Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
File:                     8EE74284879D5768C14DFF59F408307443024F52.mft (raw, json)
Hash identifier:          PVKAC9akTO1xss6WCbod5bgkxet0Eu3n8v47DuUonDY=
Subject key identifier:   9D:39:E8:84:62:BD:9D:54:37:45:A4:8F:BA:BB:DE:BF:5F:AF:F2:1C
Authority key identifier: 8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52
Certificate issuer:       /CN=8EE74284879D5768C14DFF59F408307443024F52
Certificate serial:       3988AE132A38229E2124607FEF0ADF46DA86E969
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 12:40:31 +0000
Manifest this update:     Thu 23 Jul 2026 12:35:31 +0000
Manifest next update:     Fri 24 Jul 2026 15:48:31 +0000
Files and hashes:         1: 8EE74284879D5768C14DFF59F408307443024F52.crl (hash: BBHVzqUdEdUIA4wGfhidQroT/8t3hmEI0JnTyolGQRE=)
                          2: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: qVGDGNhc8J+1zH3v5gLnqpqbccQ37nMtlVBvAtU2Qic=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl
                          rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 15:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:88:ae:13:2a:38:22:9e:21:24:60:7f:ef:0a:df:46:da:86:e9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE74284879D5768C14DFF59F408307443024F52
        Validity
            Not Before: Jul 23 12:35:31 2026 GMT
            Not After : Jul 24 15:48:31 2026 GMT
        Subject: CN=9D39E88462BD9D543745A48FBABBDEBF5FAFF21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:33:bc:fe:e1:94:a3:af:62:11:5f:db:d0:c1:
                    32:b5:0d:cc:0e:7d:b7:f0:93:ba:1d:2b:e1:06:0b:
                    df:98:22:1a:68:69:81:9f:e2:a5:d9:5a:9c:05:d8:
                    30:15:fb:8d:db:b6:29:15:b8:33:84:5a:f8:43:3b:
                    02:aa:b8:8a:33:38:31:2c:aa:c8:7b:d3:a2:af:4e:
                    84:8e:0c:01:e0:30:dd:3a:a7:14:80:11:c1:17:0f:
                    3c:c4:1c:90:f4:ea:26:10:32:23:4e:2c:ce:88:09:
                    62:19:e4:f2:c2:ef:4e:b8:58:ef:ea:b8:0d:70:b7:
                    9a:76:5f:4f:a3:20:7b:41:94:5c:24:e3:fa:c9:ab:
                    d9:45:eb:93:29:a6:b5:e5:97:a8:8a:a7:28:bc:b5:
                    69:72:5d:eb:a1:15:ab:fc:7c:1e:91:21:c7:b3:a7:
                    83:84:92:a8:c4:36:7b:0f:32:00:8c:3e:3f:4e:a3:
                    17:7e:3c:64:51:7e:3f:2b:72:96:2f:da:11:be:32:
                    c0:95:b0:ed:6b:96:93:b4:f6:2e:23:29:5a:c5:b8:
                    62:0c:cd:2f:3a:24:24:59:bf:98:d9:b6:e9:4c:68:
                    cf:48:8a:06:ff:ad:31:10:43:89:fa:ac:59:fd:c2:
                    a0:06:24:42:8a:62:6d:1d:85:71:cf:03:6f:40:1f:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:39:E8:84:62:BD:9D:54:37:45:A4:8F:BA:BB:DE:BF:5F:AF:F2:1C
