Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
File:                     6A18E24186A3D3ED8D5089777A2464365FF00A27.mft (raw, json)
Hash identifier:          aK67Olfc6biieRltet8AtslOv8yS08UjtSfC1YjBUMg=
Subject key identifier:   22:06:D5:DB:3F:D3:D4:88:05:A3:AE:6D:87:68:92:2E:EA:3D:9B:71
Authority key identifier: 6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27
Certificate issuer:       /CN=6A18E24186A3D3ED8D5089777A2464365FF00A27
Certificate serial:       58D10DA4E98454AD841290D90BDED9EA11D8783E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
Manifest number:          F6
Signing time:             Wed 04 Nov 2026 03:17:06 +0000
Manifest this update:     Wed 04 Nov 2026 03:12:06 +0000
Manifest next update:     Thu 05 Nov 2026 06:51:06 +0000
Files and hashes:         1: 6A18E24186A3D3ED8D5089777A2464365FF00A27.crl (hash: L0UV8WOEr0V/U58k0RKfGDooQyx7bFwbdNBbhtdE8nE=)
                          2: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: h3C8yms9g4R1YiVLRu6ZS9/9U4FvJR5pkKQb8FutKck=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.crl
                          rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 06:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d1:0d:a4:e9:84:54:ad:84:12:90:d9:0b:de:d9:ea:11:d8:78:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A18E24186A3D3ED8D5089777A2464365FF00A27
        Validity
            Not Before: Nov  4 03:12:06 2026 GMT
            Not After : Nov  5 06:51:06 2026 GMT
        Subject: CN=2206D5DB3FD3D48805A3AE6D8768922EEA3D9B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:c8:75:84:c9:af:c2:a8:77:20:be:33:ad:
                    51:04:f9:01:6e:31:00:41:6f:f2:55:e0:95:35:23:
                    62:e8:21:44:f2:4a:f1:e6:b9:20:a3:88:06:71:47:
                    bd:bc:86:03:98:10:31:02:10:ea:63:6a:5f:ec:64:
                    eb:23:6f:e9:08:f5:24:92:af:3c:ab:cc:cb:45:5f:
                    fb:07:0d:5a:99:52:d2:72:1a:0b:f4:b2:e8:9f:2b:
                    29:49:0e:05:b8:76:1e:76:b7:3c:55:aa:07:9e:bb:
                    8a:10:99:63:d1:53:03:69:97:48:b0:65:ea:ff:f3:
                    f6:4a:41:fe:f3:9d:8b:89:d5:3e:11:3f:9f:b4:a5:
                    96:99:c8:6c:ef:73:2c:cd:c6:65:79:b5:8a:98:cc:
                    a5:f5:cd:ca:0d:d3:b3:e0:1c:32:1e:45:fb:f4:61:
                    df:66:ab:b4:51:48:d2:5a:cb:89:8c:92:62:d9:e3:
                    f3:04:64:98:e7:c3:b3:cd:fe:55:3f:04:76:24:7f:
                    95:fa:2e:92:41:a3:b9:bd:4a:f9:80:a5:dc:5e:af:
                    31:1a:34:a5:ec:4e:d3:42:0c:89:2d:eb:9e:19:11:
                    b8:a2:23:90:f0:04:68:8a:31:f7:09:9e:56:7c:78:
                    e9:d1:3f:04:16:28:02:fa:36:71:2b:a1:ed:3c:e2:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:06:D5:DB:3F:D3:D4:88:05:A3:AE:6D:87:68:92:2E:EA:3D:9B:71
            X509v3 Authority Key Identifier:
                keyid:6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:26:53:ba:be:c6:39:d6:8c:42:60:10:89:a9:e5:10:c1:
         97:34:8d:68:c6:c5:89:78:48:77:08:da:23:96:c2:dc:0e:b4:
         e1:31:7c:22:72:d8:56:6f:af:ee:23:bc:77:fc:4c:9b:1f:37:
         33:e8:c3:b7:63:b4:07:07:30:05:04:ff:ab:bb:39:04:2c:a3:
         59:51:7d:c5:cf:d3:15:a3:14:0a:9d:c5:c8:2d:95:e2:b1:7b:
         d1:cb:59:56:5a:6d:26:a0:a3:2d:e3:93:de:22:ba:aa:fe:23:
         5f:ea:ff:5a:e1:f8:de:a8:14:4e:be:b5:7e:08:ef:c7:04:bf:
         18:2e:fe:dc:8c:6b:ca:48:af:20:af:36:a3:76:d7:6d:d5:b1:
         f6:bd:f4:9f:a8:24:e1:6c:7f:7d:fe:82:8c:db:3c:b5:c8:91:
         57:4e:80:8f:0a:e5:72:00:04:cf:5c:44:7f:9b:39:10:3d:7f:
         f1:69:83:76:a4:f0:01:78:92:20:69:b7:fc:26:4a:ec:1c:83:
         97:2d:e4:6c:c2:0c:d3:71:95:ab:aa:65:fa:76:fb:0c:85:34:
         19:cd:dc:a0:88:34:ae:00:0c:02:96:dc:86:a6:c4:d0:00:d5:
         28:2d:13:63:1c:10:22:b4:ff:2a:96:78:21:59:fe:64:03:70:
         f3:02:5d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:23:17 2026 by rpki-client