Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
File:                     6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft (raw, json)
Hash identifier:          6eBELbcu/v3tGwHcdW6TAVI96UiRWyMaRBGKZsKaox0=
Subject key identifier:   04:CE:23:C3:4C:D4:02:BA:BA:A4:8E:0A:0D:A3:C9:23:9B:8F:40:7D
Authority key identifier: 6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1
Certificate issuer:       /CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1
Certificate serial:       7F46D9C42AD8F6BB3706DEBC15CE949489104875
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 11:44:31 +0000
Manifest this update:     Tue 02 Jun 2026 11:39:31 +0000
Manifest next update:     Wed 03 Jun 2026 12:49:31 +0000
Files and hashes:         1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: 1yZQJfUMIdupzXA1ljHpU5mWQfYGWg8xMYH2Yx/jRFc=)
                          2: 6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl (hash: ulxZPDku0yQ3wpAVT71/tgLEr0NQI05NULcj1qOmD7Y=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl
                          rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:46:d9:c4:2a:d8:f6:bb:37:06:de:bc:15:ce:94:94:89:10:48:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1
        Validity
            Not Before: Jun  2 11:39:31 2026 GMT
            Not After : Jun  3 12:49:31 2026 GMT
        Subject: CN=04CE23C34CD402BABAA48E0A0DA3C9239B8F407D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:48:45:d2:ed:b1:26:38:e8:e0:8d:1a:b6:
                    19:8c:d3:4f:02:eb:23:8c:44:f9:05:e8:0c:e7:23:
                    1b:0c:95:bd:29:22:15:f6:64:49:5d:6d:40:df:27:
                    b9:5c:5e:7d:c6:ad:97:70:19:03:2d:0c:e7:fa:c6:
                    ab:47:41:8f:f4:10:07:54:8a:70:22:75:a1:8e:48:
                    86:8d:1c:fc:13:9a:75:83:42:43:22:be:4e:18:f6:
                    a9:d8:cc:ec:99:a6:15:44:21:8c:b7:40:88:7b:af:
                    94:e2:6a:75:63:79:b6:85:ef:8b:20:d8:44:ae:f4:
                    1c:7f:dd:a3:92:a0:f0:70:13:44:25:99:15:22:aa:
                    e4:17:70:ef:a6:84:94:70:54:ee:4c:51:a5:44:2a:
                    d3:59:8c:eb:bd:fd:2a:dd:76:67:0c:3f:ae:43:84:
                    fb:48:a0:c1:b2:b1:f0:8c:ab:da:85:c3:a1:04:93:
                    db:26:76:b9:a1:7a:86:93:8c:c8:f2:ef:13:5a:8a:
                    ca:4d:c7:14:b0:9a:c5:ee:d7:43:fd:a8:3d:c8:80:
                    2a:99:b4:46:aa:a1:e1:86:ea:d7:11:73:a6:87:38:
                    2e:4a:a0:62:29:03:b9:f3:be:e9:a9:f3:ab:7e:95:
                    81:b6:2a:38:93:38:27:91:73:75:88:56:a6:e3:8e:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CE:23:C3:4C:D4:02:BA:BA:A4:8E:0A:0D:A3:C9:23:9B:8F:40:7D
            X509v3 Authority Key Identifier:
                keyid:6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c2:fc:dc:75:e2:86:5c:c4:ba:6a:bc:fb:b7:e2:27:5e:30:
         d0:48:46:8d:59:7c:5b:3c:02:6b:1a:26:2e:84:95:78:97:b6:
         06:03:29:4b:c8:62:26:e5:42:59:a3:bf:af:3c:e9:92:0f:ca:
         51:aa:0f:12:93:44:91:e1:0d:4f:28:9f:bb:8c:0b:6b:e4:da:
         ba:7b:c3:9b:6a:4f:b1:08:46:fb:b4:90:e9:10:50:8a:c5:8c:
         38:ee:83:b2:58:9f:cf:0a:e4:31:87:c5:c6:1e:76:76:a2:b7:
         b2:25:1b:37:c7:42:e7:e5:4a:7c:96:09:63:15:48:8f:c3:15:
         b6:1d:2d:cf:aa:2c:fb:54:ed:a9:58:ef:0c:6c:ae:47:4a:63:
         c1:80:bc:8c:9a:1d:98:69:5d:5e:49:34:c1:8d:ed:fb:ca:80:
         a4:1f:e6:56:71:fd:d4:ff:9d:e9:0b:e0:42:aa:24:72:56:0f:
         ca:0f:46:d4:4b:77:1c:a9:0d:bd:25:02:f5:12:db:7b:52:c2:
         9f:c3:cd:40:6d:8c:25:ae:c0:e9:73:36:cb:21:09:49:04:74:
         3c:92:06:b6:a3:7e:5e:5f:be:14:41:b9:03:f8:2d:af:33:2f:
         4b:54:3c:ce:d7:3d:b4:b1:3f:e4:93:54:d2:3e:35:30:3d:6a:
         39:07:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:42:42 2026 by rpki-client