Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
File:                     906CD1832E095FD864326D9340C3360CE2E04D88.mft (raw, json)
Hash identifier:          xXVF79C6cxCvTAElR7K6bENl3XXK2vtxKiNi4pEJbIM=
Subject key identifier:   B5:56:1B:52:DC:2B:0C:16:B8:D9:5E:A5:F0:99:DB:F2:69:69:5F:90
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       6E84168C9B8DFC3F5A51B2BA985CC6887E491521
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
Manifest number:          70
Signing time:             Fri 24 Jul 2026 10:52:41 +0000
Manifest this update:     Fri 24 Jul 2026 10:47:41 +0000
Manifest next update:     Sat 25 Jul 2026 10:58:41 +0000
Files and hashes:         1: 3138322e34382e3137322e302f32342d3234203d3e203436303330.roa (hash: Yai10k7mfc36oSbam/+tt3MhIgvsdyGdsbNufFy+++s=)
                          2: 3131362e3231322e37362e302f32342d3234203d3e203436303330.roa (hash: J+EGvFPD67LFXGQZEHfVWDkOrWmqXhH9UPZC8CcEyic=)
                          3: 3138322e34382e3136312e302f32342d3234203d3e203436303330.roa (hash: aA2PRrfzpM7G6vMr09KAyWMRPmTA4TQcAHLLZIN3rO4=)
                          4: 3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (hash: o9EKVmFR1SvOj9uTbB2OlxRWlCxTxBe1nFco2QLJ8gE=)
                          5: 3138322e34382e3139302e302f32342d3234203d3e203436303330.roa (hash: wwLLX5QwOXj8WIt4dR7Y6UuHuuR7pT2z8l/3xL/x9i0=)
                          6: 3138322e34382e3137342e302f32342d3234203d3e203436303330.roa (hash: 9EIhETWWjW1dZSmzJuION9agY2xrl3P3+FsQS+Eeaz0=)
                          7: 3138322e34382e3138332e302f32342d3234203d3e203436303330.roa (hash: UGbDMfBesxO5/EEF+JrapKZzclHkwuQF79qZ/AxYM8I=)
                          8: 3138322e34382e3138312e302f32342d3234203d3e203436303330.roa (hash: 2Ix9NBX4ryTwqueIaz6deDkrg5ibNpli+8/f+eL7h/o=)
                          9: 3138322e34382e3137382e302f32342d3234203d3e203436303330.roa (hash: 18ON4ArCTP+lfrAOcIUbJ7NgSJlxjIjAeKAx8615vRA=)
                          10: 3138322e34382e3137352e302f32342d3234203d3e203436303330.roa (hash: 5T8Tor9uEyt7xupZTf9YjNdQa3WiJhFlyyfkYzVReeM=)
                          11: 3138322e34382e3136372e302f32342d3234203d3e203436303330.roa (hash: d6Y5uYZP91y+eB3UDXZIOMOBcAWU0tFndBdXQKLT93k=)
                          12: 3131362e3231322e37332e302f32342d3234203d3e203436303330.roa (hash: IJ1gl0sL1RWrdcu45xJfEOPZ3S24w9hNHw27+5W3EfU=)
                          13: 3138322e34382e3138362e302f32342d3234203d3e203436303330.roa (hash: 0jFA4bTcIReYiFePWq4UpaLmoZT+NXzEuKJPz4tjPhs=)
                          14: 3131362e3231322e37372e302f32342d3234203d3e203436303330.roa (hash: F6CH1xWOW04b9AWH9hOzpC9sPtP3FUKuSlUMhrOcMFU=)
