Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
File:                     0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft (raw, json)
Hash identifier:          eyNVCSm+fgwzxp/H/06bd7sQc+rqE4CiMC+HtFXFCeY=
Subject key identifier:   53:88:BC:98:38:9D:CF:AC:F9:FB:87:DD:93:66:9B:96:1D:87:2B:FD
Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
Certificate issuer:       /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Certificate serial:       429BA0538CBFC91E81936B6A820F8B1B59490ACA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 18:29:25 +0000
Manifest this update:     Mon 20 Jul 2026 18:24:25 +0000
Manifest next update:     Tue 21 Jul 2026 20:17:25 +0000
Files and hashes:         1: 0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl (hash: xTgYt12PWvtcXFm8Yl+hqz+co5BcUNDAEG0HrwWkMt8=)
                          2: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: 4mD9TjqePo/yOB3/Fiwn7z8Fd4y7bA97GyieYO2qTlw=)
                          3: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: /Mgyo9ff3zy6arAcZsb+8DNgEw9iCUEDLwcPq3vZVTM=)
                          4: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: MyQFtjJqg7ZYwpERzdoDmD5jzoRErmzO01EIiv31fWg=)
                          5: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: G9sq4ErGZj+4CsLlGYQ96xB1AH1Q/5k7LHe36UaA1Pw=)
                          6: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: HPMtJkG9vBmkfKDdQcScUoOmdbP+traQt1X9CJZPJyo=)
                          7: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: YEcfoQjDpMi0GF8b5kmh9JJ3H1tnO76M1gzrmxVWaMc=)
                          8: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: ooDWixoDrf/cdih9Rb8FLtagmcLYMAGnpLpX2ocgURU=)
                          9: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: sfhfAHrl757lamU4yGIl09WzhCGt6COimj3NHeX2Rnc=)
                          10: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: prcWJfhlUErzmRWR1H7hkcJb4s+PiXSVs4vIyO1/46s=)
                          11: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: k7wAQ0uD+feQhS7bp4KkJxo3uZUwNKoeGm20CJyRgyc=)
                          12: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: 6afeRIJnDM/uUZHogbKxMoXG/M34lmpUP/58vATJWAM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
                          rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 20:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9b:a0:53:8c:bf:c9:1e:81:93:6b:6a:82:0f:8b:1b:59:49:0a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
        Validity
            Not Before: Jul 20 18:24:25 2026 GMT
            Not After : Jul 21 20:17:25 2026 GMT
        Subject: CN=5388BC98389DCFACF9FB87DD93669B961D872BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:91:d5:c5:9d:fb:9f:99:59:ae:fc:73:54:
                    0e:1d:8b:d3:2f:06:8f:2e:db:b7:d4:33:00:c0:81:
                    b1:2e:f0:84:a4:6b:47:cb:b8:92:2e:09:f4:c4:d2:
                    8c:b8:63:8a:a3:9f:eb:1a:cf:f7:99:6d:98:5e:62:
                    99:2a:a3:4e:71:f2:06:c5:0c:b8:01:2b:ef:ca:03:
                    2a:31:a6:94:93:b5:fc:57:fe:7f:d8:b5:d5:d5:92:
                    b8:29:89:db:75:00:35:8c:59:6a:ba:41:35:00:37:
                    8a:9e:dc:50:75:51:22:96:f5:07:aa:a8:1b:e0:27:
                    90:7c:9a:6b:18:4d:44:f7:0d:a0:50:7d:6f:c5:98:
                    7b:d4:38:54:ba:34:03:6d:a8:6a:f8:18:04:8b:de:
                    47:65:90:aa:af:26:e1:06:42:85:06:fb:b7:09:59:
                    19:95:ba:da:37:51:03:2a:77:50:17:ff:36:af:f6:
                    b2:e9:43:52:ae:fe:22:e3:4e:2a:f4:f9:ee:12:7f:
                    42:6b:96:1a:48:4f:d3:9a:49:95:48:53:a5:61:01:
                    a2:b1:ee:1e:e4:9e:59:75:70:12:63:33:79:86:7c:
                    7c:4e:97:ab:57:a9:0d:0e:c7:a1:b9:7c:c8:40:89:
                    2d:34:0d:77:ba:08:33:72:7e:c5:9a:8b:e4:44:bf:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:88:BC:98:38:9D:CF:AC:F9:FB:87:DD:93:66:9B:96:1D:87:2B:FD
            X509v3 Authority Key Identifier:
                keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7f:4d:1a:90:f2:d2:a3:94:88:75:21:5e:f1:db:ae:76:2f:
         6e:5a:33:52:a5:87:3e:71:99:46:a2:0d:78:c2:15:24:59:e5:
         39:ab:db:2c:b3:e5:d8:16:5f:0a:0b:68:46:f2:89:96:26:76:
         69:74:53:3e:6a:27:68:49:59:f4:41:e2:bc:43:06:b5:31:d5:
         ac:f0:6a:44:4d:ff:46:cb:72:1b:24:44:b7:07:26:ba:45:6b:
         74:9d:e2:88:fe:ba:d8:cc:ab:32:33:f0:8f:30:75:ec:fc:fd:
         a4:0e:22:71:d9:9f:28:f1:0b:a7:89:4b:e7:78:dd:57:86:b7:
         9e:d3:9c:a2:61:60:f6:c7:4b:ef:ae:ea:aa:81:59:d2:ea:00:
         e2:78:fa:00:0b:c0:04:bf:dc:5c:f2:c7:ea:83:ed:b4:9a:32:
         68:df:90:5d:f1:e4:65:ee:a3:f0:84:6d:07:8b:b9:35:32:71:
         19:d4:ac:0d:a7:12:eb:b3:e5:3c:42:8a:bd:e7:d3:ea:da:b4:
         ad:75:ae:15:f2:8b:bf:ae:23:74:47:f9:ee:85:af:da:ab:c5:
         d2:7c:79:31:dc:0d:fe:79:93:cf:b6:8f:a2:17:d8:48:08:83:
         60:af:5c:f9:72:52:cc:32:b6:6f:e5:ba:b7:07:1b:96:f9:a7:
         93:40:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:30:14 2026 by rpki-client