Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
File:                     EC59C36AB88A35CEA64B4ED019F2F05317672299.mft (raw, json)
Hash identifier:          GW1kjxPFJvmXYDdyQXnz3k115WGeKlkd7W7wCK1zHnU=
Subject key identifier:   50:4D:43:EC:44:97:D9:7F:30:EE:2F:01:E9:99:79:C7:FF:92:E4:D8
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Certificate issuer:       /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial:       7913ED7288896540F3DF04D558F0B4E80F88C5A4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 13:53:41 +0000
Manifest this update:     Mon 20 Jul 2026 13:48:41 +0000
Manifest next update:     Tue 21 Jul 2026 16:12:41 +0000
Files and hashes:         1: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: Ju2Rnafj0JXyXCFyRIYbsuCCwhT0mQqqDAAoegLW2lk=)
                          2: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: AfPj1/WANHCA8ksluVDxgnesb53b+Rlio8ADTE+u1pQ=)
                          3: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=)
                          4: EC59C36AB88A35CEA64B4ED019F2F05317672299.crl (hash: ESVcP1F//Wi6bs2SFiK4phILT9XkQXQV3mf70LgL6o4=)
                          5: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 57swP2LUwPdheqaXWgJ8pT9nt0r4LCH8JoFCbrhNwuw=)
                          6: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=)
                          7: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: YPwGvhjJSaspOvLgrZ3Fyf5ldBDtpaa3xSbfWjcGrDA=)
                          8: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=)
                          9: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: nvBOhOQVzXAnJ4HGpau+WjYJtRHl8i2975iE/qVl3BQ=)
                          10: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
                          rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 16:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:13:ed:72:88:89:65:40:f3:df:04:d5:58:f0:b4:e8:0f:88:c5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
        Validity
            Not Before: Jul 20 13:48:41 2026 GMT
            Not After : Jul 21 16:12:41 2026 GMT
        Subject: CN=504D43EC4497D97F30EE2F01E99979C7FF92E4D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:b6:80:30:c5:3c:de:d1:76:a1:47:7e:92:
                    20:92:e1:64:bc:59:78:3b:50:36:3a:f6:c3:a0:9b:
                    b6:d5:50:af:4f:c4:92:ec:df:2a:ad:8f:6e:70:bb:
                    41:66:c8:14:1a:2a:47:b0:02:01:d6:5f:45:37:03:
                    6a:82:20:78:cc:45:1c:64:8c:a9:cd:e4:4e:ef:9b:
                    9f:f7:85:c6:a3:0d:54:14:db:9d:9a:8b:f1:24:15:
                    8e:7f:8c:91:88:0d:df:11:4b:f4:bc:72:e1:88:b8:
                    f8:0d:68:07:af:4e:0a:ff:dc:2a:2e:08:32:c3:ef:
                    e4:8b:09:df:66:c5:47:c7:36:1b:d9:9d:f4:f8:ac:
                    cd:84:87:8f:13:cf:af:78:87:89:9d:fe:f4:3c:5e:
                    76:75:fa:60:29:d1:04:88:f0:32:13:6d:2b:6d:a3:
                    c1:39:19:ac:ed:74:cd:72:0c:46:91:b8:87:17:f2:
                    81:00:4c:d2:4e:a1:72:b7:82:46:15:1a:83:fb:81:
                    4b:33:58:8a:bc:a1:c6:3a:59:d2:2d:b9:47:3d:09:
                    d4:57:77:a1:5b:08:de:14:ab:c6:e9:2f:63:d4:92:
                    c3:79:b8:f3:df:ea:5d:b4:c3:b5:a8:fd:08:df:b4:
                    de:d8:6e:e7:e5:9f:38:54:98:28:4d:d7:24:1d:95:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4D:43:EC:44:97:D9:7F:30:EE:2F:01:E9:99:79:C7:FF:92:E4:D8
            X509v3 Authority Key Identifier:
                keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:9a:c3:a4:10:b9:d5:ec:f6:ae:dd:db:d4:27:1e:9f:7a:
         cc:06:9d:5a:fe:57:11:3a:94:63:92:ca:ff:64:da:fb:72:c2:
         74:82:af:af:51:fd:3a:33:31:95:fd:20:2f:ea:d8:f4:aa:6a:
         d1:b6:49:86:25:41:02:eb:4f:3e:fe:1f:64:62:0f:9f:a6:fd:
         49:7e:95:29:47:4a:3d:fb:dd:4e:fd:38:67:16:ad:92:77:2a:
         35:4f:6f:6a:06:f5:dc:d3:cc:ca:98:2d:8f:80:22:62:eb:7f:
         40:c5:a1:55:59:93:99:7f:e8:52:76:b6:69:64:24:e6:13:cc:
         9d:e6:36:48:bb:6c:8c:69:db:26:f5:5f:a6:a0:34:d8:33:af:
         06:ce:95:34:4c:d6:1b:74:ad:46:aa:01:05:27:4a:b5:48:b1:
         75:a5:cd:d4:6e:62:d5:86:78:ec:4e:ce:1c:1d:84:f8:5c:11:
         e3:13:78:74:ea:e1:ff:06:88:a8:0f:f7:3d:ad:b6:13:63:3c:
         27:4b:09:c3:ea:0b:66:f8:4d:22:68:e7:46:7c:75:c9:f2:f1:
         cf:6d:14:e1:63:05:c4:98:b3:c5:f0:7d:52:bb:da:10:72:d3:
         99:a1:aa:b9:2e:7c:9f:d7:ef:4c:09:d2:b9:82:26:c2:6d:ab:
         90:aa:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:43:34 2026 by rpki-client