Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
File:                     D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft (raw, json)
Hash identifier:          dgmd1R9lZOtojIL2FXR5lcIkRIQnsgT2ycxplhHMTlM=
Subject key identifier:   FE:14:7A:92:C7:AE:66:92:CB:4B:C5:17:30:F3:3C:FC:BE:8E:2E:76
Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF
Certificate issuer:       /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
Certificate serial:       6E9433C03F28A03F61CB86EC647177E224402693
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 09:36:40 +0000
Manifest this update:     Thu 23 Jul 2026 09:31:40 +0000
Manifest next update:     Fri 24 Jul 2026 10:07:40 +0000
Files and hashes:         1: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl (hash: x0w7ef+TcP450fgLWOABdM9lauo+oRuRlew38axWDGw=)
                          2: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=)
                          3: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: QjvSUWXkehuis++c3tdVVUbDO47gQG2w6XSjtlUzYcs=)
                          4: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: uML5u30yWokqHzJ1SmFvpIB0jm9tfbVvuIh4MPBrSV4=)
                          5: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: tTZQRAZZ/xG34AQ1RUk/V3CgCC8lS878wnNuxBTMYiw=)
                          6: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0=)
                          7: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA=)
                          8: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc=)
                          9: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: oeT54NjL50r7xCLxIqfzZvTu9HtL0qe2DtlLMw9OJ/s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl
                          rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:94:33:c0:3f:28:a0:3f:61:cb:86:ec:64:71:77:e2:24:40:26:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
        Validity
            Not Before: Jul 23 09:31:40 2026 GMT
            Not After : Jul 24 10:07:40 2026 GMT
        Subject: CN=FE147A92C7AE6692CB4BC51730F33CFCBE8E2E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:62:37:8b:48:23:db:49:82:5c:bf:e8:0b:
                    e8:d1:be:a8:40:56:d8:57:50:50:74:97:d8:03:3d:
                    7b:3e:5c:69:6f:21:84:b2:ec:7b:87:66:4b:10:9b:
                    44:2d:0b:a8:0c:b5:e1:62:a7:ab:91:79:65:2a:9e:
                    21:4a:fb:e8:86:e5:a5:f6:ba:1c:9e:78:a3:22:a9:
                    a4:29:4b:26:27:06:85:4b:7c:9a:32:c1:e8:65:e9:
                    bd:17:97:ca:1d:b3:90:38:46:68:0d:26:5b:ab:7b:
                    7e:3e:f4:70:19:d8:0b:05:50:94:ca:41:6c:2b:bd:
                    67:a4:c2:96:da:70:c7:aa:6f:2f:19:52:c3:24:d2:
                    aa:5b:bb:32:3e:af:2b:ca:b2:ec:70:7e:7e:89:f8:
                    6d:0a:9e:e9:97:67:86:cd:97:4f:ae:42:cc:68:86:
                    dd:be:e9:fd:54:3b:0f:1c:ef:d1:64:af:fe:33:34:
                    bd:f2:f8:a4:8f:11:cb:55:a7:ed:23:55:06:0e:aa:
                    b2:b5:eb:73:6f:ab:22:25:ed:2f:6a:e9:6e:4f:a2:
                    18:16:51:72:cb:d9:7d:74:4c:ea:8a:90:98:f1:f4:
                    42:0c:98:fd:42:9c:43:b8:1a:ff:39:bd:71:77:2e:
                    f8:c4:13:fb:ec:28:61:3a:cc:a5:06:08:c2:c4:e4:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:14:7A:92:C7:AE:66:92:CB:4B:C5:17:30:F3:3C:FC:BE:8E:2E:76
            X509v3 Authority Key Identifier:
                keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:51:34:71:06:58:b3:01:53:fb:8e:95:49:b2:e4:64:92:fe:
         2b:2c:99:f1:94:91:4a:93:dc:a1:92:7f:22:06:2e:84:5c:1c:
         98:c2:e6:51:02:c7:fc:fe:56:8c:d0:e9:6f:0a:d1:5d:f9:52:
         64:6d:b0:19:29:98:b2:95:53:e4:75:7b:6c:bb:58:a9:42:d5:
         6a:b5:c9:94:2d:e5:f2:37:7c:99:3e:af:1b:81:7b:2a:24:c2:
         83:9a:39:d4:ca:3e:de:ee:65:e4:a8:b7:44:ec:85:9e:06:7b:
         95:da:25:9d:c7:ad:ab:69:c6:f7:df:9f:86:ab:53:35:54:bf:
         0f:10:ef:67:aa:99:05:3b:40:cb:48:b7:89:c0:b9:a6:94:0b:
         bf:60:17:8e:35:a9:ee:c1:db:2f:09:2f:78:1f:b5:72:a9:4b:
         8d:d4:cb:5e:6e:d8:25:ec:f7:d1:de:07:5f:83:61:5e:26:3b:
         bf:9d:0e:6d:b0:5d:e6:be:88:67:c5:ed:5c:79:3e:37:cf:8a:
         6a:1a:8b:11:f6:b9:c9:a0:ff:e6:e6:70:67:cc:d8:31:76:cb:
         bc:3b:b2:f2:d8:06:97:29:56:6f:19:44:9b:72:d6:e8:7c:5a:
         7f:38:9b:13:76:4c:9d:9d:62:04:41:98:66:c1:47:58:f7:2c:
         04:7e:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:09 2026 by rpki-client