Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft
File:                     7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft (raw, json)
Hash identifier:          emJLGe2KW5eqzrvnwcrCIdEbBDFHzKAGPVRjN1FS1d8=
Subject key identifier:   09:34:F8:98:11:E2:13:0C:C1:F2:E2:90:F8:10:3A:D0:FA:F0:EC:65
Authority key identifier: 7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9
Certificate issuer:       /CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9
Certificate serial:       4489317BC18CFFC91F42F0F2DAEB47912CC07152
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 14:29:35 +0000
Manifest this update:     Mon 20 Jul 2026 14:24:35 +0000
Manifest next update:     Tue 21 Jul 2026 17:24:35 +0000
Files and hashes:         1: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XAMucgwFmTucBgKdR7YCgdXStPYQxjx/K+G2Z2xF+TI=)
                          2: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl (hash: nkPtEbwA61IjxRxn1vwUb6bOQIkQIgmJtakST0rs8WA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl
                          rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 17:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:89:31:7b:c1:8c:ff:c9:1f:42:f0:f2:da:eb:47:91:2c:c0:71:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9
        Validity
            Not Before: Jul 20 14:24:35 2026 GMT
            Not After : Jul 21 17:24:35 2026 GMT
        Subject: CN=0934F89811E2130CC1F2E290F8103AD0FAF0EC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7d:0f:03:7a:61:18:a4:a2:ee:75:a7:06:9d:
                    1e:76:74:0c:70:5f:63:33:43:72:c4:cf:fe:90:e4:
                    ea:6f:e2:a4:52:dd:73:9c:5a:92:3b:4e:6f:f8:71:
                    e6:73:c2:08:fc:5d:04:93:7c:5a:a0:6f:4a:54:5d:
                    ed:62:4a:4e:4f:55:fc:94:aa:b2:6f:c3:26:00:f7:
                    a5:2a:d2:55:59:36:0d:7d:03:26:50:60:4a:a7:82:
                    b0:37:38:7e:f6:cf:8a:59:62:41:3f:30:87:44:69:
                    dc:75:e4:02:e0:bb:02:dc:62:5d:f5:93:60:86:a4:
                    6d:63:f9:4f:1c:e5:fc:f4:4e:6e:14:7e:7f:1a:34:
                    b5:e2:9d:85:a2:35:d1:1d:7f:d5:bf:03:b0:3c:fe:
                    d9:49:42:76:73:2c:9d:d7:94:a5:5e:c6:8c:fe:c4:
                    0d:fb:90:c1:9c:62:de:b9:83:6f:d3:2d:26:66:0f:
                    42:6d:4e:7d:15:92:9d:4a:70:56:cf:56:4b:13:3b:
                    47:47:d7:5a:0b:83:9f:ea:cf:c0:4a:c0:55:f8:6a:
                    9e:5c:11:ff:08:32:35:a9:47:2b:9d:ea:91:05:c8:
                    54:1b:bb:34:66:41:8f:87:7b:38:04:7f:de:dc:24:
                    a1:1b:46:13:ae:34:2f:55:db:8b:c0:3d:62:6b:1f:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:34:F8:98:11:E2:13:0C:C1:F2:E2:90:F8:10:3A:D0:FA:F0:EC:65
            X509v3 Authority Key Identifier:
                keyid:7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:47:3e:d8:cf:f2:fb:c1:f1:f7:67:9d:a1:dc:20:7e:9b:9c:
         19:42:5b:f1:46:e2:84:c0:42:73:dc:a2:d6:93:0d:fe:7f:38:
         69:d7:31:54:e3:ce:7c:1c:96:63:3e:16:19:97:5d:5f:36:db:
         0a:b3:91:57:9e:c2:ab:ee:ec:5a:49:42:99:11:7b:41:a9:e2:
         75:5e:28:8f:b0:b5:f2:f1:01:49:fc:8f:ef:c5:59:ce:bd:45:
         27:2e:c3:33:6b:6e:f9:97:32:19:c6:1a:bf:6d:dc:46:95:60:
         ed:ab:46:bc:73:6f:43:ae:0f:38:84:ec:9c:36:16:a5:36:57:
         00:a7:09:a1:fc:62:b9:b5:77:db:b3:2c:62:a7:45:c9:e6:ad:
         32:46:d2:cf:79:fb:0c:eb:f4:72:40:79:c0:d3:51:fd:12:ab:
         e6:4e:d4:39:cb:22:f1:19:54:4b:ef:96:19:fe:7a:46:f9:72:
         e3:09:c4:09:97:1e:3f:72:8a:88:fb:1c:8c:4a:2b:11:0d:c7:
         1f:bc:a2:c4:fb:04:a9:1c:96:60:d5:76:95:53:49:0b:83:f8:
         db:c6:1c:9c:5d:54:f6:01:5d:75:a1:e4:0f:e4:11:a8:b6:92:
         5d:d3:a2:ea:5e:22:55:f0:ee:cb:b0:c8:b0:75:ff:4e:7e:3a:
         e5:8e:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:55:22 2026 by rpki-client