Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
File:                     A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft (raw, json)
Hash identifier:          Xi4Iof1gfFycL9olxD2R1kJq1aMSI5ff7jP5E42w9K8=
Subject key identifier:   C2:BC:9E:DB:D0:05:B5:3A:55:BA:DC:40:2C:AD:97:84:44:2D:F3:22
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Certificate issuer:       /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial:       37F067BC58AE58AD0995BF20FB76020F2C9E107F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 21:48:03 +0000
Manifest this update:     Mon 20 Jul 2026 21:43:03 +0000
Manifest next update:     Tue 21 Jul 2026 22:12:03 +0000
Files and hashes:         1: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=)
                          2: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: IgDS+soANP3J3I/M4lqmTWHqHF/CWw4GOux2+pU3uZk=)
                          3: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: 1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=)
                          4: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: oQq+nr1R3/LIq3FYUPDo+7lWe378qim9S5GBtc/7+XI=)
                          5: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=)
                          6: A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl (hash: tskKNmz1GI4kArdo72VQEFAkxcMNTYSaQdWFSs/XdKQ=)
                          7: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: smvcSJU7arKg9wwHjFpQV6E26iIrv2S+SKozwQ9k4AA=)
                          8: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: uZzBwW9d4r/pMm/O/U0uE2dQ0H137+IT+iWRLJXsbtU=)
                          9: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: wOk7wCCxqtS7Iv5pVlomQKnIoRly1bMRWor8VmTMwhc=)
                          10: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: HE8Pj52+IZhV7TEkL1SN8xO4SlYdr60vODvajC36cyk=)
                          11: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: ZpP6fFTVzHg2TsrE8eBvLbSiODy4VISVHgrK1I2J8vE=)
                          12: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=)
                          13: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: y/B5rdY50adVs0er15Ug7P5cwgk8KxerWANg5QHwyDQ=)
                          14: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=)
                          15: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=)
                          16: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: g9UTMN38ofb78nZGj/6EE+B5/x+vpqW+tFIfQppedNY=)
                          17: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: YctTfX6DGOTRKPoRHGUwycW4/Zl5+c5Mmaff4w6V6rg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
                          rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 22:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f0:67:bc:58:ae:58:ad:09:95:bf:20:fb:76:02:0f:2c:9e:10:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
        Validity
            Not Before: Jul 20 21:43:03 2026 GMT
            Not After : Jul 21 22:12:03 2026 GMT
        Subject: CN=C2BC9EDBD005B53A55BADC402CAD9784442DF322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:34:0a:bf:29:9a:6b:98:ae:4b:28:27:77:
                    5b:50:57:8f:f8:85:21:13:41:92:04:e4:ad:e5:1e:
                    69:57:e7:55:49:8d:a6:ed:9c:87:01:5b:3d:31:03:
                    2b:c6:10:f9:03:c1:0e:1e:61:06:e3:79:f4:e3:56:
                    9a:ff:c0:fc:1d:4c:c2:2c:ad:62:d8:6f:e3:78:44:
                    b4:f1:fb:f1:ae:d6:83:9d:70:21:d9:2a:66:bf:df:
