Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
File:                     14D784D8F19F00DFBA4C08757485032BE04603A3.mft (raw, json)
Hash identifier:          tsAC58gvW1wMKd31xubrEz5Z6PpIkSu/BkSQ51RwZqM=
Subject key identifier:   E7:65:70:E8:34:F3:D0:0A:42:66:23:33:C2:C2:F4:F8:25:2A:18:02
Authority key identifier: 14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3
Certificate issuer:       /CN=14D784D8F19F00DFBA4C08757485032BE04603A3
Certificate serial:       51C001E1983C9C04B5F099C487AF17D7205B86B1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
Manifest number:          6C
Signing time:             Tue 21 Jul 2026 01:12:17 +0000
Manifest this update:     Tue 21 Jul 2026 01:07:17 +0000
Manifest next update:     Wed 22 Jul 2026 02:42:17 +0000
Files and hashes:         1: 14D784D8F19F00DFBA4C08757485032BE04603A3.crl (hash: i5rXWAOnadeZzGY3d3kTCpiGtiY/g8bQNE+dvK69++U=)
                          2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: 4CcWucwvFiUbV7yGD9jF0QOdXA3+eK3AiJ4whM9p04M=)
                          3: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: rA6w7AOgQeO/23WQ9WTNvbNDGzSTa/seU2ViAzbcvrs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl
                          rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c0:01:e1:98:3c:9c:04:b5:f0:99:c4:87:af:17:d7:20:5b:86:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14D784D8F19F00DFBA4C08757485032BE04603A3
        Validity
            Not Before: Jul 21 01:07:17 2026 GMT
            Not After : Jul 22 02:42:17 2026 GMT
        Subject: CN=E76570E834F3D00A42662333C2C2F4F8252A1802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:9e:5e:b5:11:5d:f8:4c:55:ae:f5:30:7c:
                    39:36:f7:be:7c:d8:c6:e4:f2:dd:de:c8:33:d5:ec:
                    4f:99:86:a8:00:8a:e4:a3:e5:71:44:3c:e1:72:d4:
                    85:c1:51:01:d5:e0:6b:2a:64:8a:59:61:39:cb:4b:
                    dc:4c:db:4f:59:34:7a:44:06:b0:f9:6d:a2:e3:34:
                    6d:85:ec:5a:cb:3e:0e:22:5e:47:ef:c2:ac:d2:7a:
                    71:12:ad:dd:46:fb:84:46:78:de:47:b9:a2:07:1b:
                    d7:72:c5:fd:d9:21:e8:f6:46:88:15:ee:8d:c8:fa:
                    5f:f3:d9:20:12:dd:a5:d0:31:d5:ea:37:bf:2f:46:
                    c0:3a:7c:e4:ab:37:a6:37:68:42:03:a1:08:6d:f7:
                    70:a8:90:0a:e9:d2:02:5a:cf:7a:6a:3d:f6:54:41:
                    e7:4c:3b:6e:d6:e4:7e:d1:e0:20:d4:d8:7f:0c:52:
                    26:a8:f1:20:c2:ef:e5:73:b9:58:b8:8f:e0:49:fc:
                    02:40:d4:43:79:f1:cf:a1:59:db:3f:09:3b:ba:46:
                    7a:88:95:ed:1c:61:a4:5f:66:02:5c:cd:ce:cf:01:
                    0d:c9:26:94:f3:ed:20:42:3d:a9:a7:78:fe:eb:52:
                    da:d9:7c:2f:d5:28:49:04:8c:38:91:2f:fe:14:18:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:65:70:E8:34:F3:D0:0A:42:66:23:33:C2:C2:F4:F8:25:2A:18:02
            X509v3 Authority Key Identifier:
                keyid:14:D7:84:D8:F1:9F:00:DF:BA:4C:08:75:74:85:03:2B:E0:46:03:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14D784D8F19F00DFBA4C08757485032BE04603A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/14D784D8F19F00DFBA4C08757485032BE04603A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:04:3f:ee:46:da:1d:a0:29:a2:69:45:5e:d9:35:54:f6:be:
         35:1b:80:db:f9:3b:46:bc:c1:ba:ce:b3:a3:bd:8a:6f:59:fd:
         bd:cc:7b:d3:3c:9b:5f:6f:62:76:ed:35:90:c7:2a:ac:05:11:
         f9:72:26:b2:30:15:40:9c:44:e7:97:6b:b1:80:bb:60:b3:51:
         31:fa:7a:ee:41:e8:e2:b8:07:b5:11:dd:f9:ae:8b:b9:54:2c:
         02:69:79:87:c9:56:26:76:16:4d:7b:45:d6:6e:90:a2:21:9e:
         b4:88:d3:29:db:4b:fc:7e:a0:b9:2c:99:ef:93:c5:c2:4f:4a:
         cd:52:cb:96:38:43:dc:73:08:15:c5:4c:1c:62:a6:1c:a3:d0:
         8d:b0:f4:b5:1a:13:5d:04:bb:49:a0:38:89:d7:1b:bd:b1:2f:
         ae:01:ad:1c:b0:ca:bd:12:23:9e:c3:23:54:d2:84:e3:05:d6:
         0e:88:96:3f:55:e7:dd:13:8b:bf:0e:1d:26:4e:21:27:c5:3e:
         e5:e6:74:76:1b:89:37:0f:a1:50:4c:03:ae:38:52:3f:2a:00:
         c8:fc:91:ee:50:f5:cf:bd:9e:94:92:b9:49:7d:e3:eb:8c:67:
         c9:39:dd:81:6c:f1:af:41:73:53:99:33:be:f8:ab:c8:c7:6c:
         80:bf:ce:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:52:22 2026 by rpki-client