Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
File:                     AEBADFA06D76BE480430EDC8D27F4BE636880149.mft (raw, json)
Hash identifier:          MUj+P8gxjuC62BdLuAoHSXJpdMK6gcnIcHcnVB2tCF0=
Subject key identifier:   F0:5B:F0:E5:6C:5B:0B:26:1B:50:E6:D4:DE:37:3D:65:E9:2C:74:43
Authority key identifier: AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49
Certificate issuer:       /CN=AEBADFA06D76BE480430EDC8D27F4BE636880149
Certificate serial:       3D81A2BE4AD9AFEE4252AA3187F00BBF746804D3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 18:37:53 +0000
Manifest this update:     Thu 23 Jul 2026 18:32:53 +0000
Manifest next update:     Fri 24 Jul 2026 21:59:53 +0000
Files and hashes:         1: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: nG5fCmE925uHgYNeygfmhhegb7zX/kDvlyw/SCpRN+I=)
                          2: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: aC5Jcybn/WcmcwFTZT+cimtZCI1Cj8w+b53oH5W6Fw4=)
                          3: AEBADFA06D76BE480430EDC8D27F4BE636880149.crl (hash: lZf75ORJQ8JPFElP/7W4+AN7datHLLE9NufVrcOrzhM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl
                          rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:81:a2:be:4a:d9:af:ee:42:52:aa:31:87:f0:0b:bf:74:68:04:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBADFA06D76BE480430EDC8D27F4BE636880149
        Validity
            Not Before: Jul 23 18:32:53 2026 GMT
            Not After : Jul 24 21:59:53 2026 GMT
        Subject: CN=F05BF0E56C5B0B261B50E6D4DE373D65E92C7443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:87:5d:3e:1e:da:2b:04:81:98:de:ab:af:
                    1b:5d:fe:d3:c5:45:df:6c:d1:65:93:66:c8:18:bb:
                    ea:cf:4d:80:63:02:2e:86:1d:d3:97:d5:9d:d6:7c:
                    ed:4c:71:e7:a4:0f:33:e6:1d:df:ad:b0:cb:08:ed:
                    a5:0c:68:df:57:54:5e:c7:8a:11:f5:be:56:43:cf:
                    21:75:0f:9f:86:40:60:78:45:a3:22:9d:94:5c:c4:
                    b7:e8:fb:2a:b6:ce:4c:ff:0d:80:cb:c8:8d:bc:9e:
                    6a:b6:e9:cb:54:17:a0:aa:48:55:36:b7:af:58:94:
                    2c:8a:5d:56:af:d7:cf:62:84:e5:46:a3:18:ae:73:
                    c3:d6:40:07:4b:c5:61:42:15:42:39:18:41:36:c2:
                    61:3e:05:57:8d:1b:aa:66:a5:1c:0f:cc:33:ee:5d:
                    19:bd:e9:1f:94:b9:b7:fa:2a:51:c4:b1:bf:a9:75:
                    8c:33:bd:01:49:c4:77:17:92:e9:ca:28:fb:fb:c9:
                    6a:9f:ae:11:e9:80:0c:e6:80:37:20:c2:b4:36:2d:
                    51:94:18:76:b1:b6:34:63:67:66:d2:0c:b3:d8:ef:
                    a9:10:db:fe:d3:35:9d:e6:49:4e:6d:e5:aa:1d:1a:
                    a1:e5:39:1c:22:62:2b:2e:95:53:24:8c:45:ce:f5:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5B:F0:E5:6C:5B:0B:26:1B:50:E6:D4:DE:37:3D:65:E9:2C:74:43
            X509v3 Authority Key Identifier:
                keyid:AE:BA:DF:A0:6D:76:BE:48:04:30:ED:C8:D2:7F:4B:E6:36:88:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AEBADFA06D76BE480430EDC8D27F4BE636880149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/AEBADFA06D76BE480430EDC8D27F4BE636880149.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f0:8b:ed:a1:f6:16:f9:29:26:4b:1e:83:47:50:d7:37:0d:
         a9:eb:cb:b8:73:91:df:07:2d:be:18:7e:07:f1:e0:79:78:da:
         a2:bb:1d:ac:a0:5b:b5:d3:a1:d5:e4:3e:cb:a4:6e:30:76:a5:
         dd:bf:3e:30:f6:3a:28:c9:b5:b9:0a:e4:8d:eb:52:9d:d6:59:
         52:73:be:9a:32:a5:f7:55:f0:23:c4:f1:86:41:cb:a6:61:31:
         f7:f9:a5:7b:d9:51:00:1c:c7:7e:69:b6:dc:36:12:cb:1d:18:
         a8:7d:be:e3:0e:5a:32:e4:de:05:05:a1:37:aa:63:e7:fe:9c:
         ac:1e:18:26:0e:05:c7:2c:d8:2b:b6:e1:21:29:f2:10:3d:a7:
         22:ec:e8:19:1a:ce:5b:38:0b:6c:94:aa:10:c3:a6:f2:ab:a3:
         92:0c:01:26:ce:db:3b:cb:1c:51:71:8a:00:f1:d3:d7:9c:77:
         c9:fc:4b:bd:d5:3f:3c:70:9c:6f:35:6a:3b:82:99:08:a7:9e:
         b5:50:4a:52:77:6f:7d:ea:ab:f7:a7:40:24:21:1c:e8:5c:da:
         ff:2d:9d:e1:49:b6:96:8d:64:b2:98:09:21:84:54:e8:2e:09:
         10:a9:b0:17:91:af:69:68:f6:98:37:0c:16:53:b2:02:53:b2:
         d0:5a:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:59 2026 by rpki-client