Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
File:                     9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft (raw, json)
Hash identifier:          1FN7hw8tV7C9leHuqKcsF1yPZDfvS2XfcMagyVa8e7s=
Subject key identifier:   01:B1:7E:9C:3D:2E:C3:32:84:B4:2F:4B:6C:75:65:FE:CB:99:62:B8
Authority key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B
Certificate issuer:       /CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
Certificate serial:       1645FAD858B98C7561A39AB35B03D89352635F9D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 16:30:03 +0000
Manifest this update:     Thu 23 Jul 2026 16:25:03 +0000
Manifest next update:     Fri 24 Jul 2026 20:02:03 +0000
Files and hashes:         1: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: lNPR2Tg6FsNQHU8b29t3TQ5Lu6T1+vm92/GyLs+/lXo=)
                          2: 9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl (hash: Zc2wmZ0E22DxRQIgeYFJhfMwEKFBBdUQ/1LrktwIrvc=)
                          3: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: v6dOLx0SCwjzqMjQ3ImqjGTnffSPJhWT9kStYUIxMa8=)
                          4: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: oJcDC3gbkkbl6CgR5ozKOicxGaK/b8KkIxtfAPuJSR4=)
                          5: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: aOkYTZDHg/L8yWlo8vIxFqsm7+o0K/8UpGxOwkkG7Ss=)
                          6: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: aDJ/BlhAr3ZuI6P3BU0POvE1//aOF15U+ofqLi0TcqU=)
                          7: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: rtaQaHq+P5lP9auuPcmaB5K4uqxx/eB7GaUrzPNCTXU=)
                          8: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yzlUlkzhlS0Tkdbt12yLVL6Icb64xveQ3bA5i4msJ2M=)
                          9: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: B7lLwYyGx/CkKBE8Qhv5JNipvmsoWuu5k92uqzr9wrU=)
                          10: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: VOA028A1R3RrEVD4Qi7zXJp992kxYY/J4fv4wuhxPKY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl
                          rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:45:fa:d8:58:b9:8c:75:61:a3:9a:b3:5b:03:d8:93:52:63:5f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B
        Validity
            Not Before: Jul 23 16:25:03 2026 GMT
            Not After : Jul 24 20:02:03 2026 GMT
        Subject: CN=01B17E9C3D2EC33284B42F4B6C7565FECB9962B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:fe:14:66:b9:6b:06:6d:e0:45:7d:03:4a:
                    c7:6d:e2:3e:9f:43:1e:61:52:d7:06:a9:ce:17:18:
                    35:1b:26:b2:1b:95:de:aa:d6:28:db:28:ab:42:98:
                    24:63:73:e4:dc:ae:99:36:44:20:5a:34:ec:ba:d8:
                    da:90:3b:0c:67:b7:b7:23:96:4a:55:93:06:55:4f:
                    74:26:27:9f:7f:b5:5d:97:8d:78:4f:47:c6:56:e5:
                    52:75:8d:d1:66:d2:71:18:3e:34:3f:dc:b0:45:63:
                    f7:22:4c:60:fc:da:32:79:54:24:5c:32:e9:cb:9f:
                    76:90:22:7d:cf:f8:7b:f3:3a:1c:a7:6c:51:78:67:
                    d2:9e:b8:0c:34:a5:30:f0:5d:4c:d4:b5:0e:a3:c8:
                    df:d3:c4:be:3e:21:56:09:49:ec:b4:6c:c8:31:34:
                    b8:34:4b:11:42:9a:07:05:c1:de:6a:1b:d0:28:bf:
                    37:c6:61:f1:f3:6c:df:77:ad:d9:84:d7:35:18:9d:
                    c9:dd:99:5f:db:b5:a0:55:8c:44:ac:3c:36:ca:a6:
                    cc:7c:a2:83:e4:9c:f8:b2:6a:a0:97:8e:db:26:a9:
                    8e:4e:da:a6:88:e5:b0:0e:41:e9:44:04:63:e3:e7:
                    73:32:38:6e:29:ed:70:04:f6:2b:0e:99:e4:c4:b3:
                    6d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B1:7E:9C:3D:2E:C3:32:84:B4:2F:4B:6C:75:65:FE:CB:99:62:B8
            X509v3 Authority Key Identifier:
                keyid:9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:37:95:de:cf:bd:cb:74:1b:4f:9e:e5:07:ae:d2:28:57:6d:
         1e:32:bf:b2:09:0f:25:e0:b1:3d:84:65:ad:6d:6e:56:42:ed:
         15:5b:42:bd:24:fc:88:ec:a9:21:75:bd:d1:1b:fc:42:7a:4c:
         02:18:47:19:df:0d:48:34:bd:92:65:45:fe:9f:6d:71:10:4a:
         32:1a:5a:03:b0:eb:66:a8:cf:57:7d:db:38:4d:6b:03:4e:ff:
         3d:4b:17:a6:59:df:f1:6b:ef:1d:6c:71:75:a0:89:68:31:ea:
         db:1b:05:ed:9b:1b:42:b4:15:24:f8:3b:49:4a:64:95:7a:cb:
         76:21:10:ad:16:22:2c:d1:a1:5d:5e:8f:cc:21:99:69:27:b2:
         f7:a0:87:52:4a:6c:bf:9a:7a:98:fc:4c:93:b2:5e:2e:7f:75:
         6d:53:51:1d:96:f4:52:2f:a1:ac:4c:28:87:83:50:9d:2c:71:
         51:3d:2d:82:d1:1b:1b:6d:ed:17:52:2d:26:8f:1f:83:0d:ee:
         da:ad:41:82:fd:ac:64:cd:9e:7e:47:0c:ab:8c:6c:45:c9:db:
         1d:b6:02:4a:1e:4c:7d:f0:b6:c2:c6:4b:af:d1:12:83:00:31:
         f0:6d:7a:47:85:a4:2e:dd:75:42:a7:87:98:93:55:9e:1b:4a:
         7b:b5:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:30:27 2026 by rpki-client