Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
File:                     6807307655CEA502796E1026C663C4A882D37E72.mft (raw, json)
Hash identifier:          Thqga4T/VBXXJSmQ57kKRf19OJ55E/65Pa35r8oAUSQ=
Subject key identifier:   BA:30:FE:66:2A:45:56:D4:36:3B:E4:41:50:36:F3:D3:8B:01:45:8F
Authority key identifier: 68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72
Certificate issuer:       /CN=6807307655CEA502796E1026C663C4A882D37E72
Certificate serial:       082C03E76DD1C3759902FA4C1088C0B505E6E6DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:20:36 +0000
Manifest this update:     Tue 12 May 2026 22:15:36 +0000
Manifest next update:     Thu 14 May 2026 00:49:36 +0000
Files and hashes:         1: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: k002Muyqc9cS3UpWT7uJHqyqbjEHyYRWloXEdO7c7yA=)
                          2: 6807307655CEA502796E1026C663C4A882D37E72.crl (hash: N0cy2o23NoZWlsYVODVrdjAu7eJG99kBhWMUwMIXwX0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2c:03:e7:6d:d1:c3:75:99:02:fa:4c:10:88:c0:b5:05:e6:e6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6807307655CEA502796E1026C663C4A882D37E72
        Validity
            Not Before: May 12 22:15:36 2026 GMT
            Not After : May 14 00:49:36 2026 GMT
        Subject: CN=BA30FE662A4556D4363BE4415036F3D38B01458F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:1e:14:d0:e5:30:03:fe:ed:0d:ff:42:ec:
                    1d:2f:71:64:ef:f0:4e:0b:18:28:52:f1:65:4e:f9:
                    6a:1e:fc:61:11:fd:36:00:fc:fe:b6:9d:65:c5:24:
                    62:27:53:b2:fa:40:77:bf:d1:28:df:bd:72:b2:38:
                    f6:7f:5e:ef:c6:1f:a0:eb:5f:df:53:9e:8b:0e:66:
                    55:1e:b8:bb:64:cb:4f:51:3d:08:da:0e:6c:50:93:
                    a1:fe:73:c1:1e:45:67:e1:86:59:fc:52:13:d5:59:
                    07:c1:6e:eb:1f:0a:2c:24:ec:53:6f:2b:2a:fb:05:
                    f8:71:84:2c:99:19:44:14:01:9c:77:9e:4c:2d:a1:
                    d7:fb:b4:8b:68:29:26:d8:84:37:a0:72:98:d0:78:
                    b2:05:4d:8b:e5:f6:2e:b9:8c:09:8e:91:a6:4b:24:
                    42:98:ea:c9:9b:79:48:94:49:28:c7:09:4f:88:b3:
                    f2:d2:97:8a:74:c2:9d:08:5b:e7:0b:44:a7:58:ed:
                    76:7a:da:80:14:25:e5:51:f0:a0:e0:76:97:b4:e0:
                    a3:7e:61:b4:fd:39:61:c3:9e:a2:ae:10:b0:8d:60:
                    26:f3:58:0e:3d:29:35:94:62:0f:f6:85:05:20:b9:
                    90:51:3b:50:21:53:73:4f:e7:36:af:70:d6:9f:38:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:30:FE:66:2A:45:56:D4:36:3B:E4:41:50:36:F3:D3:8B:01:45:8F
            X509v3 Authority Key Identifier:
