Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
File:                     AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json)
Hash identifier:          DXP93+RhK4gI/LJByEzVRs5f6bQdReW/aiAgip87Oic=
Subject key identifier:   D5:18:D3:CB:56:08:BE:F7:21:9C:DE:9B:1D:C4:6A:1C:A1:23:D7:7E
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Certificate issuer:       /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial:       3DCF7C0915F30325DF3EC5F2AA0497897ACE936E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 05:31:32 +0000
Manifest this update:     Thu 23 Jul 2026 05:26:32 +0000
Manifest next update:     Fri 24 Jul 2026 08:01:32 +0000
Files and hashes:         1: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=)
                          2: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=)
                          3: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=)
                          4: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=)
                          5: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=)
                          6: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=)
                          7: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=)
                          8: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=)
                          9: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: x2e6hMvYOMbDbFtrUhcmcQkLCsNGBL//r3cctDANnLA=)
                          10: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=)
                          11: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=)
                          12: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=)
                          13: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
                          rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cf:7c:09:15:f3:03:25:df:3e:c5:f2:aa:04:97:89:7a:ce:93:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
        Validity
            Not Before: Jul 23 05:26:32 2026 GMT
            Not After : Jul 24 08:01:32 2026 GMT
        Subject: CN=D518D3CB5608BEF7219CDE9B1DC46A1CA123D77E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:97:a2:dc:b3:4e:00:31:3a:93:f1:3d:35:24:
                    5f:d8:65:65:50:c9:68:25:5e:aa:13:31:1f:8b:ec:
                    0d:a4:c3:86:c2:8e:08:83:a4:7b:31:40:14:10:0a:
                    f1:4e:f7:da:17:9e:99:f9:c2:3a:d6:09:30:d5:81:
                    c7:58:a7:61:29:74:31:d2:11:a2:ab:3e:a8:75:d9:
                    e5:cc:92:d3:79:18:18:d9:80:4d:5e:b0:26:37:44:
                    c4:45:d0:77:56:3d:79:ff:f5:38:33:7b:ea:9a:2d:
                    fe:f6:80:c9:3a:55:98:8b:3c:78:55:65:30:1e:a2:
                    70:88:71:22:d8:e7:3e:0a:2a:d0:72:bb:4e:9a:96:
                    63:10:99:d5:59:ef:2a:91:c0:80:72:7c:e2:85:c8:
                    a3:4a:b8:04:d8:0e:e9:71:b2:7c:aa:41:c5:91:b2:
                    5e:fa:e7:ae:d0:f5:e3:36:3a:e2:d7:3f:39:48:ec:
                    0a:d3:3a:13:c1:c6:7c:ab:31:9f:e0:23:45:67:f6:
                    20:dc:58:4d:9e:7f:95:c0:73:7a:3e:88:1d:d3:8b:
                    bb:dd:a7:53:35:3d:ed:70:17:65:28:bf:c3:78:a7:
                    1c:6a:d0:aa:f3:dd:59:90:8e:e6:10:54:60:47:41:
                    fa:ed:eb:67:ca:fb:bc:98:fe:bd:79:f8:e9:c9:c1:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:18:D3:CB:56:08:BE:F7:21:9C:DE:9B:1D:C4:6A:1C:A1:23:D7:7E
            X509v3 Authority Key Identifier:
                keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:71:7c:19:ff:80:0c:5b:6c:b1:9f:11:5f:99:42:c7:75:29:
         e7:a3:e6:8a:f5:e6:3e:55:8e:2f:c2:15:b8:60:1a:98:76:5a:
         59:89:e4:e3:0e:67:80:3a:b8:8e:b4:2b:6c:2a:5e:61:4d:e4:
         33:c7:6f:2c:9d:96:a6:b7:da:52:3d:aa:0a:b3:3c:87:77:5b:
         db:61:45:19:f2:b7:38:1a:4c:32:25:06:10:b6:91:4b:bf:59:
         9f:fc:e6:7c:61:42:bb:82:1f:47:59:70:e5:2a:d8:aa:4f:ac:
         34:6c:f3:7e:55:f0:b9:d1:1e:c9:12:b3:0a:33:13:aa:9c:a0:
         8b:ce:a2:31:43:a3:80:16:e3:5e:7f:29:1b:60:ee:b8:85:32:
         e6:10:4c:48:fa:17:08:5c:9f:f0:a5:37:60:3b:06:dd:20:d5:
         3a:21:59:af:fc:78:1a:50:39:d2:3d:15:e4:b1:c8:ea:b8:fa:
         03:4f:6e:61:f0:2e:ef:1a:85:46:fa:5c:b2:94:d4:90:c6:c5:
         1d:f6:bf:90:a2:b2:9e:9b:17:17:0c:e7:2b:6c:02:ae:08:5d:
         90:de:c9:7c:89:76:9d:e1:6c:25:5e:5a:af:b6:5f:e0:76:6d:
         9a:21:f2:78:17:0a:57:1d:d9:8b:45:52:3f:40:65:93:37:00:
         0b:1c:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:12 2026 by rpki-client