Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
File:                     F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft (raw, json)
Hash identifier:          +8CWSNXAS3vQW77QMYYi1Ivg9GhhvtQpjyA5zVgZ7cs=
Subject key identifier:   5B:37:AB:40:24:2D:B3:0C:D8:4D:DC:00:C1:18:1D:77:1E:56:13:78
Authority key identifier: F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05
Certificate issuer:       /CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
Certificate serial:       099E1BCD17B569B8C8619C45DD4048E4861A36DB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 08:04:23 +0000
Manifest this update:     Fri 24 Jul 2026 07:59:23 +0000
Manifest next update:     Sat 25 Jul 2026 08:46:23 +0000
Files and hashes:         1: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: 68JdGKM6ZwG4A/0Zkbk1apejyZHCrOC3INqucMNem4k=)
                          2: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: eR+lhfvEfsCbkZyel3U1uF16yYqju330yZp1HKcIBbc=)
                          3: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: fzgf1QrAYO+Q/+T7U9QNA8O+kmp8Cz8Ay/r21tNo/s0=)
                          4: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: wkCrLAzIOFiqo3nrGvWo+81ok/jPKjY3CFZlglcyZZg=)
                          5: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: iSXepSaji0Ngod6jslH8stHOdAzHpNjQb/ERYLB+XCg=)
                          6: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: bXPFzsNIFwl2sXE17WVZeShIHhG6xoVWHAa5bfjoQXU=)
                          7: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: 7bXVA/8iKzHW2goX8s5TN83Nnl+bwbqA5Mzdabq2gRs=)
                          8: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: 4iIC5dTSSOHG7WohTDarSFqaU/UIdRWZkfNrc2u6Td4=)
                          9: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: qO64Q8UNUq+QHu+VrDJNRoztL1fzJemtam8ebw5yaOk=)
                          10: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: 0s5xd9MbczadFUl8oTbSMq42SIuihW/8vWukriq8a6Y=)
                          11: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: O60jQ6cpm038TMH4xpuT5hKyHap9AncU2y4k9WTXvcE=)
                          12: F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl (hash: ax14jLrNVQDnYIlAaYEUfR5OrKcvsVx+c4lEBKo9iLQ=)
                          13: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: 1tjKipqGfWvYkfnGMYECfs44JQSvHqwqfZ7oob2o/Tk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl
                          rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9e:1b:cd:17:b5:69:b8:c8:61:9c:45:dd:40:48:e4:86:1a:36:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
        Validity
            Not Before: Jul 24 07:59:23 2026 GMT
            Not After : Jul 25 08:46:23 2026 GMT
        Subject: CN=5B37AB40242DB30CD84DDC00C1181D771E561378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:1e:01:d1:f7:3c:3e:7b:f3:30:2e:63:e4:
                    c3:34:cf:02:56:a9:bc:62:dd:a7:1c:75:d3:6f:5a:
                    f4:96:09:84:3d:23:4d:3d:92:fc:99:49:3b:0b:a7:
                    f3:1b:9e:ae:94:0b:96:07:b8:97:cb:60:c9:b7:6a:
                    40:42:5d:c6:a4:01:b8:c6:dc:c2:e0:1e:04:51:d8:
                    a6:46:c1:d7:f9:85:27:85:ea:8e:d8:72:ee:e9:9d:
                    39:c7:36:47:14:db:e1:82:85:95:ca:6c:da:70:88:
                    e1:c3:d0:3c:0f:04:40:80:c2:b5:44:10:d1:d7:ed:
