a4:4d:6d:92:1f:23:87:48:a0:57:ce:fe:
                    60:4e:7a:4b:f6:2f:4d:1a:98:39:b7:81:ee:27:8d:
                    36:df:9d:80:59:74:47:de:6b:7e:d8:54:4e:a4:e0:
                    04:bf:f1:a0:8e:68:fa:f7:d9:f3:98:9c:cd:04:ff:
                    3b:d8:9a:5e:ef:6a:99:64:ca:8d:ec:fa:c7:91:00:
                    fa:50:26:b6:fe:84:a3:9d:f2:c6:7a:7a:df:63:fd:
                    2e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:21:63:15:8F:3B:B1:BF:0D:81:38:85:64:CC:6D:EC:46:9A:A1:29
            X509v3 Authority Key Identifier:
                keyid:9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:de:7e:a3:d3:80:60:70:90:d9:74:bb:73:28:a6:57:7e:ba:
         92:50:52:c8:06:ac:14:e7:d1:d7:9e:fc:7a:22:59:f5:90:a4:
         f6:cf:bf:3c:46:39:ac:61:14:0c:ff:9b:00:dc:d7:01:d1:39:
         42:e7:f3:1b:99:0b:43:9b:fa:47:d6:f9:73:d1:bb:68:cd:03:
         d4:5e:85:d9:38:6f:9a:88:74:47:a5:36:f7:a8:2b:be:9d:75:
         6d:70:7c:95:db:4c:07:64:21:37:99:70:27:a7:ce:31:f6:4d:
         1e:ac:46:c0:74:84:00:d6:5e:43:f6:a8:54:98:64:2b:47:2e:
         99:c5:76:c5:43:f0:00:98:cd:d4:3f:97:39:32:d7:b6:99:f8:
         51:e2:65:69:cd:07:54:2f:bd:a4:86:18:e0:85:c0:77:57:f2:
         40:f3:e0:f8:e0:ba:41:99:45:32:7f:2b:64:c0:9a:48:69:19:
         3e:90:4e:38:47:03:fb:c4:d4:dd:85:a2:99:42:e6:02:c9:ff:
         82:db:8c:d0:50:d8:c6:0c:64:be:22:f3:07:69:61:0e:d0:d2:
         e6:bf:90:a4:ba:5a:0e:df:67:2d:00:92:5d:6e:bb:55:09:f4:
         a9:99:31:53:5a:a1:b8:74:b4:d7:fc:f0:c4:48:ad:e6:47:02:
         3a:bc:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:29 2026 by rpki-client