Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
File:                     BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft (raw, json)
Hash identifier:          TLJA719ArbpjFDlA6w1dR4jyDNU43GCo50QYTNjNNPk=
Subject key identifier:   62:74:1D:76:FD:02:11:3A:6A:C3:6C:DD:B4:EB:B3:23:BB:03:6A:CB
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       0211A3559CB755B4A622029FEEC0D440A40137AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 13:51:58 +0000
Manifest this update:     Thu 23 Jul 2026 13:46:58 +0000
Manifest next update:     Fri 24 Jul 2026 17:07:58 +0000
Files and hashes:         1: 34352e3132362e35362e302f32332d3234203d3e20313332363437.roa (hash: BC4anIQ+a9WUEuTcYN68YGrrV6yunSX3tOj+gke3HOM=)
                          2: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (hash: 8tz20JsrCmWJ12URHbvfs5cYxrQj1byexdS6hWPseS4=)
                          3: 3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (hash: GF5sw5TIyMg/HEZpyvFvO1rBAEJgs3CpQYQY8RN9uRY=)
                          4: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (hash: c/+B9i/CScu7h8jGuv1JRMe6ArsSJVjID5tIfBJTEZE=)
                          5: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (hash: W4Y/Jl2Uo2TA6PRaW+Lr7qZLcsDrqBIfU1uczmpPuG4=)
                          6: 3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (hash: AWDTDU1uK2yBZAsT7txzvxIXXk3Q8Vz2Xvi0KaFLsOk=)
                          7: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (hash: elFR1hwQeXN8BTtaNU77MnFeZSQYNz4QlrPnRy3FSWk=)
                          8: 3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa (hash: u6hQoPKoHiVtYDbwuT9Uz8f5A+6L4NtjJ2yTHSMpD0s=)
                          9: 3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (hash: Tm/UNBU0RZeScJfXS8SuxK9KL1FxgoN/n8Ti+/I4iaM=)
                          10: 34352e3132362e35382e302f32342d3234203d3e20313332363437.roa (hash: 22qOI7kA6d3/l7AQiyRyGMcKna9TfZu2inXLqY/VILw=)
                          11: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (hash: 3tV7ePWEh+EaJKm0cDZuNy9PmGNGDZkDyBgahcmdLds=)
                          12: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (hash: Q3RsZBk5q9tyrBDMlbDRl2T3DfnBOVkpF/7xiffBucI=)
                          13: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (hash: fBsZSMatjucO+T7+pnQaQszpCsK34WTaNL1x8+auaVA=)
                          14: 3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (hash: H4QyDpAYJgb2cSZHnPV/4PL7jlc0wOLp4dMIreHw0fQ=)
                          15: 3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (hash: SrggenrhOddxkHmFx2q+pbw4/0dGiORptPNzRQuuHtg=)
                          16: BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl (hash: b7A0ZaOZZkVKfyV4sDsep65P/nau2YEMhlDflcG7GOU=)
                          17: 323430323a656538303a35383a3a2f34382d3438203d3e20313332363437.roa (hash: e+Gw3YTY2+X+FfuH6e/RIS9HElWcKHLwAE2PQqgXfvw=)
                          18: 323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (hash: d2p1pz6iSVKmhRvc7KcXU5ZyLMfCL4gLganI40S2YnI=)
                          19: 34352e3132362e35362e302f32342d3234203d3e20313332363437.roa (hash: 51eavTWPFrNxa8bjSHcdJ8vtzC1mzLQPZlm9M3COLDU=)
                          20: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (hash: atskKnHk5T0oqegQKA+HINuV5pfMQiIduF8R7Q4ZG+c=)
                          21: 323430323a656538303a643a3a2f34382d3438203d3e20313332363437.roa (hash: Sm4mr8PZqNPV9oAJvZYba4Nbo01h5qyGSwF7hDwYhaE=)
                          22: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (hash: /o29HECkwJutgVmG0I5lSxBVN20fSE9q8Dt9mr1Ct3U=)
                          23: 323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (hash: PfU7mv6IN/K07oNWG+0wCm4fLi1KFnoKFqJbJk9QcX4=)
                          24: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (hash: qArl8RBpNQGv7NW/pHMi5u7s8FPFuQtE+K0tYbKrjHU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 17:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:11:a3:55:9c:b7:55:b4:a6:22:02:9f:ee:c0:d4:40:a4:01:37:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: Jul 23 13:46:58 2026 GMT
