Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft
File:                     5BD70FF0C393471CFAF795433474B327BD4832F9.mft (raw, json)
Hash identifier:          tW4AfMutnGuCAA47Lb1wJToUlVf4gnzV2+XIgipcfLQ=
Subject key identifier:   E5:7C:A4:6B:B1:F1:18:1A:98:EC:39:E7:5D:66:59:DC:5B:0F:1E:D6
Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9
Certificate issuer:       /CN=5BD70FF0C393471CFAF795433474B327BD4832F9
Certificate serial:       2898C335F8E0B2148E911E2913E966A1195330D5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 15:13:34 +0000
Manifest this update:     Thu 23 Jul 2026 15:08:34 +0000
Manifest next update:     Fri 24 Jul 2026 16:58:34 +0000
Files and hashes:         1: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: VRIdIq5putn/ECgQ5btezrubt1dqb54ZcZ8apLF1yIY=)
                          2: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: kDdkImc9WCIWpXnaeyzXyBkOibkDgoSjiG8qhXynUZA=)
                          3: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: bBQLsVkx2CpNTLhQIb39ezRJZR+3VFuLJFWKGpnOARA=)
                          4: 5BD70FF0C393471CFAF795433474B327BD4832F9.crl (hash: 7Bz8dN3oCG06xsSgm1bM0Vw6SU+7mvbfKvkm5L2suiQ=)
                          5: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl
                          rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:98:c3:35:f8:e0:b2:14:8e:91:1e:29:13:e9:66:a1:19:53:30:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9
        Validity
            Not Before: Jul 23 15:08:34 2026 GMT
            Not After : Jul 24 16:58:34 2026 GMT
        Subject: CN=E57CA46BB1F1181A98EC39E75D6659DC5B0F1ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:31:2a:b3:ba:bc:7f:03:eb:27:d9:56:f2:
                    78:2a:9b:6a:ee:68:61:6b:db:e2:b9:2d:1f:bc:46:
                    71:f8:c0:57:dd:63:84:d8:71:ae:de:c3:3b:81:07:
                    ee:3f:9b:af:11:f8:ed:58:ed:f6:90:9c:c6:7b:b7:
                    7e:82:df:2e:07:6b:5b:13:25:39:f8:e4:25:9f:2c:
                    62:32:14:0b:d9:3e:04:72:83:db:40:cf:55:eb:b7:
                    b4:7b:5c:b0:d3:71:ac:9f:21:21:a5:12:ff:af:c7:
                    1e:14:0c:54:5d:4a:f5:3b:9f:50:c8:b8:11:4d:ba:
                    a1:31:6b:2a:12:75:a9:da:ee:1e:8b:78:5c:8a:24:
                    86:de:4f:5f:3f:34:a3:0e:4f:40:a6:68:89:24:eb:
                    75:3a:2d:02:d9:9b:46:77:7b:d1:b0:7c:66:9c:ba:
                    92:fc:e9:1b:5c:2f:69:2d:e3:f1:97:0d:e6:4c:22:
                    3d:e1:0c:3d:ec:c3:61:c7:91:ae:85:b8:a5:eb:4f:
                    0d:85:6c:a4:cc:d7:43:65:67:65:a7:3e:36:be:98:
                    e2:88:82:44:7d:c8:3d:f1:06:fc:cb:40:82:2d:10:
                    37:4d:cd:e9:0e:1a:57:e8:8e:c0:fe:14:23:52:3e:
                    a6:ca:af:ef:f2:bd:90:ba:46:91:4c:26:2a:35:51:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7C:A4:6B:B1:F1:18:1A:98:EC:39:E7:5D:66:59:DC:5B:0F:1E:D6
            X509v3 Authority Key Identifier:
                keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ea:41:c9:34:1c:98:a5:7d:ab:30:1b:e0:bd:af:5f:a3:b4:
         63:a5:7c:0b:c5:34:6c:16:b1:a9:58:77:d9:8c:e1:6d:16:f6:
         74:83:d7:47:d2:ec:78:9b:4b:30:9f:49:aa:23:03:9a:a4:5a:
         96:15:61:11:22:2e:41:2a:f2:b3:cb:c3:92:62:bf:0c:05:ff:
         2d:5b:f6:95:ed:d1:94:4e:8e:4a:82:b7:2e:7d:b6:6e:3b:96:
         25:df:ff:3d:8c:97:6a:f8:48:14:a9:55:f5:93:bb:5c:b4:9c:
         2b:d5:2d:4d:bb:42:c0:21:cc:a2:da:bb:b0:e9:cb:8a:8e:2c:
         c6:bd:b9:d8:8b:74:f4:5e:65:33:54:c6:0f:c6:d5:17:42:39:
         61:99:5d:bb:90:c5:53:15:b9:9d:42:70:c4:27:d7:25:63:ae:
         e2:7f:47:d9:57:b9:1c:79:92:9d:ca:6a:de:a7:69:78:57:2e:
         da:2f:f0:c1:94:da:b3:27:d6:f4:67:88:91:18:be:60:b3:ca:
         fd:ff:f0:59:ce:14:57:d1:85:dd:9e:f9:ac:81:f3:92:26:35:
         ba:f2:18:cf:3d:cf:0d:f8:ac:f3:e6:36:82:ed:dc:16:e5:f9:
         9e:04:d8:19:83:c7:82:97:66:36:c6:9c:e5:d9:f3:4b:9d:5a:
         d9:ef:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:55 2026 by rpki-client