Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
File:                     66B373A1A8E4839699E23D35A5592185C65D4217.mft (raw, json)
Hash identifier:          0FZlgNKyrD/HGBWqBrEyL7CeC6UiLiH6RleAhh7wAFc=
Subject key identifier:   0E:93:A3:44:03:B1:CE:18:4E:4F:11:C0:21:38:83:E8:44:23:A6:FB
Authority key identifier: 66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17
Certificate issuer:       /CN=66B373A1A8E4839699E23D35A5592185C65D4217
Certificate serial:       073D3095F059BDE00B5C0F13AEAE126612ACA118
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 11:05:06 +0000
Manifest this update:     Mon 20 Jul 2026 11:00:06 +0000
Manifest next update:     Tue 21 Jul 2026 13:57:06 +0000
Files and hashes:         1: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: WyiqkRr/WwMALxqKWgtBGW8I5DUVuOnXnmofYyW+gKQ=)
                          2: 66B373A1A8E4839699E23D35A5592185C65D4217.crl (hash: t+NabvTHQ8g17UVBSUJs/3DglOPlpLHn7yGzk63cl74=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl
                          rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 13:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3d:30:95:f0:59:bd:e0:0b:5c:0f:13:ae:ae:12:66:12:ac:a1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B373A1A8E4839699E23D35A5592185C65D4217
        Validity
            Not Before: Jul 20 11:00:06 2026 GMT
            Not After : Jul 21 13:57:06 2026 GMT
        Subject: CN=0E93A34403B1CE184E4F11C0213883E84423A6FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:d9:1b:9a:18:c7:c6:97:27:48:96:6a:47:
                    58:0a:05:84:7f:07:fc:54:ef:88:01:b7:3e:f4:27:
                    d9:7b:ae:61:44:21:b6:c7:77:6f:9c:c7:89:9a:22:
                    a4:ea:0e:21:b3:3d:4f:49:7e:74:83:b7:9a:85:26:
                    37:b7:ff:cf:a5:d8:9e:36:4e:07:d4:13:fa:16:4a:
                    06:1c:7f:4e:be:c0:b2:51:9c:14:63:b1:66:e7:49:
                    98:5d:74:49:64:d7:65:34:ff:e4:84:bb:f2:2a:3b:
                    6c:c6:fe:63:c6:e2:94:87:57:23:d0:1f:a8:33:f1:
                    c7:b1:8e:d5:ea:0b:fd:ea:dc:45:16:dc:ab:2c:85:
                    0d:ac:05:9a:fa:e0:ae:42:2b:71:c8:1a:64:70:5e:
                    a7:1d:0f:21:69:e0:34:d2:85:5a:6c:d6:0e:00:b1:
                    0f:65:51:d0:9c:0c:ad:70:81:2d:08:80:21:a5:de:
                    fa:6c:34:80:43:03:55:4f:97:de:16:3c:7c:66:39:
                    1a:db:9c:57:71:60:a7:fc:06:20:c6:a6:74:fb:3a:
                    79:c3:7c:9d:f7:a1:d2:59:86:a1:49:62:a3:bd:f2:
                    c0:fc:98:b1:89:aa:ca:26:a1:b7:63:9a:6f:1b:1a:
                    2f:56:ab:51:fe:ca:83:cd:0c:67:64:ce:aa:7c:61:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:A3:44:03:B1:CE:18:4E:4F:11:C0:21:38:83:E8:44:23:A6:FB
            X509v3 Authority Key Identifier:
                keyid:66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:80:9d:f1:3e:fd:ae:f3:0f:dc:dd:77:be:b7:27:fc:7c:
         82:2f:22:6c:c6:93:6e:5d:ac:f6:39:a2:4e:5d:38:c2:c8:b2:
         4e:0c:45:f2:7e:11:8b:a6:8c:40:74:ea:27:14:c8:df:7c:7d:
         c4:91:e3:0e:7c:9e:8d:db:ae:16:63:fe:73:1e:30:fd:a6:1e:
         bc:ef:1d:38:54:d5:c2:15:35:c9:f3:16:0e:c2:09:62:49:e6:
         ed:7e:a1:ea:25:f7:9f:4f:c3:d2:6e:9f:0e:ba:ad:9f:32:72:
         71:86:35:2f:44:aa:ee:ce:33:9d:98:33:ef:8d:e3:d6:a3:e7:
         0d:c8:c7:f1:ad:d5:b9:5f:ee:81:9a:fc:8c:e9:f4:27:f8:63:
         ef:5f:2e:e2:a3:cc:39:06:d4:47:b2:9e:32:aa:5b:63:d0:5b:
         9e:2e:53:58:2e:de:49:a4:c2:f0:19:09:a0:5c:d9:34:ed:04:
         f4:d0:d7:87:64:28:dd:7f:ac:02:4c:fe:ec:a8:6a:3f:db:62:
         d1:12:48:96:a9:5e:3a:43:b9:56:cc:2f:ad:27:a9:8a:ea:f8:
         2b:cf:83:27:87:54:cc:0d:ce:48:af:f0:a6:43:af:e2:34:9a:
         ec:8d:1d:14:f2:62:d9:b9:d8:84:92:4d:03:58:1d:81:b4:f5:
         0a:a0:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:47 2026 by rpki-client