                          15: 3138322e34382e3137362e302f32342d3234203d3e203436303330.roa (hash: 4anjPKb7dXOuM/Ubgl9czTBsQlokGVQ9YcUxyhwp+mc=)
                          16: 906CD1832E095FD864326D9340C3360CE2E04D88.crl (hash: W/Fh8VKAvYw1RGY7x0f0cptJrdOIskSSf6ln2Pg+BuE=)
                          17: 3138322e34382e3137372e302f32342d3234203d3e203436303330.roa (hash: AB/+vqxGjG+WUGNrWInFpg+QqvDIp89T4SFZCCScCf4=)
                          18: 3138322e34382e3138342e302f32342d3234203d3e203436303330.roa (hash: DZQzCrIgtUXS6Vb+eF76haovEcz46KiCQaKT5Azbp5Y=)
                          19: 3138322e34382e3138352e302f32342d3234203d3e203436303330.roa (hash: B/kblNkQ3ms1SzQMO/SpWc7KjkRSnbXvWp8KTyp1kwA=)
                          20: 3138322e34382e3136362e302f32342d3234203d3e203436303330.roa (hash: 2D0T0jFXIOTwpKsYTX89X6+Gi1/+sOAN5iJ3Wcaskhg=)
                          21: 3131362e3231322e37382e302f32342d3234203d3e203436303330.roa (hash: df8xcJtq0OjCMROhoKXLPGgNOi+tmSvnEinNpF80Ac0=)
                          22: 3138322e34382e3137392e302f32342d3234203d3e203436303330.roa (hash: tPLdls9+EYZXd6ZrhIRMSY3IobhJMxdyCJJTVoTUXQ8=)
                          23: 3138322e34382e3136322e302f32342d3234203d3e203436303330.roa (hash: ZqAYiu/koAeNsoyjhjEI/IMs3ALOlSSQoYQ1BRd+P1g=)
                          24: 3138322e34382e3136342e302f32342d3234203d3e203436303330.roa (hash: ZoVbl1Ej5vOkXGYFcM3GgFWF5vBfmm2YepIHJBqDbQM=)
                          25: 3138322e34382e3136392e302f32342d3234203d3e203436303330.roa (hash: 4YrgDfVD0BXsVITQ1qM6LdwihWuqC7JjlQdVH1myE2c=)
                          26: 3131362e3231322e37322e302f32312d3234203d3e203436303330.roa (hash: 58v6IS1MSPKg2yYeVDyyuTvIzqpTnW0JbX79eRAkar4=)
                          27: 3138322e34382e3139312e302f32342d3234203d3e203436303330.roa (hash: PCggWZ4S0cmAIvlQ9OKIUJbBVOoSGkwzhD1/wRPVPCQ=)
                          28: 3138322e34382e3136332e302f32342d3234203d3e203436303330.roa (hash: ewmkkTzxhOGyo6MzFFyyoH5/Y+VapDFv9s96w13qA+g=)
                          29: 3138322e34382e3138382e302f32342d3234203d3e203436303330.roa (hash: CTAc5TKDYG8jWJrPFMAEsp+Pffmom314/f31IgCyWSY=)
                          30: 3138322e34382e3138322e302f32342d3234203d3e203436303330.roa (hash: /3/1RjKyrZlHVoTiW/tcRKdAaD1qr1a2KPJUdaqHdzc=)
                          31: 3138322e34382e3137312e302f32342d3234203d3e203436303330.roa (hash: nIA/3S+EQWlw4ZuLmZhS5zgcudA5d4PuWSKtEk22u0A=)
                          32: 3138322e34382e3136302e302f32342d3234203d3e203436303330.roa (hash: hDks4xSZEu4ylfv9eeFQE9ITujGlv6mJTmcyl6KcPEA=)
                          33: 3138322e34382e3138302e302f32342d3234203d3e203436303330.roa (hash: hj8RfWuHMvR3IOUvRxyV2D2ELgKW3xEoS/ad7SVLqpU=)
