Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
File:                     58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft (raw, json)
Hash identifier:          op7sQccwkzLX9aosrq68VrfofxUAYk7eSAMAYZMnwM4=
Subject key identifier:   FB:42:38:CA:73:A4:AE:53:3E:A5:9C:C9:64:90:BF:04:86:15:87:74
Authority key identifier: 58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19
Certificate issuer:       /CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519
Certificate serial:       1DB477B10E74462CD358426F5C127625F51DDE7E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 07:08:43 +0000
Manifest this update:     Thu 23 Jul 2026 07:03:43 +0000
Manifest next update:     Fri 24 Jul 2026 10:24:43 +0000
Files and hashes:         1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: //BNbGEHF8EA4DRII1hDL8v8FS3Stqlu+4PQCjhVKuc=)
                          2: 58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl (hash: KIGbAh66AZS0fDXEdZF0VG30i67dZWn4NYoSxgsT04o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl
                          rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b4:77:b1:0e:74:46:2c:d3:58:42:6f:5c:12:76:25:f5:1d:de:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519
        Validity
            Not Before: Jul 23 07:03:43 2026 GMT
            Not After : Jul 24 10:24:43 2026 GMT
        Subject: CN=FB4238CA73A4AE533EA59CC96490BF0486158774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:6a:29:5d:59:d7:05:f7:f5:11:c4:ff:40:
                    de:73:db:c8:75:d6:b6:48:76:35:f9:27:01:ba:d7:
                    ed:07:67:40:07:ec:71:d3:eb:c8:ea:7f:48:45:81:
                    4c:a6:fc:b9:10:7e:5b:4a:01:5d:96:c9:b4:fc:a3:
                    ee:51:12:d5:ee:c3:78:3d:99:c8:0c:75:2b:8b:54:
                    0c:ff:61:05:f0:e6:a0:2b:f6:f9:38:1a:f6:65:8b:
                    1f:b6:34:ea:27:95:a8:66:6e:75:8a:fb:4a:30:05:
                    1e:87:37:00:91:76:59:6b:64:69:45:f7:fb:f9:66:
                    35:ad:68:05:e8:c9:f1:f4:65:b5:f0:b6:69:c2:e6:
                    e3:3d:4c:4e:5d:5b:58:bc:f8:ce:ab:d7:ef:e7:ad:
                    c3:ad:87:43:7a:fc:a0:f5:1f:fe:dc:9a:44:60:10:
                    8b:7c:fd:2c:e4:2b:c4:08:b5:0f:66:ab:8b:1a:c4:
                    f6:d1:45:dc:5d:af:46:4b:87:ea:d0:ea:03:2e:15:
                    9f:0c:c1:56:2b:01:66:90:bb:ce:a8:91:40:dd:7e:
                    66:9f:3f:fc:de:ef:ba:25:74:24:e2:af:44:93:1d:
                    af:95:0f:c7:b1:83:6d:ae:1c:fb:fa:54:04:1e:05:
                    19:83:f6:8a:14:36:e4:3f:66:d0:41:2a:ba:db:a7:
                    33:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:42:38:CA:73:A4:AE:53:3E:A5:9C:C9:64:90:BF:04:86:15:87:74
            X509v3 Authority Key Identifier:
