Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
File:                     7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft (raw, json)
Hash identifier:          NfftAunkj1ZSP/mH/RKscdTGuknrya6jZ0FbLljDtlw=
Subject key identifier:   97:47:8F:59:F9:AB:B2:6F:7F:DA:FA:41:E6:1B:DF:94:3E:F4:4E:C2
Authority key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20
Certificate issuer:       /CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
Certificate serial:       79145052AEB6940ABF5A5DF3F38DDE0356490EDA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
Manifest number:          6E
Signing time:             Thu 23 Jul 2026 19:08:36 +0000
Manifest this update:     Thu 23 Jul 2026 19:03:36 +0000
Manifest next update:     Fri 24 Jul 2026 21:52:36 +0000
Files and hashes:         1: 3130332e3136302e31382e302f32332d3233203d3e20313534343130.roa (hash: naJE/Bidj2O+YOMcboAw9DP7KPCUYJEXAx9uQDGJprM=)
                          2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: WgEvnA7HrzP4zMt539LVlI9Pa+Gm1+otpgLRC+JlvSQ=)
                          3: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl (hash: kyGNe5oT4P706v7boAGABKRe5jEr+UgXpM83cjm7xB0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl
                          rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:14:50:52:ae:b6:94:0a:bf:5a:5d:f3:f3:8d:de:03:56:49:0e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20
        Validity
            Not Before: Jul 23 19:03:36 2026 GMT
            Not After : Jul 24 21:52:36 2026 GMT
        Subject: CN=97478F59F9ABB26F7FDAFA41E61BDF943EF44EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f6:89:16:ec:fb:2a:16:77:fc:fc:89:21:75:
                    4a:80:f5:a3:49:3f:a2:c5:74:a1:81:6d:0a:a4:3b:
                    41:92:41:8c:b0:88:03:09:4f:7a:a0:de:cc:ad:ec:
                    58:ad:1a:10:0d:ad:5f:08:a3:de:91:32:d0:89:db:
                    e5:d4:83:f8:7b:52:4d:61:0c:a3:73:5f:d0:c6:ce:
                    16:71:25:e5:a6:2d:b9:19:8f:bf:81:f2:e2:53:5d:
                    ac:ea:e3:c1:b5:49:03:72:a4:ca:f6:74:d4:88:74:
                    1e:69:13:c0:67:52:92:0a:b3:ba:33:ab:63:44:f7:
                    6f:3b:e0:cb:34:09:1c:b4:bd:0e:bf:9d:e3:88:7d:
                    d6:b1:7f:2a:a6:9f:7d:99:76:79:30:6c:02:d0:0b:
                    fa:24:fc:97:52:6b:86:8d:8c:e3:25:05:bf:81:f7:
                    e9:d8:54:bc:ca:e1:b2:63:ce:5d:dd:20:71:20:22:
                    38:9a:85:a3:0b:12:0c:d1:ae:f8:d6:b8:5e:69:27:
                    7d:7d:93:ea:eb:b6:36:b8:15:95:7e:e4:67:76:3c:
                    ab:c4:3c:34:dc:e0:02:b7:88:61:66:5e:61:c3:ae:
                    21:16:d2:6e:c0:73:b8:70:71:21:da:af:f8:d2:68:
                    94:f9:3a:81:a2:f8:dc:e3:10:f9:c4:30:0b:7e:81:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:47:8F:59:F9:AB:B2:6F:7F:DA:FA:41:E6:1B:DF:94:3E:F4:4E:C2
            X509v3 Authority Key Identifier:
                keyid:7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fa:24:2f:90:ec:8a:37:bc:c8:e9:d6:07:50:4e:69:d6:8c:
         53:23:ac:b9:d6:f0:f4:c1:b4:a6:d2:19:ad:6a:56:dd:84:d2:
         c0:c4:18:3b:d1:47:df:79:94:9d:d9:63:71:38:3f:38:d2:21:
         1c:84:59:d2:85:38:17:6e:8d:50:c1:5c:0f:1a:7d:07:9f:40:
         e8:cb:98:fd:8a:b7:8e:9b:e0:58:4e:0f:a1:eb:3b:77:69:5a:
         fb:db:d6:8f:6d:e5:bc:5f:26:28:bd:c0:d6:4c:6b:c9:fc:f2:
         70:e2:d6:6b:c7:dc:11:62:10:d8:90:d4:6d:e8:76:6a:c6:60:
         b3:68:4e:58:e2:63:cc:53:a3:50:23:b0:a7:73:1c:ce:3a:14:
         04:ce:f0:5a:0b:e9:8b:0b:c6:32:74:cb:fc:8b:54:8a:63:89:
         8c:70:be:0b:7f:21:76:38:dc:6c:f4:c5:66:96:cb:6e:4b:7b:
         db:e8:7c:9e:ba:4f:58:32:b8:14:87:0d:7d:7a:e8:c4:1d:05:
         3a:9d:5c:bf:1a:48:61:06:73:aa:bc:7f:7e:19:60:ff:68:af:
         0d:a2:7a:4e:b7:1f:9e:db:02:80:38:03:ab:7e:09:1b:8d:8c:
         2a:f4:59:af:2a:ae:52:4e:95:7b:9c:fc:cb:2d:bb:e1:ef:ab:
         d9:40:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:09 2026 by rpki-client