Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
File:                     E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft (raw, json)
Hash identifier:          oDVwmdxwhPChrrD9N3g51iOoVYRfl/jk3RYkLyscoKE=
Subject key identifier:   5E:13:01:FE:C7:72:08:01:C2:65:B2:F9:4E:E5:73:FC:20:B2:0D:F1
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Certificate issuer:       /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial:       D3F7282564A141EB2A132107F718304698AF73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 23:50:35 +0000
Manifest this update:     Mon 20 Jul 2026 23:45:35 +0000
Manifest next update:     Wed 22 Jul 2026 03:46:35 +0000
Files and hashes:         1: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: 89aIdO+EcaO2EgEgxRB/RqjR0BzQuTZKwEZg7t/EUN8=)
                          2: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: gkAC5+StdnMaSqYuGVBT+3ErlRAaXIJGp1TwiVqa81g=)
                          3: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: T79Acu3dFfSJnZwf5MfpW3ZPl2jn6Xl5KVc/Lh8xgf0=)
                          4: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: vki+XStGqNG/jPbkEYt4lyDUr4IU7G8v5buzOalFaw0=)
                          5: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: cc/saxfe9KKXtfm7XzpNhS/kTpo6bsyBLZi4D549YFI=)
                          6: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HjyzaNQUCQhEFQ4hKYw2ku34SqSG+Q21ZyHYmX0dpFM=)
                          7: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: StV9pAMf1Ct261g28sLeCDLoQr5OW67xNFsrQ9jD6wc=)
                          8: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: zi1G9BahVDm/M7Dcf6hyf4kk3uCGA92haLufy2kBDKs=)
                          9: E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl (hash: gMDq81lcKzwSRJ/Gdj5oIJcV/s6XhSC17UnP71mzhAk=)
                          10: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: Q3r0bAYb72ZQ2Fp1fAghigXkWh4LdobhrwQdO/opI/0=)
                          11: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: SHELRlR+bO1G1+56lQPkLv609BfDTEBVrD9A+nbY330=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
                          rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d3:f7:28:25:64:a1:41:eb:2a:13:21:07:f7:18:30:46:98:af:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
        Validity
            Not Before: Jul 20 23:45:35 2026 GMT
            Not After : Jul 22 03:46:35 2026 GMT
        Subject: CN=5E1301FEC7720801C265B2F94EE573FC20B20DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:88:c7:ae:4a:3d:77:5d:70:3d:f3:87:8a:
                    2e:b1:75:cd:56:10:83:2a:7e:b9:fd:a5:a3:b6:57:
                    e7:95:ca:43:5a:d6:1d:ff:e6:b8:32:24:42:fc:92:
                    e2:ab:73:42:ce:93:28:a1:8e:fa:4f:ae:75:97:ca:
                    2f:20:79:cc:91:d5:4f:8d:2e:0f:4f:10:64:8d:95:
                    33:ac:0a:f4:3e:e4:d2:64:6d:56:33:87:dd:08:c9:
                    83:aa:00:df:2e:a3:51:88:2a:73:14:eb:4e:d2:c7:
                    c0:21:0e:5b:fd:9c:13:32:74:65:c1:46:97:15:3e:
                    d3:dc:ae:20:b5:b0:d6:03:f3:e0:92:e0:31:19:35:
                    8b:91:8a:8d:1f:d8:85:f3:e5:a6:47:c7:d5:ea:c7:
                    ff:d6:5f:8f:0e:0e:a3:a2:e0:f1:38:9f:aa:08:ab:
                    a0:38:2b:7e:1c:41:f4:e7:f8:6e:96:ce:da:71:8e:
                    d1:c9:86:04:33:fa:a7:9d:c2:fb:ee:3a:80:e9:98:
                    84:87:e3:08:e0:98:42:55:ac:01:87:88:39:22:52:
                    61:13:10:a7:b5:9e:db:13:78:54:86:00:e0:5b:6d:
                    0b:18:02:bc:cb:e5:ef:fb:c0:33:7b:c5:ef:70:bc:
                    08:15:b9:15:7e:ec:6d:a9:09:dc:e6:36:7c:71:92:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:13:01:FE:C7:72:08:01:C2:65:B2:F9:4E:E5:73:FC:20:B2:0D:F1
            X509v3 Authority Key Identifier:
                keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:0a:de:10:6e:ab:99:74:29:57:6e:a1:39:f4:c3:62:33:ef:
         6e:9f:f5:e5:ae:65:86:86:ba:52:c0:27:78:54:66:b2:70:e6:
         3a:3d:e3:34:24:78:7b:33:95:e1:5e:04:97:77:35:62:ef:32:
         9b:d7:fb:65:9e:a2:6d:ad:e6:36:28:47:d6:5b:c8:d2:84:2a:
         e1:40:2f:62:af:98:b5:58:f7:1b:d5:7d:c3:bb:48:24:13:26:
         7c:cd:c8:3d:85:66:f6:4e:16:a9:34:9c:14:53:72:bb:59:bc:
         7e:3c:ec:73:76:ae:fb:b7:8f:14:66:62:e3:42:55:93:1c:b5:
         f6:f7:42:33:58:e0:78:d0:e7:bd:f4:db:8f:1b:4c:f9:3e:24:
         4a:71:71:c6:09:13:a2:81:0c:f9:9d:9a:91:c4:66:01:20:86:
         61:71:ce:97:8c:7f:94:f9:6f:ab:f1:58:cf:a6:3b:4e:c7:36:
         a4:a5:9a:2f:13:e6:c6:a9:09:30:e0:95:88:46:4d:5c:ad:d8:
         d7:d1:4c:6a:d2:f1:61:8d:1b:d2:98:9e:e8:78:9f:fb:1e:ef:
         b1:99:8b:00:aa:51:42:bd:da:71:64:86:68:dd:d9:35:56:2b:
         d2:92:bc:5d:dc:e7:c2:a3:6a:d5:84:66:41:41:30:f8:ec:88:
         9c:30:64:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:29:15 2026 by rpki-client