                keyid:58:BB:A1:92:4B:FD:E2:BE:38:61:D3:C2:EA:43:82:6F:9C:6D:F5:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/58BBA1924BFDE2BE3861D3C2EA43826F9C6DF519.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:29:eb:8f:fc:8e:70:65:bb:6e:42:ee:9e:4b:2a:6b:71:0c:
         d7:0e:37:55:85:9a:5c:c8:1b:1d:35:f1:54:7d:1f:d5:4b:07:
         65:8e:0e:fd:56:74:c0:f4:37:88:03:64:13:41:2c:e1:fc:87:
         35:d6:e3:d7:37:56:65:c8:76:c8:85:22:72:84:13:10:56:ef:
         0d:d5:f4:a2:ef:91:22:46:dc:72:6a:65:55:fa:13:f4:e9:5f:
         74:bc:96:70:3a:15:ef:8f:7c:6c:ba:b3:da:c9:90:7d:52:03:
         83:fd:8b:d9:ad:9e:fd:83:96:67:3c:1d:52:9b:51:b2:12:c4:
         ae:83:cd:d1:e5:f5:b0:6e:b5:7c:c8:ca:3b:4e:bc:ee:86:09:
         b8:f2:af:b1:ed:69:67:96:57:88:ef:a0:62:b5:a5:32:5e:ca:
         ae:c2:fe:8a:b5:9c:19:6a:d9:01:0d:77:92:f7:50:d2:f1:bc:
         ec:a0:84:90:7d:d5:47:4b:bc:ab:b1:74:f7:1a:8d:ea:2f:05:
         2f:51:88:3b:62:1a:f7:85:64:d4:fc:5e:da:31:52:7f:a2:59:
         22:33:56:c0:dc:81:0a:f6:ed:00:8c:30:f7:ed:11:db:ea:a0:
         78:21:ee:3c:14:cf:21:e8:32:f9:3f:16:8e:f3:f7:06:02:83:
         5d:e8:88:54
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHbR3sQ50RizTWEJvXBJ2JfUd3n4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThCQkExOTI0QkZERTJCRTM4NjFEM0MyRUE0MzgyNkY5
QzZERjUxOTAeFw0yNjA3MjMwNzAzNDNaFw0yNjA3MjQxMDI0NDNaMDMxMTAvBgNV
BAMTKEZCNDIzOENBNzNBNEFFNTMzRUE1OUNDOTY0OTBCRjA0ODYxNTg3NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlGopXVnXBff1EcT/QN5z28h1
1rZIdjX5JwG61+0HZ0AH7HHT68jqf0hFgUym/LkQfltKAV2WybT8o+5REtXuw3g9
mcgMdSuLVAz/YQXw5qAr9vk4GvZlix+2NOonlahmbnWK+0owBR6HNwCRdllrZGlF
9/v5ZjWtaAXoyfH0ZbXwtmnC5uM9TE5dW1i8+M6r1+/nrcOth0N6/KD1H/7cmkRg
EIt8/SzkK8QItQ9mq4saxPbRRdxdr0ZLh+rQ6gMuFZ8MwVYrAWaQu86okUDdfmaf
P/ze77oldCTir0STHa+VD8exg22uHPv6VAQeBRmD9ooUNuQ/ZtBBKrrbpzNRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+0I4ynOkrlM+pZzJZJC/BIYVh3QwHwYDVR0j
BBgwFoAUWLuhkkv94r44YdPC6kOCb5xt9RkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGI4NDNmMDAtMjgyMy00NzMyLTliN2MtZDhjZmU2MzAxMGRjLzAvNThCQkExOTI0
QkZERTJCRTM4NjFEM0MyRUE0MzgyNkY5QzZERjUxOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OEJCQTE5MjRCRkRFMkJFMzg2MUQzQzJFQTQzODI2RjlDNkRG
NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli
N2MtZDhjZmU2MzAxMGRjLzAvNThCQkExOTI0QkZERTJCRTM4NjFEM0MyRUE0Mzgy
NkY5QzZERjUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKwp64/8jnBlu25C7p5LKmtxDNcON1WFmlzI
Gx018VR9H9VLB2WODv1WdMD0N4gDZBNBLOH8hzXW49c3VmXIdsiFInKEExBW7w3V
9KLvkSJG3HJqZVX6E/TpX3S8lnA6Fe+PfGy6s9rJkH1SA4P9i9mtnv2Dlmc8HVKb
UbISxK6DzdHl9bButXzIyjtOvO6GCbjyr7HtaWeWV4jvoGK1pTJeyq7C/oq1nBlq
2QENd5L3UNLxvOyghJB91UdLvKuxdPcajeovBS9RiDtiGveFZNT8XtoxUn+iWSIz
VsDcgQr27QCMMPftEdvqoHgh7jwUzyHoMvk/Fo7z9wYCg13oiFQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:12 2026 by rpki-client