Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
File:                     DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft (raw, json)
Hash identifier:          CH/OSw7I2M3OaqouyC2rpkhfgRDFCdWC9VxJSTl+L4Q=
Subject key identifier:   AF:C1:A3:99:D8:D2:1A:CE:13:3B:1B:69:A7:C0:DA:E2:47:45:09:EF
Authority key identifier: DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6
Certificate issuer:       /CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
Certificate serial:       1DE6AEC325AFC532CED66FF5A9B7E7A0128DA393
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 13:46:56 +0000
Manifest this update:     Thu 23 Jul 2026 13:41:56 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:56 +0000
Files and hashes:         1: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl (hash: PWLTfI/zEPcxCSi/f5TVIEwVKayK9YFttS0brCZiJTE=)
                          2: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: RognJZgFxoaYfZ3q8iAEXmaMxQXncM9YyfOgmfWAQ3o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl
                          rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e6:ae:c3:25:af:c5:32:ce:d6:6f:f5:a9:b7:e7:a0:12:8d:a3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6
        Validity
            Not Before: Jul 23 13:41:56 2026 GMT
            Not After : Jul 24 16:00:56 2026 GMT
        Subject: CN=AFC1A399D8D21ACE133B1B69A7C0DAE2474509EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:66:5e:1e:be:55:12:38:fc:97:21:5c:9b:
                    f6:51:86:1d:cd:41:ee:7b:57:ab:ac:b6:2b:84:68:
                    14:e4:1c:ad:1d:cd:ee:26:08:4f:40:39:f8:39:8d:
                    45:5b:1a:8e:37:03:13:7d:f5:e7:7d:57:fc:f9:c0:
                    77:38:bf:af:2f:b0:98:25:9d:5d:56:13:cc:d3:ac:
                    9b:f0:e9:46:3f:8e:df:48:c0:08:db:76:0b:0e:dd:
                    2f:aa:d9:d9:af:20:46:57:6d:1d:73:be:02:0f:55:
                    bc:64:eb:65:27:6e:c5:37:05:e4:bf:36:be:8c:a0:
                    2b:37:cc:5c:06:d6:9e:88:cc:a3:ae:7a:31:3c:08:
                    50:1d:26:06:d1:99:64:49:97:8d:db:d8:b4:93:27:
                    9a:44:ee:eb:85:f7:ab:0f:d3:3b:c4:bd:d4:00:35:
                    35:84:e5:35:3e:25:47:e1:ba:85:c0:18:1f:40:74:
                    7f:2c:f0:a5:18:f5:0d:f2:8c:e9:68:e1:c9:45:0c:
                    1c:83:6a:88:50:3d:1d:53:52:8c:8a:78:21:54:e7:
                    9b:88:68:a3:18:e8:b1:39:bd:b7:14:48:27:39:61:
                    e5:1a:ff:db:7d:b9:bd:46:22:7a:3d:fb:5b:d3:c1:
                    c8:a7:64:46:6b:9a:0e:4e:66:40:b5:b8:0f:59:ff:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C1:A3:99:D8:D2:1A:CE:13:3B:1B:69:A7:C0:DA:E2:47:45:09:EF
            X509v3 Authority Key Identifier:
                keyid:DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:b1:a0:e6:e7:d5:1c:51:ac:07:17:a1:ff:e4:08:fd:63:
         d2:40:4e:d4:10:6f:6f:11:92:21:e2:c6:4e:1a:bb:b6:6b:5b:
         33:79:8e:4a:79:a7:6d:66:ee:d9:34:83:cd:06:ba:44:e0:df:
         49:24:07:0b:c7:70:6e:6f:82:a0:5a:06:b1:50:88:19:86:95:
         cb:20:9e:5d:75:ca:81:21:4c:23:81:14:d4:5d:6a:c6:ab:a1:
         f6:c1:8f:c3:12:85:55:a8:3a:2a:ce:b5:07:4a:bf:59:22:62:
         c3:db:5a:2c:40:34:a4:22:ab:b7:d9:a5:e2:6c:a6:0c:ee:c1:
         d5:7c:14:0a:c9:c2:66:c3:01:de:36:aa:00:a3:bb:e2:cd:f8:
         d0:85:73:4d:d0:67:f6:ac:a6:3d:85:ff:41:ab:ba:8b:0e:9c:
         79:8c:f8:34:9b:d0:a7:d7:af:39:64:f4:ed:18:65:94:ed:bb:
         69:70:3a:f2:f4:95:b1:c1:0d:c3:b5:2e:77:97:25:66:79:d5:
         df:88:7b:9a:a9:b9:b6:7f:b7:9e:4a:81:38:e9:ef:b9:89:16:
         a1:58:76:d8:95:bf:06:54:d2:b6:66:9d:e2:0c:c7:b1:9d:6d:
         dd:6a:8b:ee:13:c8:62:60:35:0b:c2:6e:a6:65:3c:bf:d2:b2:
         11:20:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:39 2026 by rpki-client