Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
File:                     A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft (raw, json)
Hash identifier:          VhobQM4GP9I7VNlzz9XtHipExkTa4D93E140aW+qUzE=
Subject key identifier:   0E:79:A3:2F:25:F1:D6:BD:F5:D2:64:9D:7E:D2:12:45:FC:8C:07:47
Authority key identifier: A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A
Certificate issuer:       /CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A
Certificate serial:       14C5A164132A75B9B909C1E239B9E4FB5FBE8825
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
Manifest number:          6B
Signing time:             Tue 21 Jul 2026 04:05:59 +0000
Manifest this update:     Tue 21 Jul 2026 04:00:59 +0000
Manifest next update:     Wed 22 Jul 2026 05:02:59 +0000
Files and hashes:         1: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: pKo3R747DDUIneHm99mAHqDIwYFklZR6NNCcsU54reo=)
                          2: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: eZlsFaLITxkPeJNSHzaVTJrd/LDOmMtodzgFU/hBW40=)
                          3: A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl (hash: 3Oal5iHULZ1K3TbxtBn7FZdLVpdY50Zqr0frzfxUbdg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl
                          rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c5:a1:64:13:2a:75:b9:b9:09:c1:e2:39:b9:e4:fb:5f:be:88:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A41D152A0460A0DA31127B1915A05DA55C72EA9A
        Validity
            Not Before: Jul 21 04:00:59 2026 GMT
            Not After : Jul 22 05:02:59 2026 GMT
        Subject: CN=0E79A32F25F1D6BDF5D2649D7ED21245FC8C0747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:e9:72:56:74:4a:3f:ab:69:45:85:fe:a3:
                    b7:99:29:64:70:bc:51:00:11:5e:81:f8:8b:a5:54:
                    50:92:7d:02:05:a4:3a:4e:8e:7e:4f:81:86:89:7f:
                    47:7f:d9:f6:d6:95:e4:28:8b:fa:e8:9a:13:e7:0d:
                    95:1b:76:2e:f4:02:67:88:6e:db:bf:e6:97:89:87:
                    f0:7d:3b:4b:99:5f:d9:dd:52:30:58:ed:05:be:6c:
                    98:a3:44:32:14:84:f3:d4:5e:89:53:fa:23:df:03:
                    82:d2:b1:a3:36:d4:29:a3:14:d8:bb:38:e7:5f:a1:
                    a4:8b:9c:fd:6b:84:74:4a:17:6a:fa:69:56:b5:3b:
                    12:2f:0f:84:b5:7c:ea:4b:8d:c1:3e:2b:73:29:98:
                    ae:6f:44:7c:98:f7:92:1a:5c:60:6d:59:ed:36:71:
                    ed:9a:e2:8a:19:38:c9:4e:9d:fc:fb:29:83:f5:16:
                    17:3b:3e:49:66:43:20:3b:3c:a5:a5:3e:71:5b:70:
                    de:d4:0e:03:5b:c6:be:18:c0:66:ef:d6:5c:20:ed:
                    9b:e9:30:0e:f0:e6:dc:5c:1e:67:54:c8:d1:53:1e:
                    24:cf:cd:f3:c9:38:0e:09:97:c8:f2:c4:f7:f7:ba:
                    a2:67:8f:a6:7c:9e:ab:d5:13:f6:16:e8:be:94:29:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:79:A3:2F:25:F1:D6:BD:F5:D2:64:9D:7E:D2:12:45:FC:8C:07:47
            X509v3 Authority Key Identifier:
                keyid:A4:1D:15:2A:04:60:A0:DA:31:12:7B:19:15:A0:5D:A5:5C:72:EA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A41D152A0460A0DA31127B1915A05DA55C72EA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/A41D152A0460A0DA31127B1915A05DA55C72EA9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2a:6e:9b:df:6e:83:df:fa:4d:49:a0:43:2d:38:f2:13:c1:
         20:39:4c:df:f5:5d:15:7b:09:53:08:6f:cd:7a:76:83:46:4c:
         ea:ab:69:74:41:10:7b:d2:a2:c5:ba:bc:e0:00:e5:8a:86:84:
         ca:63:96:11:f6:b1:7d:c8:a0:e6:6a:97:fa:fd:73:8b:ef:c5:
         55:92:16:1a:33:21:58:b9:51:b0:04:c7:a9:cc:78:c9:38:f9:
         a3:ae:8d:19:4f:4d:20:28:3d:d3:8b:23:ca:aa:ae:e7:3a:07:
         17:65:8f:e4:01:42:ca:a5:5b:33:1d:75:56:5a:85:30:58:f0:
         b4:3c:28:d9:6a:e1:f9:0b:e7:37:21:34:04:fd:75:90:1b:bb:
         85:38:e3:01:3b:eb:10:bf:8d:74:7f:b8:be:ba:fb:20:e9:9f:
         29:55:c3:ba:8a:41:54:3d:cd:96:2b:f6:ea:d6:30:ee:5c:37:
         99:96:f3:1d:a3:02:df:d2:c4:40:b9:8e:26:c2:4a:aa:97:e1:
         94:8c:73:9b:98:33:f4:d1:72:82:67:ba:62:d2:19:da:3f:0f:
         58:8e:1b:2a:3b:2f:2c:1a:18:27:3b:e5:e4:99:a1:6c:3c:13:
         15:b8:59:07:1b:9a:ae:8d:59:d4:c4:bc:0f:07:fb:8f:d7:92:
         9d:65:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:05 2026 by rpki-client