Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
File:                     EC59C36AB88A35CEA64B4ED019F2F05317672299.mft (raw, json)
Hash identifier:          z7Ayl9JyFENqXLKw64fIeIsDd3TonSoyJsj++f27cQk=
Subject key identifier:   90:D2:A2:DE:D1:B8:68:79:BB:78:CF:A3:C6:91:8D:29:3A:DB:80:AB
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Certificate issuer:       /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial:       40B8628E3AEBCB542623CBD9F7AE731E9CEAB31D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 12:20:08 +0000
Manifest this update:     Thu 23 Jul 2026 12:15:08 +0000
Manifest next update:     Fri 24 Jul 2026 15:26:08 +0000
Files and hashes:         1: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=)
                          2: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=)
                          3: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: AfPj1/WANHCA8ksluVDxgnesb53b+Rlio8ADTE+u1pQ=)
                          4: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: Ju2Rnafj0JXyXCFyRIYbsuCCwhT0mQqqDAAoegLW2lk=)
                          5: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=)
                          6: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: nvBOhOQVzXAnJ4HGpau+WjYJtRHl8i2975iE/qVl3BQ=)
                          7: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=)
                          8: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 57swP2LUwPdheqaXWgJ8pT9nt0r4LCH8JoFCbrhNwuw=)
                          9: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: YPwGvhjJSaspOvLgrZ3Fyf5ldBDtpaa3xSbfWjcGrDA=)
                          10: EC59C36AB88A35CEA64B4ED019F2F05317672299.crl (hash: QmrUg4tZcvZNr8QX0V0kvPiJ6vThCAjtnc5pfh+ZXk4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
                          rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 15:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b8:62:8e:3a:eb:cb:54:26:23:cb:d9:f7:ae:73:1e:9c:ea:b3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
        Validity
            Not Before: Jul 23 12:15:08 2026 GMT
            Not After : Jul 24 15:26:08 2026 GMT
        Subject: CN=90D2A2DED1B86879BB78CFA3C6918D293ADB80AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:15:2a:76:55:76:9e:76:ac:32:b8:e4:4b:db:
                    b2:3a:37:a5:5a:8c:f6:c0:f1:a5:b1:66:f3:58:0c:
                    5e:c3:bd:7b:a8:30:55:e0:3f:a9:cf:32:a3:4e:cb:
                    60:83:b8:c0:0c:5c:90:62:e5:92:13:21:0b:4d:73:
                    6f:cc:f3:03:e5:2e:f2:bf:80:f7:50:e0:16:e7:47:
                    c1:f2:c7:5b:49:52:6d:22:a1:41:e2:5f:6a:77:5d:
                    40:65:53:26:b8:1b:a0:98:32:40:92:de:bd:91:1b:
                    a7:3d:54:ad:28:4e:65:76:9e:bd:1a:05:65:8f:a1:
                    d3:40:30:63:52:89:35:3e:6f:d1:72:14:62:6d:45:
                    d4:e4:25:ee:11:d7:cd:5b:a3:cb:2d:10:19:69:f8:
                    85:59:e9:12:d6:81:a4:04:fb:f2:ce:63:d8:f3:8d:
                    5e:37:87:b0:33:26:74:1f:d2:a6:e8:b7:88:98:ae:
                    cb:4d:ae:88:c9:14:39:0e:b0:e6:ca:a7:8a:24:e3:
                    71:e2:1b:b6:fa:14:e3:30:4a:5c:de:70:15:32:62:
                    bd:98:e3:32:d4:71:58:0d:dc:cf:61:53:09:8a:42:
                    58:6a:e1:cc:31:38:89:ab:9c:60:84:a5:64:32:dd:
                    a9:79:87:7c:e0:e8:3f:ef:46:8d:80:86:d9:74:24:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D2:A2:DE:D1:B8:68:79:BB:78:CF:A3:C6:91:8D:29:3A:DB:80:AB
            X509v3 Authority Key Identifier:
                keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9f:83:02:46:4a:79:70:e3:8d:00:0c:10:c4:42:b1:d2:c0:
         45:95:58:2b:82:04:15:e9:1d:1d:2a:12:46:a2:95:0b:b8:6a:
         ed:e0:3e:93:02:2e:84:8b:5f:ca:32:f5:a1:66:88:9d:ab:5a:
         1a:76:fe:98:58:d6:00:b2:41:a0:e7:14:1a:e3:bb:d9:6d:70:
         07:0b:70:86:c1:a2:0e:6c:cb:54:3e:5a:4f:71:5a:99:15:3f:
         b2:d0:e7:ae:2d:69:0b:cc:70:d4:b4:67:70:7c:a6:43:71:e6:
         6c:80:20:c0:a7:00:3d:e4:ef:89:9f:c0:80:db:4c:f3:a1:07:
         38:bf:bb:28:fe:ea:73:68:d0:c1:db:0b:83:9d:28:4d:51:4e:
         c3:25:83:30:90:9e:f8:28:30:61:45:07:a2:c5:88:63:50:54:
         4d:f8:89:00:f2:52:15:cd:8e:52:f1:62:bf:6f:65:23:75:20:
         db:a3:f2:4f:cf:50:be:23:bb:c0:73:35:20:2c:80:4a:9a:b1:
         50:10:8d:93:89:8d:77:d3:75:4f:58:43:e3:63:17:0a:76:03:
         7b:7a:39:9d:7a:98:29:2c:3e:a2:96:73:1f:43:8b:c1:9f:56:
         1b:6b:ed:b1:f4:bb:ee:2d:40:3c:82:2a:12:8b:23:15:06:4f:
         37:29:8e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:08 2026 by rpki-client