Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft
File:                     DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft (raw, json)
Hash identifier:          qhs/qpaY8ZU9F4Y2RM+LeUx3PybuvcllN/fcqVXp/1w=
Subject key identifier:   95:7E:88:6F:6B:97:6B:19:65:B2:3F:A3:01:D2:B8:E1:3D:C7:1D:C9
Authority key identifier: DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60
Certificate issuer:       /CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60
Certificate serial:       08F8761885C1878C635FDF598042A74BAB5B6DD3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 10:07:29 +0000
Manifest this update:     Thu 23 Jul 2026 10:02:29 +0000
Manifest next update:     Fri 24 Jul 2026 12:04:29 +0000
Files and hashes:         1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: Sq/TPHjnHcU8BdlRhTUGNyaSgFRduqyHP60YOl+s/e4=)
                          2: DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl (hash: 2Kas721zqpO7lqYINH1BpedfW4/e4laFDr1rEDFVSdQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl
                          rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 12:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f8:76:18:85:c1:87:8c:63:5f:df:59:80:42:a7:4b:ab:5b:6d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60
        Validity
            Not Before: Jul 23 10:02:29 2026 GMT
            Not After : Jul 24 12:04:29 2026 GMT
        Subject: CN=957E886F6B976B1965B23FA301D2B8E13DC71DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:9b:9c:b2:9e:83:e1:6f:73:26:f2:64:da:
                    c0:d6:fe:50:b7:e8:38:d6:90:be:5d:0b:7e:d4:db:
                    fe:c8:57:7b:b6:3b:de:81:d8:b7:d3:26:ce:e6:04:
                    3f:e5:7d:9f:5a:4f:66:a1:8a:9a:8f:99:1b:6b:db:
                    02:17:3b:48:3c:c2:b0:f0:dd:76:db:60:9c:01:ce:
                    c1:52:f5:ff:fd:91:49:f1:4f:ac:7d:0b:b6:81:02:
                    98:f5:83:ed:0d:08:e2:cb:59:15:02:ea:22:1b:1d:
                    39:7a:5c:86:d4:26:95:f1:0c:1d:fa:10:0e:f5:51:
                    c3:9d:cb:ec:76:b0:bc:71:df:5a:8f:bc:8c:e2:0d:
                    dd:e6:ec:02:64:32:32:c3:09:93:5a:57:4b:fb:2f:
                    d4:da:2b:86:89:9f:9c:ca:d2:47:60:66:3e:6e:77:
                    32:49:d3:ee:a9:44:d9:42:5b:f0:32:e0:93:04:58:
                    c7:29:86:53:90:b7:3c:4a:be:3a:57:91:af:ba:f6:
                    f7:fd:0f:fb:ce:56:86:37:9c:0a:95:12:5f:a4:af:
                    53:73:22:29:ec:83:67:95:f0:28:92:d0:3c:e1:93:
                    37:b7:5f:2b:69:04:51:28:36:21:0a:e0:64:ae:75:
                    93:d9:66:a4:73:c4:a9:44:50:76:ce:b0:d6:17:51:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7E:88:6F:6B:97:6B:19:65:B2:3F:A3:01:D2:B8:E1:3D:C7:1D:C9
            X509v3 Authority Key Identifier:
                keyid:DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:90:60:1b:1e:62:5d:2a:1e:d2:93:99:43:f3:dd:c8:9b:b0:
         a8:b3:4d:42:83:6a:2b:a5:5f:50:b0:b3:c2:cd:eb:99:50:d4:
         30:ab:23:52:42:ba:94:3a:6a:3d:63:37:a8:2b:29:9d:ba:96:
         19:99:d7:52:fc:5e:bf:1b:cf:5b:c9:55:15:70:fc:dc:f2:30:
         9c:7a:a0:48:f4:7f:14:5c:ae:21:0d:81:26:5e:5b:26:7f:ee:
         84:46:fe:13:86:c9:1b:2b:b2:06:34:c3:36:d9:b5:e8:32:f0:
         3c:71:fe:d9:61:ed:d9:6e:8d:e7:80:cd:d4:ed:8f:c2:ad:2f:
         06:68:b8:9e:30:e4:81:8b:53:f4:3c:66:a2:e5:e3:ee:6a:e1:
         14:94:89:22:a0:25:f3:61:c6:71:7b:07:e2:c7:be:1b:53:8f:
         b6:9c:0d:d0:9d:1d:14:83:3a:39:c3:c0:70:d5:79:1c:fe:9f:
         ed:4c:fe:e8:f1:27:cf:f3:12:60:f9:97:99:2f:36:7a:2a:dc:
         57:12:56:d2:b3:79:ed:a1:a1:28:34:9d:51:05:4a:41:4b:f8:
         db:f5:af:dd:ab:e2:36:35:04:5d:bf:e7:57:05:23:33:6f:0a:
         a7:17:f3:0f:58:5c:48:ae:2f:16:3c:fb:6d:3e:36:bd:87:2a:
         5c:64:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:51:16 2026 by rpki-client