            Not After : Jul 24 17:07:58 2026 GMT
        Subject: CN=62741D76FD02113A6AC36CDDB4EBB323BB036ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:d2:bd:33:65:c8:43:f0:98:42:38:de:39:
                    ff:2a:d5:79:e5:a5:29:d4:65:eb:bb:d0:ac:5d:16:
                    df:9c:55:1e:b1:81:a2:c6:65:37:38:f9:62:a0:f8:
                    b4:75:c7:12:2a:cc:bf:cc:d1:cd:f9:29:03:16:60:
                    23:b7:63:f9:23:dc:92:a9:44:1e:5c:9b:12:02:d2:
                    04:f4:e2:3b:9d:f4:92:04:2b:0c:6f:95:60:49:0d:
                    e7:b5:6a:5f:8f:45:38:f4:bd:68:d1:a2:c5:de:1b:
                    7b:28:3b:ed:e9:d2:bd:5a:fb:58:a2:1d:70:75:eb:
                    37:57:f0:4b:14:9e:9e:06:dc:51:70:b1:2a:33:41:
                    ac:40:84:ca:09:2a:f3:a2:96:b5:8f:39:5f:9b:dd:
                    2d:1f:a2:a8:65:80:36:e6:e3:20:a7:44:40:e0:b6:
                    4e:82:cc:16:f1:f8:0c:7f:c0:53:f5:dd:24:de:3a:
                    43:ef:1a:9d:3e:e4:64:17:d3:bd:47:a3:53:2c:07:
                    4f:b0:51:4e:c2:04:91:9e:08:c8:33:76:4d:3c:d5:
                    cc:fa:ff:e9:0e:89:35:ed:77:0d:58:ee:13:c1:15:
                    f0:68:f6:a7:da:a4:22:8e:2c:ad:ba:47:4b:ae:b5:
                    c9:b4:ae:70:8f:f5:d0:e8:a3:16:c4:e1:55:85:db:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:74:1D:76:FD:02:11:3A:6A:C3:6C:DD:B4:EB:B3:23:BB:03:6A:CB
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:99:2d:10:f6:17:4c:fd:27:b9:6e:5b:49:52:f7:24:59:17:
         91:3a:6e:62:b0:da:7d:c4:ba:21:0a:d7:b0:da:fe:0a:19:1f:
         cb:26:2c:5b:e0:59:cb:29:d7:60:94:61:fb:82:4d:b9:ef:9d:
         f0:ba:b1:fa:79:42:8b:6c:c9:d8:4d:ed:d9:d4:37:da:45:88:
         31:ed:92:e5:34:b0:77:f9:62:68:51:3b:f0:2d:ff:8a:a7:63:
         e6:61:f5:2d:c2:3c:a0:48:8b:76:56:f0:59:96:fc:24:71:42:
         b9:b9:3b:4e:98:dc:28:79:c6:2d:69:69:cb:93:c6:31:ea:66:
         9a:be:7e:8d:88:45:5d:31:f6:0a:34:cf:1a:d0:ae:e2:72:64:
         d2:ed:4f:c3:bb:f4:89:1e:53:71:85:63:3f:72:f5:dc:cc:b1:
         b4:7f:a2:36:a3:6a:ec:6b:5f:f7:9d:aa:d2:ee:12:21:23:29:
         16:d6:85:95:a7:cf:4b:5f:f5:0f:cb:30:be:f5:c7:c1:99:1a:
         c9:20:f4:63:f8:bc:2c:54:f4:eb:30:c6:62:b1:e5:33:3e:88:
         80:ea:5a:e7:9b:8c:dd:cb:80:91:a3:6a:29:b1:5b:80:10:3d:
         85:82:e7:0e:87:d0:bf:f1:3a:b8:ee:35:66:7f:c8:40:66:0a:
         ab:0f:07:1f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAhGjVZy3VbSmIgKf7sDUQKQBN6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI1NzY4MzVFRDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2
NTUzN0VCNjAeFw0yNjA3MjMxMzQ2NThaFw0yNjA3MjQxNzA3NThaMDMxMTAvBgNV
BAMTKDYyNzQxRDc2RkQwMjExM0E2QUMzNkNEREI0RUJCMzIzQkIwMzZBQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzndK9M2XIQ/CYQjjeOf8q1Xnl
pSnUZeu70KxdFt+cVR6xgaLGZTc4+WKg+LR1xxIqzL/M0c35KQMWYCO3Y/kj3JKp
RB5cmxIC0gT04jud9JIEKwxvlWBJDee1al+PRTj0vWjRosXeG3soO+3p0r1a+1ii
HXB16zdX8EsUnp4G3FFwsSozQaxAhMoJKvOilrWPOV+b3S0foqhlgDbm4yCnREDg
tk6CzBbx+Ax/wFP13STeOkPvGp0+5GQX071Ho1MsB0+wUU7CBJGeCMgzdk081cz6
/+kOiTXtdw1Y7hPBFfBo9qfapCKOLK26R0uutcm0rnCP9dDooxbE4VWF23AtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYnQddv0CETpqw2zdtOuzI7sDasswHwYDVR0j
BBgwFoAUu1doNe2KRuMPuN31ZqvEd2VTfrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTY2MTdkOGMtZDE1NC00NjFlLWJjY2EtYjY2ZDI2N2NmZmM3LzAvQkI1NzY4MzVF
RDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2NTUzN0VCNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQjU3NjgzNUVEOEE0NkUzMEZCOERERjU2NkFCQzQ3NzY1NTM3
RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY2MTdkOGMtZDE1NC00NjFlLWJj
Y2EtYjY2ZDI2N2NmZmM3LzAvQkI1NzY4MzVFRDhBNDZFMzBGQjhEREY1NjZBQkM0
Nzc2NTUzN0VCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABiZLRD2F0z9J7luW0lS9yRZF5E6bmKw2n3E
uiEK17Da/goZH8smLFvgWcsp12CUYfuCTbnvnfC6sfp5QotsydhN7dnUN9pFiDHt
kuU0sHf5YmhRO/At/4qnY+Zh9S3CPKBIi3ZW8FmW/CRxQrm5O06Y3Ch5xi1pacuT
xjHqZpq+fo2IRV0x9go0zxrQruJyZNLtT8O79IkeU3GFYz9y9dzMsbR/ojajauxr
X/edqtLuEiEjKRbWhZWnz0tf9Q/LML71x8GZGskg9GP4vCxU9OswxmKx5TM+iIDq
WuebjN3LgJGjaimxW4AQPYWC5w6H0L/xOrjuNWZ/yEBmCqsPBx8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:04 2026 by rpki-client