Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
File:                     149E265C01ED66DA98905D22913EE8E5950357C5.mft (raw, json)
Hash identifier:          F7kziOgj16XCYnlIi6XDMYf7CnMPIzu+ScsjXgAdLug=
Subject key identifier:   6C:9E:02:34:1B:DB:77:46:23:08:65:3E:A0:1A:B8:85:EC:02:48:E7
Authority key identifier: 14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5
Certificate issuer:       /CN=149E265C01ED66DA98905D22913EE8E5950357C5
Certificate serial:       577AAF2F431147D0CDD7E3B6D88A1915628C956E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 20:16:17 +0000
Manifest this update:     Mon 20 Jul 2026 20:11:17 +0000
Manifest next update:     Tue 21 Jul 2026 21:52:17 +0000
Files and hashes:         1: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: 2go2VsHnKk8a4v5C9iDrB1c2z6BX7uzmEdbp34kt9Ig=)
                          2: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: o6su7IMCtejCKrMWVaKfnnGbeizQl5tOylIJ73OtfwA=)
                          3: 149E265C01ED66DA98905D22913EE8E5950357C5.crl (hash: sOcuFG+mffo/i7m58YHbS8zi5oCTF6x9udXaQ87fT9c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl
                          rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 21:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7a:af:2f:43:11:47:d0:cd:d7:e3:b6:d8:8a:19:15:62:8c:95:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149E265C01ED66DA98905D22913EE8E5950357C5
        Validity
            Not Before: Jul 20 20:11:17 2026 GMT
            Not After : Jul 21 21:52:17 2026 GMT
        Subject: CN=6C9E02341BDB77462308653EA01AB885EC0248E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a7:74:0f:f1:a1:85:69:57:c7:4f:7d:c2:2b:
                    53:53:26:ea:bc:cc:27:46:ca:2a:75:7c:45:1a:bb:
                    5b:00:d2:a5:e0:04:c1:f4:f6:28:d6:bb:26:b5:78:
                    99:c4:a3:f9:4f:fe:6d:a9:e3:7e:2c:a6:63:7a:37:
                    00:a7:f6:2f:c9:ae:9e:ea:7e:8d:c9:59:1c:fb:1b:
                    ff:51:af:d0:dc:2f:5b:5e:c1:c4:9d:9e:c3:b6:84:
                    ae:f2:95:f3:38:ef:61:e7:42:16:61:2a:fd:6d:01:
                    e6:4a:21:a7:7c:30:22:c6:a1:d5:ba:92:32:06:af:
                    02:69:60:51:01:eb:fe:45:c1:c3:0e:2f:89:90:c0:
                    4f:11:c6:90:d5:e1:29:97:4a:eb:af:23:47:3a:a3:
                    f4:fd:4f:5b:ab:22:7e:7e:0b:9c:7d:24:c5:69:8d:
                    c7:b9:8c:0b:e9:4c:5c:74:e2:99:0b:23:6d:73:94:
                    f0:ef:5b:38:eb:e2:34:a0:9d:f3:75:63:30:4c:81:
                    22:29:dd:f7:6d:f7:02:72:69:25:62:07:62:fd:54:
                    22:9f:06:3f:99:fc:bb:90:3d:4c:5b:6b:ff:76:93:
                    9b:18:98:13:8a:67:67:f8:39:c8:b1:67:8f:09:a4:
                    31:6a:5d:a2:2a:05:18:83:bc:de:22:02:ad:8f:18:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9E:02:34:1B:DB:77:46:23:08:65:3E:A0:1A:B8:85:EC:02:48:E7
            X509v3 Authority Key Identifier:
                keyid:14:9E:26:5C:01:ED:66:DA:98:90:5D:22:91:3E:E8:E5:95:03:57:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/149E265C01ED66DA98905D22913EE8E5950357C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/149E265C01ED66DA98905D22913EE8E5950357C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:56:6c:ce:5b:f0:58:66:f9:7a:26:32:8a:a8:8f:fc:19:33:
         2e:60:33:35:c1:15:63:74:61:5b:e8:aa:eb:aa:fd:2e:a7:fe:
         54:4d:35:f5:ff:01:a5:f1:5d:48:72:3a:32:aa:22:43:a0:d5:
         f2:6f:8c:d1:8d:f0:50:d5:68:60:1e:f6:cc:e8:9c:7e:6b:d2:
         59:a4:b6:45:00:d8:1b:11:2d:63:3e:95:1e:9f:90:4e:b5:1f:
         f6:50:f1:22:7c:50:e5:38:93:5b:f8:6e:0b:18:c7:8a:94:1e:
         fe:78:77:51:6c:a8:f1:84:de:57:35:f5:7b:a2:7b:a2:b0:c2:
         51:de:87:d6:d5:04:80:62:a6:2d:e1:e7:fa:90:06:0b:3d:dc:
         12:05:d7:3f:af:33:35:7e:43:a9:2d:d0:6a:61:e7:18:de:65:
         5c:7b:dc:6d:64:2c:75:49:d6:ba:a1:e5:2f:90:58:47:77:37:
         f7:3e:10:5d:20:e6:30:6d:e4:0a:9b:17:49:ea:40:f4:43:4e:
         e3:7b:01:2c:a4:a9:76:3f:b6:62:47:b4:39:40:7f:64:72:8a:
         f0:a8:08:fc:8f:87:35:ea:0d:04:5f:22:ce:97:17:96:3f:1f:
         16:16:aa:79:72:3c:76:78:ba:ae:91:31:8a:a6:7c:f0:59:1d:
         0c:59:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:43:18 2026 by rpki-client