                    45:a8:04:81:66:84:9a:55:c3:44:41:f3:27:f9:19:
                    b4:64:64:a8:7c:b3:7a:f6:03:2c:4a:fb:98:45:36:
                    f4:e3:57:1a:6b:a5:80:35:d6:65:ee:d7:d6:3d:5c:
                    f5:09:a6:a2:3e:2a:70:80:4e:c4:76:86:77:80:5e:
                    d5:2f:2b:c9:3f:66:88:6f:e7:a1:60:3f:5a:0f:02:
                    ee:1a:47:c4:f8:ac:91:81:15:10:e4:b4:2d:6c:23:
                    2f:33:f0:29:3b:f5:3c:58:1e:36:7d:59:7e:f6:d2:
                    f9:93:de:05:35:50:45:e9:cb:40:47:dd:7e:9d:de:
                    f6:16:fc:b3:97:11:71:4e:bb:0c:0e:b8:53:de:83:
                    c2:a9:de:4a:86:5a:5a:a9:99:6c:cc:b3:aa:80:42:
                    a3:b8:e8:50:bc:80:6a:4a:12:e9:4a:53:98:a5:53:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:9E:DB:D0:05:B5:3A:55:BA:DC:40:2C:AD:97:84:44:2D:F3:22
            X509v3 Authority Key Identifier:
                keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:dc:6e:a2:6c:25:11:67:19:f4:56:3d:fe:ea:7f:52:2e:a8:
         a9:dc:27:ae:fb:74:1d:72:fe:0d:13:df:84:89:e9:a1:07:32:
         dd:e8:12:1d:03:53:f1:3c:1e:4a:00:03:66:6b:4e:72:09:81:
         82:d7:78:12:a7:e4:24:fb:aa:42:ff:41:83:98:29:de:03:73:
         46:de:d5:31:80:ea:97:18:97:3b:0b:1c:17:37:ce:26:fd:de:
         f4:7a:69:10:a0:c5:f4:d6:0d:2d:44:e2:36:94:70:76:79:48:
         b9:43:d7:a5:8e:b4:2c:28:6e:7b:2d:ad:fd:90:cd:c7:15:92:
         15:46:db:a8:d7:b6:33:cc:62:d2:62:30:ec:36:b4:0a:dc:27:
         27:8a:54:51:96:56:a9:af:c4:bf:a8:e8:08:42:e6:44:3f:88:
         93:00:93:7d:86:d6:21:64:0c:cf:5b:40:8c:0a:8b:33:37:e2:
         f8:7b:bc:ce:57:19:9d:aa:16:e7:5c:2a:74:93:8b:17:ed:aa:
         08:7a:cc:b0:b5:a9:14:d2:95:9b:46:6e:fc:5e:f2:77:a0:55:
         6f:d2:ba:6e:17:d8:b8:bc:f7:a5:b4:81:f9:09:55:0c:32:ee:
         e2:a2:e5:98:d8:3e:17:77:46:ce:73:70:c7:1c:df:9a:c0:f2:
         e7:68:9b:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUN/BnvFiuWK0Jlb8g+3YCDyyeEH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYy
RTNCMDc5QzAeFw0yNjA3MjAyMTQzMDNaFw0yNjA3MjEyMjEyMDNaMDMxMTAvBgNV
BAMTKEMyQkM5RURCRDAwNUI1M0E1NUJBREM0MDJDQUQ5Nzg0NDQyREYzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJljQKvymaa5iuSygnd1tQV4/4
hSETQZIE5K3lHmlX51VJjabtnIcBWz0xAyvGEPkDwQ4eYQbjefTjVpr/wPwdTMIs
rWLYb+N4RLTx+/Gu1oOdcCHZKma/30WoBIFmhJpVw0RB8yf5GbRkZKh8s3r2AyxK
+5hFNvTjVxprpYA11mXu19Y9XPUJpqI+KnCATsR2hneAXtUvK8k/Zohv56FgP1oP
Au4aR8T4rJGBFRDktC1sIy8z8Ck79TxYHjZ9WX720vmT3gU1UEXpy0BH3X6d3vYW
/LOXEXFOuwwOuFPeg8Kp3kqGWlqpmWzMs6qAQqO46FC8gGpKEulKU5ilU6eDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwrye29AFtTpVutxALK2XhEQt8yIwHwYDVR0j
BBgwFoAUpmi82omtA11Ja2TPJyRaXy47B5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWZmNGViY2QtMjljZi00ZWVjLWE5MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4
OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYyRTNCMDc5Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNjY4QkNEQTg5QUQwMzVENDk2QjY0Q0YyNzI0NUE1RjJFM0Iw
NzlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5
MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVB
NUYyRTNCMDc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA7cbqJsJRFnGfRWPf7qf1IuqKncJ677dB1y
/g0T34SJ6aEHMt3oEh0DU/E8HkoAA2ZrTnIJgYLXeBKn5CT7qkL/QYOYKd4Dc0be
1TGA6pcYlzsLHBc3zib93vR6aRCgxfTWDS1E4jaUcHZ5SLlD16WOtCwobnstrf2Q
zccVkhVG26jXtjPMYtJiMOw2tArcJyeKVFGWVqmvxL+o6AhC5kQ/iJMAk32G1iFk
DM9bQIwKizM34vh7vM5XGZ2qFudcKnSTixftqgh6zLC1qRTSlZtGbvxe8negVW/S
um4X2Li896W0gfkJVQwy7uKi5ZjYPhd3Rs5zcMcc35rA8udom3U=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:41:57 2026 by rpki-client