Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
File:                     6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft (raw, json)
Hash identifier:          CAL1h62whzlmpiFnZjpzZ1ZjM3jqO3Pcxa9LDIC2JPo=
Subject key identifier:   90:57:31:33:68:4F:3B:EC:BF:A2:07:53:81:92:01:54:76:12:83:DF
Authority key identifier: 6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24
Certificate issuer:       /CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
Certificate serial:       354C20C2145DAE47F9B38F4C261BF984BC39CD37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
Manifest number:          F0
Signing time:             Tue 27 Oct 2026 21:36:58 +0000
Manifest this update:     Tue 27 Oct 2026 21:31:58 +0000
Manifest next update:     Wed 28 Oct 2026 22:20:58 +0000
Files and hashes:         1: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl (hash: ZtE7GOJCICRqpvJP4sZatQx3fiM80AW2Ue7G5/zS3W0=)
                          2: 3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (hash: /UiS0/YqAJP6vBXmUjstv/RqhsN7l6a5S8YjTvqIQ1U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl
                          rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 11:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4c:20:c2:14:5d:ae:47:f9:b3:8f:4c:26:1b:f9:84:bc:39:cd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
        Validity
            Not Before: Oct 27 21:31:58 2026 GMT
            Not After : Oct 28 22:20:58 2026 GMT
        Subject: CN=90573133684F3BECBFA2075381920154761283DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:6d:bb:93:b3:20:79:be:fb:28:70:e0:70:
                    3f:b9:9d:a2:8f:3e:dc:1b:25:e5:11:8c:b8:b8:96:
                    6f:97:10:da:d7:77:d7:60:4c:e0:9c:29:6f:78:c2:
                    f4:2b:7d:dd:85:26:6c:2e:28:69:1d:fe:e5:71:3d:
                    8d:38:7b:18:24:40:d9:f4:4a:45:34:d0:d9:ac:09:
                    40:2d:f6:61:43:f9:9a:97:2e:01:81:d0:7c:85:0c:
                    f1:0b:e0:58:9f:0d:35:e4:0f:50:35:33:94:b8:c8:
                    65:e7:d1:58:23:3a:21:33:fb:2f:27:11:0e:21:15:
                    91:94:7a:9c:3a:1a:d9:80:cb:53:87:84:e8:4d:38:
                    bb:57:12:66:a6:46:b8:af:a0:ee:40:06:1e:15:12:
                    fa:0b:00:f6:48:26:8b:d1:f3:65:1a:54:75:10:db:
                    26:b6:7a:64:f3:f5:d3:ad:31:ad:57:6f:a5:4c:01:
                    49:74:be:a5:09:36:71:26:7c:b3:a8:e8:47:60:f8:
                    90:58:2c:41:f1:57:a1:52:47:15:0c:7e:28:c1:fa:
                    91:5d:ab:9a:a7:a9:90:b1:84:15:2a:be:5b:75:04:
                    e1:93:c5:fb:7e:ae:36:09:86:e5:d6:40:2e:b2:7f:
                    48:8a:82:43:00:c8:a8:7b:8a:16:7b:b4:04:c2:e4:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:57:31:33:68:4F:3B:EC:BF:A2:07:53:81:92:01:54:76:12:83:DF
            X509v3 Authority Key Identifier:
                keyid:6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:91:41:fb:59:a7:7f:c3:d4:85:5a:2a:1a:0f:16:fa:e2:cb:
         ff:cb:60:26:e5:4a:cd:be:58:8c:0e:5f:b9:45:15:8e:95:c1:
         3d:93:7c:24:d9:72:68:9d:b0:1f:fb:66:e2:73:09:22:0e:8a:
         8b:1d:78:e6:3a:af:3b:eb:7e:a9:5a:ae:dd:89:c9:9c:7e:f7:
         2e:b8:0f:23:fb:64:0d:54:db:c2:32:c1:74:8b:7c:15:04:5f:
         2d:7a:aa:20:a6:db:cb:c2:d8:7a:ec:2f:b2:6d:d0:90:85:07:
         bd:a8:84:01:29:05:0f:46:c5:df:16:9d:6e:2d:01:81:09:21:
         86:8c:fd:44:bf:f2:9e:a3:be:16:3a:3a:13:0b:98:52:55:b6:
         76:6a:73:7b:fb:0f:31:cd:f6:a4:9f:10:b7:55:12:fc:3c:18:
         44:c7:a4:11:93:10:f6:44:28:e9:97:99:01:86:f5:8d:90:35:
         11:cc:0b:75:14:df:4c:48:18:1a:7b:53:cc:57:20:27:ef:8d:
         7d:f0:98:1e:14:37:23:a5:5b:26:e4:78:df:f3:88:ca:6b:47:
         c9:10:63:5d:0f:8c:b9:e4:70:18:d0:44:6d:31:69:eb:ab:48:
         f8:19:d8:a5:79:30:42:3e:d6:48:10:7e:24:f4:d6:82:c3:99:
         06:29:b7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:15:21 2026 by rpki-client