Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
File:                     02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft (raw, json)
Hash identifier:          plOfDeZ9WDsTENPz2YBpZl6FrkuiaOwD+9F88n+sGjg=
Subject key identifier:   26:CE:5D:03:2F:06:48:A7:6C:8B:36:BE:43:78:34:AA:96:1A:93:9A
Authority key identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97
Certificate issuer:       /CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
Certificate serial:       2EB97892D0CC401EF9548F4D0D15EA5D5866C721
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 17:22:52 +0000
Manifest this update:     Mon 20 Jul 2026 17:17:52 +0000
Manifest next update:     Tue 21 Jul 2026 18:00:52 +0000
Files and hashes:         1: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: uqiSzcg0G6eG40rjBlY0LrjMSKV5cIiAMiPhDeDO7GM=)
                          2: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: 8bk4nM/CpViyJMYTIYd85+JJ5zEQXXgNb/ogzW3MmFM=)
                          3: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: mckJR6NOoa+yl4WEvk2NXD7USkbc88RSKMqJlOr2OEY=)
                          4: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl (hash: ckPamFpgBlFxQSS/XrX+k8WGgNzfLTfogys968jKE0s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl
                          rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b9:78:92:d0:cc:40:1e:f9:54:8f:4d:0d:15:ea:5d:58:66:c7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
        Validity
            Not Before: Jul 20 17:17:52 2026 GMT
            Not After : Jul 21 18:00:52 2026 GMT
        Subject: CN=26CE5D032F0648A76C8B36BE437834AA961A939A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:7c:65:ae:dc:19:a2:e0:f8:6a:bd:a9:d3:
                    11:0e:ce:ec:d7:a6:72:66:39:30:a6:ef:52:f0:2d:
                    44:b5:75:85:3e:24:60:2e:a7:6f:e0:1f:c8:6f:69:
                    e7:c1:c9:54:fc:ca:ad:b0:66:51:11:59:ec:fe:30:
                    0e:49:f9:72:eb:ae:f0:2a:63:bc:db:c9:51:14:1d:
                    fe:f8:40:d7:cc:3e:79:36:c2:10:f3:bb:d5:cd:be:
                    ef:b1:de:f7:7f:57:59:2a:59:d8:1f:c2:31:77:fe:
                    d9:8d:fd:3d:1c:9d:ac:e8:19:df:5a:ba:3a:32:8a:
                    51:7f:4f:48:77:c8:01:93:c6:fc:6b:ef:f5:24:0e:
                    28:73:30:70:6b:32:18:92:38:6a:26:58:f9:7c:32:
                    c2:1e:63:39:34:3f:4b:eb:6c:80:8a:36:c8:a7:21:
                    bd:e8:e7:3d:86:de:53:a5:62:90:75:a4:73:84:69:
                    07:4e:f0:fa:ba:40:7a:fc:0b:1b:10:48:b0:54:82:
                    0e:20:e4:7f:83:f7:57:8c:5e:e4:67:27:3f:de:d0:
                    b4:bb:e9:78:29:80:7a:be:44:56:97:12:49:0d:d8:
                    b5:2f:05:98:e4:1e:78:7e:d3:c9:3e:84:a2:48:c1:
                    17:ea:52:7a:dc:b2:88:0c:97:4a:cd:c0:ba:94:8a:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CE:5D:03:2F:06:48:A7:6C:8B:36:BE:43:78:34:AA:96:1A:93:9A
            X509v3 Authority Key Identifier:
                keyid:02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b0:cc:51:02:f4:71:79:43:63:a5:b7:8d:2f:b1:ed:5d:59:
         26:b4:75:35:68:b8:4d:8d:36:88:39:d4:f3:7d:bf:a5:8b:fe:
         7a:33:31:8d:67:03:54:07:e0:28:14:9a:1e:d8:62:44:e6:e0:
         5f:31:12:bc:24:aa:4b:91:8e:1c:f3:19:c4:ea:68:72:e3:e0:
         a7:cc:f7:d7:42:d2:c1:be:a2:59:80:2d:a3:68:83:1d:da:de:
         18:b2:1a:67:01:27:c6:d1:a2:e5:25:b3:18:ae:94:61:52:8a:
         3e:b0:f7:9c:2f:8b:a4:ec:16:e6:e8:ee:42:a6:4b:18:aa:10:
         d0:64:07:e1:e8:b0:4f:93:a6:c2:62:a0:58:4a:99:85:43:0a:
         fe:f3:43:ed:a6:29:89:1c:78:e7:eb:07:ff:5c:d1:51:6b:ad:
         64:e8:7d:20:49:e0:fa:41:5f:74:e3:99:f0:fa:69:e3:c0:9c:
         53:a2:08:5b:0b:26:b5:ce:fc:6a:29:91:03:63:3b:aa:65:30:
         00:79:30:e1:48:21:f2:dd:e9:54:ec:3c:9b:90:86:08:00:c5:
         87:c6:64:6a:cb:02:6c:21:6e:8b:d1:56:72:c7:b2:45:37:e3:
         4f:cc:64:fd:a6:f5:e5:e0:91:cc:d9:03:6d:ff:74:10:36:3a:
         5e:f5:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:52:35 2026 by rpki-client