Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
File:                     BE64AB23612B159BE54939807CB20423D340D326.mft (raw, json)
Hash identifier:          9H6kzAdfCTPXKzGpFWSYXEJbh6kk9WDZ9ZFiEomozVQ=
Subject key identifier:   66:C3:D8:53:89:0B:B3:0B:9E:8C:2F:58:1A:FB:90:D4:3E:DE:E5:81
Authority key identifier: BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26
Certificate issuer:       /CN=BE64AB23612B159BE54939807CB20423D340D326
Certificate serial:       438EE5E50EF2617A7ECC86237E071B523F2D41A8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 15:20:29 +0000
Manifest this update:     Mon 20 Jul 2026 15:15:29 +0000
Manifest next update:     Tue 21 Jul 2026 16:45:29 +0000
Files and hashes:         1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: gqKKZqiveBSyuWNd8uxps6/yl/at9bVMTgVKSVDM6XY=)
                          2: BE64AB23612B159BE54939807CB20423D340D326.crl (hash: eTqeOzVpoo4jgjsdEzktOMoygTILo+A//z5QAFqfhhM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl
                          rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 16:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8e:e5:e5:0e:f2:61:7a:7e:cc:86:23:7e:07:1b:52:3f:2d:41:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE64AB23612B159BE54939807CB20423D340D326
        Validity
            Not Before: Jul 20 15:15:29 2026 GMT
            Not After : Jul 21 16:45:29 2026 GMT
        Subject: CN=66C3D853890BB30B9E8C2F581AFB90D43EDEE581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:9c:5b:32:b3:2b:83:f3:60:14:a0:a4:73:
                    ec:0e:1c:06:0b:d9:93:10:b4:d3:60:62:b6:5b:33:
                    29:1d:bf:cc:da:92:9b:37:3c:81:5f:2c:e1:22:f4:
                    b3:3c:21:45:89:5f:90:d8:aa:0e:4d:7f:62:09:aa:
                    d4:b3:e0:9c:50:6a:05:49:e1:bf:9f:62:fe:04:df:
                    be:db:50:da:cd:6b:99:fb:57:4c:f6:6d:68:0b:11:
                    33:d0:82:42:e6:15:e9:7b:72:ee:c9:d1:ba:a0:3f:
                    5d:a7:cd:03:5d:1a:d2:8e:1f:e8:c5:f9:2b:bb:c6:
                    7a:3c:d3:ba:b9:9d:ff:56:b5:9a:4c:1a:b7:b4:c9:
                    12:68:dd:95:69:df:e5:9d:80:5c:57:dd:24:ca:e8:
                    6b:c6:e8:3e:1e:a4:f0:0c:6f:34:73:0e:de:c2:f5:
                    2b:9d:4f:21:6c:a1:a3:f5:65:1c:32:25:94:b8:4c:
                    49:b1:57:6e:03:d4:b2:81:38:94:5f:c4:98:df:f3:
                    69:91:a1:f1:8f:2e:b3:05:97:f2:72:8e:48:ab:cc:
                    6b:04:3e:4b:12:7b:8e:91:33:db:5a:4b:30:42:aa:
                    fa:18:ba:56:3c:0c:4f:04:9b:2b:84:c6:db:07:26:
                    75:c3:03:c0:4a:22:a3:fa:02:6a:52:dd:bc:ba:29:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C3:D8:53:89:0B:B3:0B:9E:8C:2F:58:1A:FB:90:D4:3E:DE:E5:81
            X509v3 Authority Key Identifier:
                keyid:BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:27:c8:ab:cb:81:c0:a3:1c:1c:25:a0:76:ba:d3:43:e2:37:
         28:d2:28:bc:4d:92:4b:af:7d:9f:16:f2:a8:0c:0e:39:93:51:
         4f:52:8f:87:e0:a1:3c:d7:ed:e0:fb:73:7c:11:51:ba:64:68:
         81:cd:de:ab:14:de:d4:17:cb:15:34:5d:c6:b6:38:ab:4d:4d:
         2f:74:cf:b5:bb:0d:46:98:79:7f:9a:98:f1:eb:63:3e:c7:06:
         cb:f6:a9:c0:d0:f6:34:53:a9:da:f7:d9:69:f6:6a:09:33:b8:
         46:32:ac:ad:2c:d2:fc:b4:6b:06:bb:51:bf:cf:3b:a9:51:61:
         02:c7:d6:7c:08:47:5f:1c:bb:30:ea:ab:a5:f9:25:04:5d:f7:
         cb:12:f8:cb:bb:23:37:bf:4a:30:30:d5:ba:c2:1e:94:fc:7a:
         73:c0:76:1b:ee:79:b5:20:8e:4c:32:92:e9:f7:e3:85:f2:c1:
         f6:87:24:a2:ef:d0:de:9d:7c:7a:0c:33:8b:4a:9a:01:c3:1b:
         5a:27:2c:85:22:76:c9:51:9e:4b:c5:27:b0:df:8b:43:00:b9:
         b8:d2:c9:93:40:43:6b:33:90:af:99:e3:5a:b8:71:e4:14:28:
         26:d6:8d:17:31:cf:4c:2c:44:bd:f1:40:11:69:f5:bf:ba:9a:
         8d:4c:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:55 2026 by rpki-client