                          34: 3138322e34382e3136382e302f32342d3234203d3e203436303330.roa (hash: zas81XYAzKm/epSWBwoKOUmYW9ltga5JFRl4SlgFNYQ=)
                          35: 3138322e34382e3137302e302f32342d3234203d3e203436303330.roa (hash: NjGWi/sX/azA4LSsxWgygXlT2qGazE96SDmeU5APEvg=)
                          36: 3138322e34382e3136352e302f32342d3234203d3e203436303330.roa (hash: Ztfsn5PM55Asy7cf5oKAtrKPTWkPp+IkS2IEf6RTR1I=)
                          37: 3138322e34382e3137332e302f32342d3234203d3e203436303330.roa (hash: Ng7waYdDe1Dfj8ZChcOrErxA2un9U810Hwr4zNlkzaw=)
                          38: 3138322e34382e3138372e302f32342d3234203d3e203436303330.roa (hash: 2snhbL2/LyEOsVO40C/SJRnBQy8yVpoiYYd3VX7I0Dk=)
                          39: 3138322e34382e3138392e302f32342d3234203d3e203436303330.roa (hash: JelzHvBp0OxgIxm8Nd0pErRqQIE2QVfU6EWcp42vk6c=)
                          40: 3131362e3231322e37322e302f32342d3234203d3e203436303330.roa (hash: 1gQP1KipyggAd+ZWxNv0xkFTvLsvr+/k6WShmO+e4Iw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:84:16:8c:9b:8d:fc:3f:5a:51:b2:ba:98:5c:c6:88:7e:49:15:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: Jul 24 10:47:41 2026 GMT
            Not After : Jul 25 10:58:41 2026 GMT
        Subject: CN=B5561B52DC2B0C16B8D95EA5F099DBF269695F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:bf:ac:d0:86:dc:2a:c9:b1:c2:57:53:54:
                    5c:2f:ea:58:54:0f:8e:40:09:b3:1c:42:bf:63:1f:
                    43:6d:fd:67:e2:1d:05:fa:5f:86:42:9d:cd:a2:4a:
                    de:d8:52:8b:ed:ce:8f:1a:03:e1:c3:fb:6c:00:da:
                    6f:68:f2:cf:54:1a:b6:80:a0:9d:2f:ee:3d:62:6d:
                    8f:be:c8:e0:4f:01:a8:62:cb:98:be:6c:f6:46:0f:
                    9d:d5:77:10:04:6f:d5:a8:69:45:73:9c:aa:e0:25:
                    8e:d7:24:1a:13:22:03:7e:2c:d7:7e:00:b9:33:0f:
                    fc:30:7c:0b:d5:f6:3c:31:d2:c4:6d:d1:81:e4:9d:
                    3f:66:51:d2:25:55:2f:53:7d:aa:d8:45:cd:dd:cd:
                    81:9d:51:5f:78:51:11:f1:a7:4d:ce:30:e9:88:e1:
                    d1:b3:23:6d:8f:ae:3e:33:20:04:17:96:b5:62:9d:
                    78:df:5c:c3:a9:14:af:8c:97:98:72:f9:79:4d:17:
                    5b:13:27:29:1f:d8:8a:91:e4:f0:df:0c:8e:5e:b6:
                    cf:22:f6:cc:f9:74:44:07:84:17:ec:35:db:af:94:
                    3e:81:bb:ff:b1:65:b0:36:12:a4:de:99:2f:43:60:
                    0e:91:77:ea:63:05:54:5b:8f:46:58:28:f3:ba:26:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:56:1B:52:DC:2B:0C:16:B8:D9:5E:A5:F0:99:DB:F2:69:69:5F:90
