Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
File:                     0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft (raw, json)
Hash identifier:          kVm4jgpSFRbnTsMizUS88Oo/MYMkv3v0mcNpNf1pus0=
Subject key identifier:   DE:E1:D0:EA:20:EE:DA:0E:8E:27:32:6E:30:F7:53:F3:75:84:FF:3A
Authority key identifier: 05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
Certificate issuer:       /CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Certificate serial:       4440734AAB144AA4496B6D1976F7F0A07DC8D534
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
Manifest number:          6B
Signing time:             Tue 21 Jul 2026 05:07:05 +0000
Manifest this update:     Tue 21 Jul 2026 05:02:05 +0000
Manifest next update:     Wed 22 Jul 2026 07:20:05 +0000
Files and hashes:         1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: puG9tEvlwR1Rqa0nAJ5US5V0FBLntY3L8sj4Hpd3IlU=)
                          2: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl (hash: Lvw1A/RXRcaRAYiVJTUCAB2SvNz5Faja8vqkdIjg5AY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
                          rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:40:73:4a:ab:14:4a:a4:49:6b:6d:19:76:f7:f0:a0:7d:c8:d5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
        Validity
            Not Before: Jul 21 05:02:05 2026 GMT
            Not After : Jul 22 07:20:05 2026 GMT
        Subject: CN=DEE1D0EA20EEDA0E8E27326E30F753F37584FF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:89:2a:6d:fd:19:44:49:09:ff:ff:5c:67:
                    bf:87:93:a2:7b:a0:ff:83:bb:e1:b8:38:44:36:01:
                    fe:d3:7c:f1:a2:46:06:0e:81:df:58:f9:5a:1c:40:
                    fc:c4:7b:04:6f:90:b3:ef:56:c9:89:48:0d:7e:06:
                    10:a1:8d:9e:13:14:e7:9d:66:05:af:37:ab:a6:4d:
                    95:a3:3a:a3:8d:0c:79:dc:c9:40:e8:8c:c9:cc:f7:
                    8a:38:7d:45:68:58:d0:49:2d:8d:bb:2f:02:39:2e:
                    75:29:b1:09:7c:cd:56:89:de:09:89:12:b3:7f:c5:
                    76:5d:1f:3a:bc:88:f2:44:dd:38:a3:8a:1a:f7:14:
                    45:68:3c:f0:52:bd:18:1f:a4:da:09:c8:60:ef:7a:
                    ba:90:34:4b:31:b1:67:2b:88:57:8a:2a:49:b9:dc:
                    98:40:a4:ef:c4:ac:14:b1:b0:2a:b4:6d:d3:2c:2b:
                    91:78:2f:6b:eb:fa:47:7c:9d:33:8b:6f:8a:27:5d:
                    6d:2d:6c:a2:1e:24:e9:dc:27:8d:48:b8:9c:92:33:
                    78:ca:35:19:03:ab:ae:c0:6c:f2:c6:94:2b:54:76:
                    a9:2b:61:42:c9:ce:df:81:ce:d8:42:33:91:37:7e:
                    0c:8a:d8:17:12:e3:8d:4a:8c:d6:fa:da:29:08:96:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E1:D0:EA:20:EE:DA:0E:8E:27:32:6E:30:F7:53:F3:75:84:FF:3A
            X509v3 Authority Key Identifier:
                keyid:05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:55:25:e2:05:7c:25:a8:fb:79:43:b9:6f:c9:f5:86:3a:f1:
         7e:d0:7c:a5:78:f6:9e:1a:9c:89:f6:49:05:ef:d9:d1:9a:0b:
         15:96:0b:54:13:fc:28:58:33:e1:7a:72:2a:d3:99:e0:56:09:
         ec:a8:99:bd:80:b3:f2:c2:31:1c:ba:09:b9:cf:58:1d:7c:a7:
         ab:e8:84:49:0f:53:cd:8f:c8:8c:26:66:7d:48:f1:71:05:65:
         85:06:d1:ef:62:69:f8:15:ef:22:1f:74:8b:39:1f:03:a5:31:
         55:16:ba:a3:da:79:bd:0e:d1:0c:46:de:94:07:7e:94:24:32:
         de:37:40:64:c7:de:ea:84:1d:b6:17:19:28:40:18:fd:b8:d8:
         75:f4:07:cb:cf:a9:58:94:75:92:7e:be:28:07:67:3a:c9:10:
         4e:6a:8a:9f:c6:6a:5e:41:cd:97:d5:a0:c7:15:c8:2c:c8:14:
         38:02:9c:3e:a2:36:f4:00:4a:b9:4e:21:75:fa:c4:33:62:54:
         81:71:f0:07:2c:a8:12:e2:d3:16:a9:d5:a9:d0:65:7c:0c:90:
         88:ee:0a:f4:17:80:00:1e:10:01:43:91:89:0d:d5:71:9b:fa:
         31:72:15:7e:4e:f1:8e:99:90:02:a2:9c:5e:a9:79:7b:83:ae:
         f2:48:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:05 2026 by rpki-client