            X509v3 Authority Key Identifier:
                keyid:8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ab:70:38:fe:54:a2:d4:99:3d:00:ac:0c:e0:c4:3d:c3:94:
         8b:54:52:d1:5e:db:cd:8a:26:1b:d4:10:fd:60:da:25:75:78:
         3d:a5:e9:c0:4a:4a:d2:b3:a1:f7:a3:c2:cb:0b:d3:08:98:2a:
         60:c3:6c:aa:36:4c:02:cb:bc:a6:d8:dc:43:19:e1:71:3b:74:
         3b:c3:99:bb:94:4e:f0:31:40:b1:a7:8e:53:3e:72:1d:2a:d5:
         14:8d:79:24:57:d2:8e:fa:b8:0e:57:a4:8e:3c:81:fe:08:45:
         8d:93:85:d1:62:83:f4:96:cb:10:97:9b:d8:6a:15:54:a0:0d:
         b2:fb:ba:df:4b:36:c1:3b:40:50:4d:28:61:4a:13:b4:ce:b6:
         52:20:d3:c0:a1:c7:24:92:88:5f:44:22:ec:d5:64:f5:26:bd:
         88:e4:85:cd:df:ed:0c:d8:d3:d9:55:6a:59:8e:a3:15:0e:26:
         20:1d:86:4f:0d:ed:44:90:bc:9f:67:3d:7f:47:80:bd:54:fe:
         b1:2a:94:86:99:0b:43:fa:cf:38:19:ab:85:e7:96:a8:90:73:
         00:51:ac:6d:a9:b2:16:d0:f8:47:54:b0:3d:88:1d:fb:c8:f7:
         78:21:bd:13:af:99:73:5d:24:d7:ad:57:6c:c9:b8:68:6d:ce:
         cb:50:f4:bf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOYiuEyo4Ip4hJGB/7wrfRtqG6WkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0
MzAyNEY1MjAeFw0yNjA3MjMxMjM1MzFaFw0yNjA3MjQxNTQ4MzFaMDMxMTAvBgNV
BAMTKDlEMzlFODg0NjJCRDlENTQzNzQ1QTQ4RkJBQkJERUJGNUZBRkYyMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSM7z+4ZSjr2IRX9vQwTK1DcwO
fbfwk7odK+EGC9+YIhpoaYGf4qXZWpwF2DAV+43btikVuDOEWvhDOwKquIozODEs
qsh706KvToSODAHgMN06pxSAEcEXDzzEHJD06iYQMiNOLM6ICWIZ5PLC7064WO/q
uA1wt5p2X0+jIHtBlFwk4/rJq9lF65MpprXll6iKpyi8tWlyXeuhFav8fB6RIcez
p4OEkqjENnsPMgCMPj9Ooxd+PGRRfj8rcpYv2hG+MsCVsO1rlpO09i4jKVrFuGIM
zS86JCRZv5jZtulMaM9Iigb/rTEQQ4n6rFn9wqAGJEKKYm0dhXHPA29AHye5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnTnohGK9nVQ3RaSPurvev1+v8hwwHwYDVR0j
BBgwFoAUjudChIedV2jBTf9Z9AgwdEMCT1IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjMyZTk0NWMtZWQzZC00ODlhLTgzZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4
NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0MzAyNEY1Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84RUU3NDI4NDg3OUQ1NzY4QzE0REZGNTlGNDA4MzA3NDQzMDI0
RjUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz
ZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMw
NzQ0MzAyNEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEGrcDj+VKLUmT0ArAzgxD3DlItUUtFe282K
JhvUEP1g2iV1eD2l6cBKStKzofejwssL0wiYKmDDbKo2TALLvKbY3EMZ4XE7dDvD
mbuUTvAxQLGnjlM+ch0q1RSNeSRX0o76uA5XpI48gf4IRY2ThdFig/SWyxCXm9hq
FVSgDbL7ut9LNsE7QFBNKGFKE7TOtlIg08ChxySSiF9EIuzVZPUmvYjkhc3f7QzY
09lValmOoxUOJiAdhk8N7USQvJ9nPX9HgL1U/rEqlIaZC0P6zzgZq4XnlqiQcwBR
rG2pshbQ+EdUsD2IHfvI93ghvROvmXNdJNetV2zJuGhtzstQ9L8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:15 2026 by rpki-client