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:97:45:74:2d:22:91:f7:8a:b0:89:c3:66:71:68:3f:ee:51:
         32:26:e7:a8:a3:39:42:cc:63:01:3e:5a:37:7e:b0:86:16:97:
         38:be:40:5c:58:0e:2e:05:98:ff:7b:de:ea:b2:57:93:26:b9:
         e2:9c:48:d9:b1:79:52:dd:d9:04:10:5d:40:83:68:9c:c2:0d:
         ed:16:52:c6:5e:a2:3f:3a:ce:1b:64:37:ff:7b:1f:30:c0:16:
         d7:50:4c:45:6e:1d:b1:e2:ba:5b:e6:62:1a:35:f4:17:56:39:
         e1:bd:01:db:2d:99:6b:ec:86:c5:bf:4e:b0:ec:9e:f2:56:0b:
         64:83:c7:9a:c5:27:38:89:43:49:9f:3a:4d:de:14:45:12:6e:
         79:9f:2c:10:4e:c3:6b:a1:0a:3a:be:44:cf:40:34:22:a6:e3:
         36:8e:15:72:b5:91:b7:9c:88:a6:42:25:63:55:2f:df:26:0d:
         0e:f5:c5:54:13:34:2c:49:37:2f:aa:20:d8:d1:35:0d:be:ac:
         22:c1:01:2a:8d:75:10:7d:06:b9:23:b2:58:c6:53:01:41:11:
         41:21:82:7c:27:58:0a:ce:a8:00:f5:07:53:3a:fd:e3:12:76:
         0c:6d:27:f4:8b:d1:83:3e:0d:db:ec:9e:1e:44:95:88:f9:bd:
         b7:31:5c:80
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUboQWjJuN/D9aUbK6mFzGiH5JFSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2MENF
MkUwNEQ4ODAeFw0yNjA3MjQxMDQ3NDFaFw0yNjA3MjUxMDU4NDFaMDMxMTAvBgNV
BAMTKEI1NTYxQjUyREMyQjBDMTZCOEQ5NUVBNUYwOTlEQkYyNjk2OTVGOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq+r+s0IbcKsmxwldTVFwv6lhU
D45ACbMcQr9jH0Nt/WfiHQX6X4ZCnc2iSt7YUovtzo8aA+HD+2wA2m9o8s9UGraA
oJ0v7j1ibY++yOBPAahiy5i+bPZGD53VdxAEb9WoaUVznKrgJY7XJBoTIgN+LNd+
ALkzD/wwfAvV9jwx0sRt0YHknT9mUdIlVS9TfarYRc3dzYGdUV94URHxp03OMOmI
4dGzI22Prj4zIAQXlrVinXjfXMOpFK+Ml5hy+XlNF1sTJykf2IqR5PDfDI5ets8i
9sz5dEQHhBfsNduvlD6Bu/+xZbA2EqTemS9DYA6Rd+pjBVRbj0ZYKPO6Joe7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtVYbUtwrDBa42V6l8Jnb8mlpX5AwHwYDVR0j
BBgwFoAUkGzRgy4JX9hkMm2TQMM2DOLgTYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQxZDU5NmMtMDllMy00NjIxLWE2M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMy
RTA5NUZEODY0MzI2RDkzNDBDMzM2MENFMkUwNEQ4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MDZDRDE4MzJFMDk1RkQ4NjQzMjZEOTM0MEMzMzYwQ0UyRTA0
RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQxZDU5NmMtMDllMy00NjIxLWE2
M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2
MENFMkUwNEQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGuXRXQtIpH3irCJw2ZxaD/uUTIm56ijOULM
YwE+Wjd+sIYWlzi+QFxYDi4FmP973uqyV5MmueKcSNmxeVLd2QQQXUCDaJzCDe0W
UsZeoj86zhtkN/97HzDAFtdQTEVuHbHiulvmYho19BdWOeG9AdstmWvshsW/TrDs
nvJWC2SDx5rFJziJQ0mfOk3eFEUSbnmfLBBOw2uhCjq+RM9ANCKm4zaOFXK1kbec
iKZCJWNVL98mDQ71xVQTNCxJNy+qINjRNQ2+rCLBASqNdRB9BrkjsljGUwFBEUEh
gnwnWArOqAD1B1M6/eMSdgxtJ/SL0YM+Ddvsnh5ElYj5vbcxXIA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:34 2026 by rpki-client