                    c6:85:16:81:dd:79:a8:e9:ac:1c:b2:b0:13:5f:84:
                    a8:38:53:9b:55:af:ab:64:25:a1:23:f3:3d:61:4a:
                    e9:ec:74:70:8a:d0:5a:0d:ff:35:55:c4:52:4b:a5:
                    d6:f0:62:de:3b:b9:06:b4:59:4d:ef:e9:a7:d4:82:
                    46:1b:89:e6:74:c3:dc:47:1d:c8:e9:17:7d:ed:77:
                    32:f6:53:ef:2c:3f:14:d0:df:20:5b:a8:d8:b9:83:
                    16:6b:2f:c3:f4:6a:e7:08:a7:31:eb:24:21:f5:14:
                    3f:48:9f:47:e3:28:19:d3:55:41:28:87:81:0f:44:
                    6f:f1:1f:60:41:7f:81:85:04:d9:6a:9e:43:d2:c0:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:37:AB:40:24:2D:B3:0C:D8:4D:DC:00:C1:18:1D:77:1E:56:13:78
            X509v3 Authority Key Identifier:
                keyid:F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ee:65:6a:0d:96:7a:6a:5a:a8:a1:75:64:5e:2d:7a:70:0e:
         c7:cf:ca:dc:f8:48:8e:26:48:f5:85:8e:91:c9:de:e7:59:6f:
         4b:f8:c1:63:da:ec:f7:54:93:fb:f3:23:e3:36:be:a9:52:fc:
         97:9a:7e:d1:29:1a:d4:8c:64:ea:95:f4:0a:9d:74:cb:de:3f:
         dc:54:ea:05:6a:98:68:02:5c:18:66:df:e4:ae:db:70:0b:e0:
         4f:2b:c7:3b:85:f7:da:85:3a:c3:96:88:89:67:80:c1:ee:56:
         7d:bc:9c:84:af:7b:81:bc:d2:2b:36:49:13:b9:19:c5:75:25:
         b8:b5:d4:23:5b:90:59:4a:c8:f4:ed:93:d4:03:61:a8:40:c0:
         37:b0:96:77:5a:d5:fd:d6:59:8e:af:e4:9f:51:64:a1:d9:10:
         76:fd:fe:58:f7:5e:05:00:f3:c5:de:6d:0b:43:f3:00:86:dc:
         d8:2d:7f:4d:75:fc:b6:69:8f:ff:e7:79:9e:28:18:12:b8:92:
         47:8d:91:fc:6a:23:8a:59:c1:38:d9:24:3c:9f:a6:eb:e9:76:
         38:c0:0c:4f:a0:0c:a0:e6:8b:fa:53:cc:de:ca:5e:4f:d5:67:
         8c:96:d0:4a:cd:b0:8c:1b:6e:45:97:d5:d7:6d:c1:e5:0f:67:
         81:2f:d1:1a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCZ4bzRe1abjIYZxF3UBI5IYaNtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2QkUzQTlCNzY2NzU4RkM4QThCQ0M2QzM5QzAzMERB
Q0FDNEIwNTAeFw0yNjA3MjQwNzU5MjNaFw0yNjA3MjUwODQ2MjNaMDMxMTAvBgNV
BAMTKDVCMzdBQjQwMjQyREIzMENEODREREMwMEMxMTgxRDc3MUU1NjEzNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fR4B0fc8PnvzMC5j5MM0zwJW
qbxi3accddNvWvSWCYQ9I009kvyZSTsLp/Mbnq6UC5YHuJfLYMm3akBCXcakAbjG
3MLgHgRR2KZGwdf5hSeF6o7Ycu7pnTnHNkcU2+GChZXKbNpwiOHD0DwPBECAwrVE
ENHX7caFFoHdeajprByysBNfhKg4U5tVr6tkJaEj8z1hSunsdHCK0FoN/zVVxFJL
pdbwYt47uQa0WU3v6afUgkYbieZ0w9xHHcjpF33tdzL2U+8sPxTQ3yBbqNi5gxZr
L8P0aucIpzHrJCH1FD9In0fjKBnTVUEoh4EPRG/xH2BBf4GFBNlqnkPSwG0rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWzerQCQtswzYTdwAwRgddx5WE3gwHwYDVR0j
BBgwFoAU8WvjqbdmdY/IqLzGw5wDDaysSwUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWU4NmIwOTItNTI3ZC00ODhmLWE5ZjctMjQ3OTdkOTc3NGNiLzAvRjE2QkUzQTlC
NzY2NzU4RkM4QThCQ0M2QzM5QzAzMERBQ0FDNEIwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMTZCRTNBOUI3NjY3NThGQzhBOEJDQzZDMzlDMDMwREFDQUM0
QjA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWU4NmIwOTItNTI3ZC00ODhmLWE5
ZjctMjQ3OTdkOTc3NGNiLzAvRjE2QkUzQTlCNzY2NzU4RkM4QThCQ0M2QzM5QzAz
MERBQ0FDNEIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMXuZWoNlnpqWqihdWReLXpwDsfPytz4SI4m
SPWFjpHJ3udZb0v4wWPa7PdUk/vzI+M2vqlS/JeaftEpGtSMZOqV9AqddMveP9xU
6gVqmGgCXBhm3+Su23AL4E8rxzuF99qFOsOWiIlngMHuVn28nISve4G80is2SRO5
GcV1Jbi11CNbkFlKyPTtk9QDYahAwDewlnda1f3WWY6v5J9RZKHZEHb9/lj3XgUA
88XebQtD8wCG3Ngtf011/LZpj//neZ4oGBK4kkeNkfxqI4pZwTjZJDyfpuvpdjjA
DE+gDKDmi/pTzN7KXk/VZ4yW0ErNsIwbbkWX1ddtweUPZ4Ev0Ro=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:30 2026 by rpki-client