Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
File:                     E3D6C125B35E67510271310D928E4578404A3A46.mft (raw, json)
Hash identifier:          UE1VoI9kYgi9A1Q0qjCYmugJHkyMGBVVhsEx8r6XZ90=
Subject key identifier:   7E:6E:39:29:F9:FA:A8:FE:67:92:1C:88:E8:49:16:42:FD:FA:30:37
Authority key identifier: E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46
Certificate issuer:       /CN=E3D6C125B35E67510271310D928E4578404A3A46
Certificate serial:       1742FB25999CF2291A511B6C53E66C1D092D1438
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
Manifest number:          6C
Signing time:             Mon 20 Jul 2026 23:09:40 +0000
Manifest this update:     Mon 20 Jul 2026 23:04:40 +0000
Manifest next update:     Wed 22 Jul 2026 00:48:40 +0000
Files and hashes:         1: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 8qQMC3EFOK3yCgkVj+C7FEr6qF+CfYoBtbfTyKhcjE4=)
                          2: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: T5uRj9PC/T10VKks3wi10c2uBNec4FkHRnP0vvfYiOk=)
                          3: E3D6C125B35E67510271310D928E4578404A3A46.crl (hash: VEXBZvSrVKCjkkU30BurRCzuczdFINLMZtz2ipNdYgg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl
                          rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 00:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:42:fb:25:99:9c:f2:29:1a:51:1b:6c:53:e6:6c:1d:09:2d:14:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D6C125B35E67510271310D928E4578404A3A46
        Validity
            Not Before: Jul 20 23:04:40 2026 GMT
            Not After : Jul 22 00:48:40 2026 GMT
        Subject: CN=7E6E3929F9FAA8FE67921C88E8491642FDFA3037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:5b:06:dd:01:8f:b7:a8:50:2e:0d:8a:22:
                    4a:37:33:9a:cc:d8:51:45:2b:24:1b:5e:ed:4a:ec:
                    83:a5:35:b3:cf:7e:1e:ee:80:09:c3:f1:04:c7:05:
                    4f:15:38:21:b2:01:a1:cf:4c:f9:5a:96:55:1f:68:
                    0f:d4:b9:6b:e0:0e:fb:9d:7d:4b:f0:97:fa:eb:30:
                    df:30:9b:0d:ac:98:d5:98:e5:e1:60:ae:e3:04:03:
                    e2:85:b8:e2:8d:42:93:ec:fd:1e:77:b5:0a:f7:4a:
                    8f:44:32:d6:c5:cc:fd:22:88:86:8b:bc:2f:3d:eb:
                    62:bb:26:78:eb:de:a5:d4:76:e9:6d:71:19:7d:85:
                    d8:f5:cf:5f:90:86:d0:85:ff:28:3a:45:6e:d0:4a:
                    0e:5b:5b:c1:42:de:fc:09:4d:6d:ac:5b:15:28:5e:
                    ec:1c:26:f8:f1:0a:3b:34:3a:7b:c0:c1:7c:ff:c6:
                    47:54:1d:de:39:17:77:f7:93:18:9e:8c:36:ba:a1:
                    ce:ba:a9:83:ac:36:7a:df:d7:a8:dd:32:65:16:54:
                    df:35:bd:5d:f9:a4:50:4c:ad:b7:88:04:bb:93:65:
                    c8:b6:7e:b6:5f:ef:e6:d5:ad:13:2c:87:fe:ce:45:
                    c8:3c:84:53:7a:18:35:29:d6:8f:2f:cf:a1:49:27:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:39:29:F9:FA:A8:FE:67:92:1C:88:E8:49:16:42:FD:FA:30:37
            X509v3 Authority Key Identifier:
                keyid:E3:D6:C1:25:B3:5E:67:51:02:71:31:0D:92:8E:45:78:40:4A:3A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3D6C125B35E67510271310D928E4578404A3A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/E3D6C125B35E67510271310D928E4578404A3A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:58:ff:26:87:e6:ad:3e:fa:a2:74:8f:d0:7a:55:49:65:
         f7:f7:4c:ad:e0:41:86:a3:8c:6c:90:3c:01:13:08:27:21:d8:
         f3:87:cf:76:bb:57:85:c1:0c:90:5b:2f:9e:cd:85:9c:06:5e:
         9c:ba:8b:db:70:d8:4a:a0:7f:89:34:23:9b:99:c6:be:c5:98:
         4a:27:96:44:69:78:f9:ae:55:78:ca:20:07:50:90:f8:5d:db:
         c7:a3:ff:6c:47:83:31:02:c8:d8:3f:ce:78:9f:c3:da:27:53:
         2a:c5:74:14:90:31:23:99:fe:4b:ff:a9:6d:25:04:4c:d4:07:
         b2:eb:18:cc:e8:ae:8e:95:cf:97:2a:21:77:55:c9:05:3d:30:
         f6:7a:7b:89:b4:69:2e:2f:52:69:73:fd:61:ed:84:a4:63:7a:
         19:bc:b1:e4:5b:1d:dd:d1:f9:b8:6f:6b:7f:e5:2e:be:fb:a1:
         20:5b:84:01:0e:d3:a2:6e:22:97:a7:7c:64:8e:09:f2:cf:b2:
         57:a3:8a:7d:f7:ee:2f:19:93:11:2f:a5:f5:0c:50:90:7e:6c:
         25:c6:eb:c2:ba:08:08:24:d0:cb:78:1d:3d:08:31:96:7c:19:
         dd:94:f1:22:20:11:3c:6e:1d:47:ed:6e:c0:b9:a1:1a:bb:2e:
         ad:06:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:15 2026 by rpki-client