Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
File:                     E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft (raw, json)
Hash identifier:          yXAJNp6KtQ/sBlpuz0Hd9RTIG36Id2pCA2SABmNpB40=
Subject key identifier:   60:14:C2:25:BD:8D:C4:4F:5B:8E:47:B1:83:38:DC:C8:21:02:96:46
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       2DEEE0E6DCC8835812E0EE55EF72CF09ED55C49C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 01:15:40 +0000
Manifest this update:     Fri 24 Jul 2026 01:10:40 +0000
Manifest next update:     Sat 25 Jul 2026 03:01:40 +0000
Files and hashes:         1: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: phcDv0m0vLlfwZ99qeKbMtyh63ijZFKiTdhh4MVincM=)
                          2: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ho4hOFufXidWAYsTbOliD6cEtUCuHGtc5gpjUTGtn7w=)
                          3: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: 0O4aswxD1VoxCc8I8JRXFhna+2fhOQAti4akwG9PjgQ=)
                          4: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: v44LsT6qMPli0zPJF9qTEG8AjfBqu7Oywt77FQr+HWc=)
                          5: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl (hash: TBQsLsPEMnwhogTxNk0V3Tht9WUkxTSrGKA4wwoM+hM=)
                          6: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: m1pNwOSLl0bdCga72bgV0UjJBtOBSgU1ellU74iVk3k=)
                          7: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: M9jyn5/cfkiIh8r7xaktGDoS2J9kM31RBGKJ46gBojU=)
                          8: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: E6gLrMvPbF2DgnqL5izEh9JlZeBZOXfgDDhLttXgRCM=)
                          9: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: Sd3fhLkfAzIYKIa+lxI8//LD+Sqt+jk5hVCJVdmO8ro=)
                          10: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: PekXXJ/q55kTEO5kx0CRU0xx2H+12J366upyeQ1nZA8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ee:e0:e6:dc:c8:83:58:12:e0:ee:55:ef:72:cf:09:ed:55:c4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: Jul 24 01:10:40 2026 GMT
            Not After : Jul 25 03:01:40 2026 GMT
        Subject: CN=6014C225BD8DC44F5B8E47B18338DCC821029646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:62:1c:45:2a:10:3a:1d:99:2e:22:26:d6:13:
                    37:bb:b6:b5:21:91:7b:de:87:82:47:a7:0d:f6:c3:
                    92:ca:02:63:27:dd:c7:7a:53:cc:73:82:31:70:8e:
                    5a:92:ed:72:9d:54:c0:9f:42:4b:c9:46:4f:ad:b0:
                    74:67:c9:b3:b6:e4:a0:21:78:d4:73:9d:c5:5c:c4:
                    0d:4a:a3:31:a4:c2:9f:89:1e:11:64:ed:fc:a0:50:
                    f7:4e:5b:4e:bb:8c:ae:c8:f7:4c:17:9b:6a:f3:d0:
                    1e:a8:ab:c4:e7:0c:8e:f9:dc:8c:9f:cd:bf:bf:31:
                    b8:4c:f0:d8:73:23:dd:a3:38:c1:15:b1:4d:4b:28:
                    9b:07:c3:0f:8f:c2:3b:32:8a:33:9f:71:03:ec:b2:
                    d9:75:ae:41:c3:67:51:48:f1:f1:90:9e:f8:12:61:
                    97:8c:25:36:ba:72:73:01:08:bb:b1:9d:12:24:51:
                    1e:97:55:d2:f8:6e:1d:57:84:ef:54:1b:df:45:19:
                    8a:61:3f:e1:73:a3:12:d6:29:30:37:eb:d2:f7:00:
                    7e:40:5f:ee:b8:a5:77:aa:fd:7c:7f:9a:2d:cd:a4:
                    b6:35:f8:1b:1a:88:fa:58:38:0b:70:b6:2e:40:9d:
                    80:25:b7:06:60:94:27:11:11:ed:cd:61:fc:fd:d2:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:14:C2:25:BD:8D:C4:4F:5B:8E:47:B1:83:38:DC:C8:21:02:96:46
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ce:f6:5f:f5:20:1d:9f:a7:5f:46:7c:1c:cb:92:6c:1b:de:
         bf:d9:f5:2a:d7:d8:4d:a1:ed:b2:1b:ff:c3:63:0b:2e:a2:36:
         32:5c:ac:df:79:4d:1b:34:e5:96:22:62:fb:29:54:d8:8a:86:
         70:68:4b:33:84:c9:cb:12:df:a1:a6:c1:ca:5a:9c:af:ab:25:
         78:68:4d:5f:bc:a1:11:fc:c2:37:0f:a9:38:ca:15:0d:c5:4b:
         de:9c:48:ae:28:4d:87:d9:10:e6:60:dd:c6:c8:60:bc:59:49:
         d1:aa:01:1f:89:f7:06:94:82:ba:f7:a9:28:e2:a4:9a:ec:f8:
         44:c7:fb:36:e9:42:7b:8b:18:70:ff:02:4e:b5:8b:21:24:db:
         4b:80:53:d2:9f:66:54:f8:4a:df:b5:99:65:5d:4a:ee:59:8c:
         e5:e1:ef:25:3a:62:c7:ab:03:ee:15:05:5c:43:d8:89:b8:f6:
         ee:2d:d3:82:31:ba:7c:83:0d:38:00:df:48:4c:e1:9e:00:a0:
         64:5a:d2:ac:85:48:bb:98:1d:d5:79:16:47:9a:26:9f:36:b3:
         10:ae:41:cc:87:48:7c:85:cb:ea:79:8a:a4:45:68:55:61:f2:
         59:d6:da:8a:fc:b4:3a:91:c4:cf:10:d9:ce:ea:f9:b3:dd:b0:
         71:1e:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:14 2026 by rpki-client