                keyid:68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:5e:a2:9c:db:a1:c8:d4:1c:d3:b9:b1:ff:fc:5b:3d:c3:
         47:39:a2:d9:4d:53:95:69:46:1a:a6:49:7e:32:78:8f:6b:00:
         e8:cc:5a:6f:58:1f:ed:be:7a:7e:cf:97:eb:ff:4d:64:8d:49:
         5b:d8:22:49:ba:e5:85:a8:cb:c5:55:cb:a1:7a:a1:78:41:84:
         bb:2f:e8:ac:d6:68:06:92:3c:0e:a8:91:ec:bd:af:5b:67:11:
         3c:96:d6:9b:56:29:7b:a4:77:b3:d8:de:76:3f:2f:20:fa:09:
         b9:1a:d0:65:bf:d2:1c:44:21:ff:1c:e2:8e:78:1b:8f:5a:dc:
         36:65:7b:3f:18:4c:1b:47:a9:e5:4c:26:14:a0:2a:2f:50:9a:
         da:33:90:ff:fe:86:15:26:25:04:b8:64:b9:61:05:0b:37:87:
         31:33:75:35:61:73:16:ec:f2:a4:98:9a:01:32:44:ff:a0:13:
         a4:8e:3a:af:4a:dc:cb:bc:26:78:be:d3:10:66:0d:ce:91:7e:
         85:c6:e9:9f:dc:e4:09:68:4e:51:8e:ab:32:90:94:df:8a:4b:
         03:da:5d:18:7c:4d:6e:40:07:c2:0b:1a:60:a9:eb:fc:f0:62:
         a8:59:cb:83:39:6d:6e:fe:db:89:0d:5e:42:af:34:1b:fa:30:
         7f:d2:97:20
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCCwD523Rw3WZAvpMEIjAtQXm5t4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgwNzMwNzY1NUNFQTUwMjc5NkUxMDI2QzY2M0M0QTg4
MkQzN0U3MjAeFw0yNjA1MTIyMjE1MzZaFw0yNjA1MTQwMDQ5MzZaMDMxMTAvBgNV
BAMTKEJBMzBGRTY2MkE0NTU2RDQzNjNCRTQ0MTUwMzZGM0QzOEIwMTQ1OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQwh4U0OUwA/7tDf9C7B0vcWTv
8E4LGChS8WVO+Woe/GER/TYA/P62nWXFJGInU7L6QHe/0SjfvXKyOPZ/Xu/GH6Dr
X99TnosOZlUeuLtky09RPQjaDmxQk6H+c8EeRWfhhln8UhPVWQfBbusfCiwk7FNv
Kyr7BfhxhCyZGUQUAZx3nkwtodf7tItoKSbYhDegcpjQeLIFTYvl9i65jAmOkaZL
JEKY6smbeUiUSSjHCU+Is/LSl4p0wp0IW+cLRKdY7XZ62oAUJeVR8KDgdpe04KN+
YbT9OWHDnqKuELCNYCbzWA49KTWUYg/2hQUguZBRO1AhU3NP5zavcNafOLWvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUujD+ZipFVtQ2O+RBUDbz04sBRY8wHwYDVR0j
BBgwFoAUaAcwdlXOpQJ5bhAmxmPEqILTfnIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OThlNDYxMGEtYTc5NC00MDU5LTk3ZDktZjJjNjlkYTU0YzhiLzEvNjgwNzMwNzY1
NUNFQTUwMjc5NkUxMDI2QzY2M0M0QTg4MkQzN0U3Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82ODA3MzA3NjU1Q0VBNTAyNzk2RTEwMjZDNjYzQzRBODgyRDM3
RTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThlNDYxMGEtYTc5NC00MDU5LTk3
ZDktZjJjNjlkYTU0YzhiLzEvNjgwNzMwNzY1NUNFQTUwMjc5NkUxMDI2QzY2M0M0
QTg4MkQzN0U3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKNcXqKc26HI1BzTubH//Fs9w0c5otlNU5Vp
RhqmSX4yeI9rAOjMWm9YH+2+en7Pl+v/TWSNSVvYIkm65YWoy8VVy6F6oXhBhLsv
6KzWaAaSPA6okey9r1tnETyW1ptWKXukd7PY3nY/LyD6Cbka0GW/0hxEIf8c4o54
G49a3DZlez8YTBtHqeVMJhSgKi9QmtozkP/+hhUmJQS4ZLlhBQs3hzEzdTVhcxbs
8qSYmgEyRP+gE6SOOq9K3Mu8Jni+0xBmDc6RfoXG6Z/c5AloTlGOqzKQlN+KSwPa
XRh8TW5AB8ILGmCp6/zwYqhZy4M5bW7+24kNXkKvNBv6MH/SlyA=
-----END CERTIFICATE-----
Generated at Wed May 13 05:43:02 2026 by rpki-client