Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
File:                     CB0A606FD0642E68B5212AE751953E0B9A92959F.mft (raw, json)
Hash identifier:          9xLGdmWNuQHPZ6iL6ObmvWtG3aHSoRJAvyamHY0fNFI=
Subject key identifier:   14:B3:F6:82:A9:E9:B3:50:1F:DA:43:9A:D9:EA:AF:32:F9:01:06:8B
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Certificate issuer:       /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial:       2A6F53127EE5E35973E73DC66F3B8A9D1E2FC854
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 17:46:48 +0000
Manifest this update:     Thu 23 Jul 2026 17:41:48 +0000
Manifest next update:     Fri 24 Jul 2026 18:34:48 +0000
Files and hashes:         1: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: 2cmHQI8Ii2ZFNygrFMRrShrlpj0r3MxaKMXRFrpSYWY=)
                          2: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: pmR02dkQafQv6lkZHXLfGyWNIfCNGG5yyCQI8aG1kiY=)
                          3: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: NngQ0IQfUPOCY/8TWuIA/cVIqSFiTXs2casQNFQDWbs=)
                          4: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: c+MUV7F3nnYwWrux4q4qrlxJQ1ToGP6qwbUAs1FDJW0=)
                          5: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: ywl7AR88MYiWygarcTKtVBDK6lhCOvMO3Qakyf62g7s=)
                          6: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: Z9BOHD/0KrdQ2ipOJFVWwYLdiKLHdOuinxG+lCgyfSU=)
                          7: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: W5LcKD4qmyridtk0HHxoc6aUkig5ncs0tdqV8KTXwMk=)
                          8: CB0A606FD0642E68B5212AE751953E0B9A92959F.crl (hash: 72+caRKTbWfquzqqb433tS2q9lZNZcHd4oz3L5ITPdY=)
                          9: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: J+BYXWntjVPciAkV8uAI34vToZOhTHZAVg1OfJSHksA=)
                          10: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: 2M+FnZ1ZBmMQrnhoHJr000wngHRS8OoEKdb0quE5URw=)
                          11: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: oXW42mmGQUgoWkxhSR0n+zgivDmIH7l+dG/1UKZo3a4=)
                          12: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: 38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=)
                          13: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=)
                          14: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: SV66tcdcW0NqPU/aqR6DolEDFMy8zRwKuiBnvzj6cUg=)
                          15: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: /7ofNppVXJF7mFM2WeV7e0wu+6LZLrIveqoSX8uAT6s=)
                          16: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: YBmRyy3cm/KALp/wtAif41lJP/42XGDuyciPr2frXjE=)
                          17: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fRTHSzlS/kkerP4SjyexReRSZRyzRj6VQ2sAHATlKhQ=)
                          18: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: pwtW5wr69XSa+qZr3l0EvDhYLbCZs1lpWX5AfsziilE=)
                          19: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: zvyBHXFbCbQNnOHxvObPOxxpHvAaypqH5xRId3rVWNo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
                          rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6f:53:12:7e:e5:e3:59:73:e7:3d:c6:6f:3b:8a:9d:1e:2f:c8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
        Validity
            Not Before: Jul 23 17:41:48 2026 GMT
            Not After : Jul 24 18:34:48 2026 GMT
        Subject: CN=14B3F682A9E9B3501FDA439AD9EAAF32F901068B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:bc:cb:8f:c3:5f:75:7b:73:d0:fe:1c:f1:
                    7d:0b:9a:d6:70:cf:25:e9:ce:b0:8e:9d:59:2b:45:
                    b6:d6:3f:e0:4b:30:ea:f9:2f:e5:51:1b:a9:66:1b:
                    b7:88:3a:0e:81:81:76:09:99:da:92:5f:42:32:55:
                    f9:5c:40:58:02:53:c6:3e:74:3e:fd:cf:e9:87:8a:
                    2b:c6:e5:fb:60:cc:27:4d:99:0b:ff:51:37:d9:76:
                    57:5f:37:fc:1a:9f:3c:65:9f:96:f7:66:72:eb:1e:
                    3d:50:ff:98:bc:20:50:f0:96:b5:6c:ee:bc:e4:d0:
                    98:09:4f:aa:19:2a:d4:23:0c:b0:bc:9d:6d:a2:7e:
                    46:67:18:59:bf:bc:c4:42:99:52:45:14:b0:5a:83:
                    3c:df:fe:e7:78:f4:1d:f7:59:01:5c:0f:bc:c2:39:
                    6b:bc:d3:57:bc:7a:b1:9c:fa:71:28:17:ca:05:3b:
                    ce:51:48:3c:ff:93:63:47:93:6a:f6:6f:84:ab:74:
                    9b:59:60:04:40:5a:02:2e:2f:5b:95:71:5f:b8:67:
                    42:dd:f6:36:c6:01:a4:81:61:a1:a9:b2:ff:7d:8d:
                    59:aa:52:2d:f6:9c:90:a8:ed:19:d1:e9:fc:81:7c:
                    be:09:6f:24:71:b6:1c:63:3e:7f:5f:2c:e7:2c:86:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B3:F6:82:A9:E9:B3:50:1F:DA:43:9A:D9:EA:AF:32:F9:01:06:8B
            X509v3 Authority Key Identifier:
                keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2f:56:4a:cf:5b:55:fe:60:d3:d1:a4:7c:64:d6:23:66:14:
         29:05:21:5a:5e:04:97:ca:b7:9e:85:be:97:35:cb:68:50:25:
         9d:1a:dd:71:76:65:d7:7e:b8:e8:5e:44:dc:8b:cb:88:f2:c8:
         9c:7c:4b:ce:95:52:91:99:58:c3:16:20:60:7a:0e:ea:5e:cf:
         50:d6:ef:ed:ef:51:c3:5d:a8:c5:db:23:50:03:47:0d:10:42:
         b2:eb:f5:fd:ee:20:4f:80:ab:85:2c:62:b4:f3:e0:67:f9:f2:
         44:06:ad:23:f1:84:43:f2:07:80:25:00:6d:2d:a5:5f:84:90:
         d3:a8:2c:e3:4a:f1:ba:b8:09:2a:23:7a:cf:4c:2d:c1:16:99:
         3c:fd:eb:33:6d:26:41:ef:53:eb:e9:f0:3c:1a:91:97:a2:96:
         59:3b:28:70:cd:e0:03:67:37:5c:41:b3:2a:8c:ab:cb:1d:d4:
         9a:70:99:c1:98:c6:04:bb:80:b2:40:6a:ec:c0:13:f7:0e:ef:
         9c:f2:5f:f4:f6:66:86:1c:b5:7f:90:ff:e5:f3:55:0f:49:57:
         65:e2:50:d1:3a:92:f6:9e:fb:a5:ce:c5:18:a4:4a:1b:94:cf:
         df:fa:cc:12:96:bc:1f:3e:9d:3b:f2:eb:a0:b7:ee:62:e1:d1:
         1c:21:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:31 2026 by rpki-client