Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
File:                     E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft (raw, json)
Hash identifier:          UNjdbNx62n6+MeBYvSqRxYgeaqYpUt3YbXDzrobTwdA=
Subject key identifier:   0B:A7:4C:E1:6D:5A:F0:81:00:EE:FA:2E:F3:69:A8:70:26:C4:3A:77
Authority key identifier: E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25
Certificate issuer:       /CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625
Certificate serial:       4AA9590E664C7181ABD55E960FD6DA7B0C3FEC59
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 13:21:20 +0000
Manifest this update:     Thu 23 Jul 2026 13:16:19 +0000
Manifest next update:     Fri 24 Jul 2026 14:43:19 +0000
Files and hashes:         1: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: 0CCDYy/I/lMXwPNc0U/+5ITduVGZmmxxNNoPayR3Zi8=)
                          2: E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl (hash: B9l/P+Fu39YO5MjwLcendKvaxrLgVC29l0TcifcSqwM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl
                          rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 14:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a9:59:0e:66:4c:71:81:ab:d5:5e:96:0f:d6:da:7b:0c:3f:ec:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625
        Validity
            Not Before: Jul 23 13:16:19 2026 GMT
            Not After : Jul 24 14:43:19 2026 GMT
        Subject: CN=0BA74CE16D5AF08100EEFA2EF369A87026C43A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:f5:5a:44:a7:e5:14:62:11:89:e9:53:b8:
                    8a:b6:3f:6b:df:eb:6c:f8:ac:af:e9:d0:66:2f:0e:
                    a5:22:a7:2d:de:de:d7:b5:bf:22:c4:87:aa:f5:95:
                    48:de:c5:6c:f6:75:20:f1:49:57:80:a1:8f:96:a6:
                    b8:77:85:aa:af:53:68:f2:2b:63:4e:18:22:2d:16:
                    f1:76:2a:f5:b9:29:43:b8:f7:32:3b:58:a8:ed:cc:
                    9a:e3:32:20:b0:fa:22:f5:7e:2c:18:cf:b2:0b:4b:
                    b5:5c:dc:84:da:7c:c5:1c:29:51:3c:eb:45:2f:74:
                    b3:e5:a6:88:9e:36:e0:0d:58:5c:27:3d:df:81:41:
                    5e:dd:4a:18:7c:85:07:d8:73:86:d2:c3:1b:fe:35:
                    fa:9d:e4:7c:d7:f8:3a:42:2b:86:51:16:7a:12:f6:
                    58:38:37:d4:c1:88:f3:a4:b4:64:83:e3:08:13:16:
                    31:f1:f0:85:d3:22:59:8a:02:ae:95:b7:39:de:4c:
                    6f:b3:ae:5f:0b:68:34:d0:95:90:c1:e7:99:27:11:
                    63:99:de:f6:cc:71:8c:70:3d:be:32:a6:e9:15:4e:
                    23:ac:14:b9:03:47:31:c2:ff:1b:d5:c7:da:34:c6:
                    4a:24:02:eb:46:20:b1:7e:91:64:2b:41:fe:77:6b:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A7:4C:E1:6D:5A:F0:81:00:EE:FA:2E:F3:69:A8:70:26:C4:3A:77
            X509v3 Authority Key Identifier:
                keyid:E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:69:8f:8c:de:37:80:2e:ea:26:d6:1f:17:07:70:0a:a7:38:
         50:77:41:72:0b:30:d5:37:13:0e:75:c0:bf:4e:1e:88:aa:b4:
         9b:50:5e:e3:1e:70:83:3e:dd:15:36:75:49:88:88:d5:97:7d:
         1d:42:46:92:f3:10:53:fc:fe:59:c6:0f:df:d9:a9:6c:90:1a:
         21:86:da:a2:b3:5a:00:4b:d1:31:fc:87:bd:bc:fc:0a:39:57:
         0b:45:7b:81:77:57:cc:34:b1:2f:3b:f4:e1:e4:c1:75:b6:44:
         03:8a:9b:c3:ee:3b:19:79:f7:3a:41:c1:7a:33:8d:cf:b3:ba:
         e8:60:a5:a1:f2:4f:58:f6:29:84:ee:6f:8a:48:05:16:d8:9c:
         33:c6:d8:20:7f:5d:72:fe:13:df:ae:68:23:a8:99:a3:04:e8:
         7c:93:b7:ca:20:e5:8e:6e:f6:c8:35:08:92:a9:b4:5f:07:b7:
         8c:ca:09:19:1d:bc:0c:16:8a:6c:d4:77:dc:57:a4:56:86:29:
         2f:1a:ff:39:b7:08:5d:99:5a:95:88:9e:76:52:6f:70:17:2b:
         2c:f9:a6:ce:06:52:d8:00:37:2f:be:06:4c:93:d8:67:0a:c3:
         32:db:d5:27:52:72:a5:28:4c:73:08:8c:88:dc:d1:49:fe:aa:
         96:97:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:30 2026 by rpki-client