Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
File:                     D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json)
Hash identifier:          9E4iipuOe7byuwgrkcFY1sUSAKxSRZ0/3dTZpO1zF4o=
Subject key identifier:   19:3F:02:E4:36:31:77:D3:2E:AD:4B:E0:8C:43:2C:D5:D7:D7:10:01
Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92
Certificate issuer:       /CN=D35962E8F839460DC5283C472D81ADB87BBD3992
Certificate serial:       010BA83001E740A168AE2EC359330666123C1858
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 18:37:52 +0000
Manifest this update:     Thu 23 Jul 2026 18:32:52 +0000
Manifest next update:     Fri 24 Jul 2026 21:40:52 +0000
Files and hashes:         1: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=)
                          2: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=)
                          3: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=)
                          4: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=)
                          5: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=)
                          6: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=)
                          7: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=)
                          8: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=)
                          9: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=)
                          10: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=)
                          11: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=)
                          12: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=)
                          13: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=)
                          14: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=)
                          15: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=)
                          16: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=)
                          17: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=)
                          18: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=)
                          19: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=)
                          20: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=)
                          21: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: 30azY9IGclUR5G0uTl95UylW/xbxOakut2WrAoZDkao=)
                          22: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=)
                          23: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl
                          rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:a8:30:01:e7:40:a1:68:ae:2e:c3:59:33:06:66:12:3c:18:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992
        Validity
            Not Before: Jul 23 18:32:52 2026 GMT
            Not After : Jul 24 21:40:52 2026 GMT
        Subject: CN=193F02E4363177D32EAD4BE08C432CD5D7D71001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:24:38:88:5b:e2:c8:32:33:1f:db:3f:00:
                    84:13:3d:d5:54:95:3b:8a:ec:ba:bc:3f:5f:04:62:
                    57:c5:1a:d2:b6:6e:4c:47:10:5f:61:6e:73:7f:97:
                    be:33:ba:fa:27:bf:42:a8:d9:0a:f4:3d:b4:72:92:
                    92:00:2b:65:8e:d7:0b:e2:7d:9e:69:6a:02:0a:6f:
                    23:b2:91:39:d9:40:4a:55:2d:c8:b8:9d:2d:59:54:
                    3c:20:dc:cd:1e:67:de:bd:0f:c1:5f:d6:3b:3f:e2:
                    d1:17:94:ac:4e:03:cd:2b:f5:2e:a9:d1:29:c2:0b:
                    13:8c:f3:a1:ee:ba:e8:41:fb:84:a6:b9:91:93:73:
                    be:23:d8:79:a9:8d:3c:ab:e7:91:9c:20:08:a9:ce:
                    58:96:2d:87:94:20:bf:2d:4d:f9:c7:54:bb:83:42:
                    1f:cb:5e:db:34:e0:94:5c:cc:8f:18:be:47:30:96:
                    dc:9e:71:d9:a6:bf:e2:b6:d6:db:90:34:ec:b0:74:
                    72:ab:f9:e9:85:a6:9f:c1:62:06:4a:f4:33:c3:1c:
                    32:01:a3:ef:26:cc:8a:77:4e:84:bd:ec:ed:d6:2a:
                    4d:9d:8b:c4:e6:aa:01:5c:33:aa:e3:e0:1c:c2:a2:
                    61:d6:01:6a:d1:40:74:3e:be:73:4d:c1:fb:4a:25:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3F:02:E4:36:31:77:D3:2E:AD:4B:E0:8C:43:2C:D5:D7:D7:10:01
            X509v3 Authority Key Identifier:
                keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ca:56:78:bb:55:85:9f:e5:a6:54:04:6c:85:67:00:ff:3a:
         54:90:cb:ce:7c:b5:d2:eb:a8:9c:bb:6d:53:fa:68:95:96:9f:
         eb:84:52:8d:fb:5c:0f:81:46:79:37:e1:27:69:92:96:a0:96:
         48:d5:ae:01:fb:99:b1:fe:a9:ef:3d:9f:dc:b3:ba:93:90:e3:
         2a:50:ea:b1:50:8e:72:82:3e:78:a6:4b:ac:72:65:fb:02:57:
         f6:b2:93:67:15:ad:08:84:28:18:1b:69:78:98:41:64:0e:08:
         9f:e9:f1:ec:2d:5c:31:ee:8e:32:ba:a1:6d:a3:ee:9f:66:76:
         fe:c4:b2:a4:71:54:6b:29:03:4c:83:f6:cd:d2:21:b5:e6:75:
         1a:3f:92:c4:2d:d3:f9:d9:45:22:f6:8d:0f:13:b2:1a:c6:2e:
         4e:33:63:5e:54:3b:ac:a2:8c:58:80:7c:5f:43:27:50:d0:e5:
         0c:fe:32:3c:cd:bc:22:25:ac:f8:65:75:fc:5e:c1:a8:1b:a4:
         06:62:a9:3c:66:7a:af:6c:a9:fa:bf:c2:d1:f3:50:54:c4:7b:
         2f:76:32:1e:9d:87:cf:05:99:35:ce:90:ed:90:c4:c7:47:01:
         5b:d2:32:24:2f:7a:80:2d:29:60:a1:08:3e:07:02:f2:9e:c0:
         d7:c7:a9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:18 2026 by rpki-client