Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
File:                     3488252FDADC73654E2AAD815316475C9A5F94D8.mft (raw, json)
Hash identifier:          GUQfRtzTIG9jqDDm+1MNZE/XFE4k1eH7M8kBCi0YdWk=
Subject key identifier:   1B:59:6C:66:4C:32:C5:15:8C:43:41:28:A7:5B:CA:B2:3B:F9:CF:F5
Authority key identifier: 34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8
Certificate issuer:       /CN=3488252FDADC73654E2AAD815316475C9A5F94D8
Certificate serial:       19DF4FBB8A479726CE2C32C014064D874216734E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 15:44:10 +0000
Manifest this update:     Thu 23 Jul 2026 15:39:10 +0000
Manifest next update:     Fri 24 Jul 2026 18:07:10 +0000
Files and hashes:         1: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: jobGwFNdEOGscb8Suy+yh9BDuSyd+S9zj8PbD+vSbcU=)
                          2: 3488252FDADC73654E2AAD815316475C9A5F94D8.crl (hash: gmkVnI7rYLVSTzXhb9Z6C6IPQvkdQrVzWvFOlazbWlE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl
                          rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:df:4f:bb:8a:47:97:26:ce:2c:32:c0:14:06:4d:87:42:16:73:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3488252FDADC73654E2AAD815316475C9A5F94D8
        Validity
            Not Before: Jul 23 15:39:10 2026 GMT
            Not After : Jul 24 18:07:10 2026 GMT
        Subject: CN=1B596C664C32C5158C434128A75BCAB23BF9CFF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:2f:af:6a:35:7e:0c:1c:8b:10:b0:e7:dc:
                    ab:69:a4:7d:71:6a:02:bd:e9:5d:6e:52:a8:8f:53:
                    c4:bc:5d:77:d8:7b:95:f7:8c:df:bd:34:b1:23:29:
                    93:9f:cb:1d:c1:de:80:3f:3f:ac:e1:3b:b9:da:9f:
                    61:56:f4:cd:66:6e:c0:af:4a:14:5b:7f:34:01:b7:
                    95:11:4c:6e:fa:cf:6b:09:ec:80:28:6c:bf:ae:2f:
                    55:bf:bb:e3:74:52:dc:01:77:cc:b9:b0:46:92:8f:
                    5d:8d:a8:a9:ee:0a:7e:86:ed:87:7c:fc:6c:35:aa:
                    b3:84:0b:75:da:9b:a4:74:e7:dd:66:71:c6:13:85:
                    91:80:59:97:66:28:94:62:d2:7f:1f:45:c9:21:41:
                    6f:55:b3:8c:f7:c4:48:34:78:4c:11:ca:02:4c:9f:
                    4a:7e:87:d5:0f:ef:c8:7d:aa:61:f0:96:f4:6c:ff:
                    ba:c8:bf:94:f0:96:68:44:e4:2e:43:70:74:9e:cd:
                    97:4c:4c:81:e4:80:f3:49:8e:17:53:90:6b:41:55:
                    7c:9e:69:81:f9:85:33:32:eb:98:81:8f:fb:c2:b5:
                    14:ce:f2:4e:df:01:61:b6:40:97:dd:7d:74:04:75:
                    c3:bc:1e:19:3a:96:e7:38:d7:19:d5:d0:2f:4b:78:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:59:6C:66:4C:32:C5:15:8C:43:41:28:A7:5B:CA:B2:3B:F9:CF:F5
            X509v3 Authority Key Identifier:
                keyid:34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:64:9f:d3:f8:16:63:27:25:64:21:9e:8b:91:bf:36:5c:ef:
         dd:1f:cf:45:41:c1:06:90:ab:a1:48:22:19:54:85:9e:0a:29:
         c9:8b:6c:51:3e:97:75:1e:ec:86:48:d1:ac:1c:0e:6f:15:75:
         93:52:fe:78:6c:1a:f7:a6:6f:51:6a:8d:0c:7f:19:ff:d5:ca:
         f0:8e:fe:04:8b:97:c2:3c:ec:f2:c7:91:0c:7c:f3:17:38:6d:
         8c:60:df:6e:c7:76:35:d7:38:f9:c6:2f:4c:ff:5e:45:0e:6a:
         63:5c:74:77:a6:5e:d8:19:f6:e7:87:01:12:61:08:a7:fd:62:
         8c:b2:8c:91:24:39:90:c7:87:ee:43:d9:37:e4:9c:b0:11:0a:
         81:14:60:49:fa:ed:2d:97:2e:a2:a0:40:81:7a:21:0f:78:0e:
         c1:65:3e:84:8b:37:e5:48:2c:ea:59:55:d1:29:1a:06:f3:0c:
         d6:c8:1c:79:5e:fd:c0:ee:46:ae:ff:2c:9f:0f:12:23:22:c4:
         17:05:25:97:c6:a6:a5:05:72:1c:f3:b1:5c:bd:13:b2:c1:ff:
         74:6a:2a:f6:ca:f1:85:04:5a:c2:93:3a:e3:db:da:7a:c6:a6:
         9d:62:a0:c2:ba:82:2d:1f:66:09:fb:31:10:cf:20:37:03:35:
         7b:b4:1a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:06 2026 by rpki-client