Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
File:                     906CD1832E095FD864326D9340C3360CE2E04D88.mft (raw, json)
Hash identifier:          puA/6FakHgxjUf+bhECpH6ZLPRW3J8ngtpsPHBO5QGE=
Subject key identifier:   27:20:E3:78:24:DD:4B:F7:6D:62:BD:53:45:47:5A:E4:1A:2D:E4:C6
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       55BA17F86B152F7EB721A8E54C1641EEB718C2A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 15:15:22 +0000
Manifest this update:     Mon 20 Jul 2026 15:10:22 +0000
Manifest next update:     Tue 21 Jul 2026 15:43:22 +0000
Files and hashes:         1: 3131362e3231322e37332e302f32342d3234203d3e203436303330.roa (hash: IJ1gl0sL1RWrdcu45xJfEOPZ3S24w9hNHw27+5W3EfU=)
                          2: 3138322e34382e3136392e302f32342d3234203d3e203436303330.roa (hash: 4YrgDfVD0BXsVITQ1qM6LdwihWuqC7JjlQdVH1myE2c=)
                          3: 3138322e34382e3136312e302f32342d3234203d3e203436303330.roa (hash: aA2PRrfzpM7G6vMr09KAyWMRPmTA4TQcAHLLZIN3rO4=)
                          4: 3131362e3231322e37372e302f32342d3234203d3e203436303330.roa (hash: F6CH1xWOW04b9AWH9hOzpC9sPtP3FUKuSlUMhrOcMFU=)
                          5: 3138322e34382e3138322e302f32342d3234203d3e203436303330.roa (hash: /3/1RjKyrZlHVoTiW/tcRKdAaD1qr1a2KPJUdaqHdzc=)
                          6: 3138322e34382e3138312e302f32342d3234203d3e203436303330.roa (hash: 2Ix9NBX4ryTwqueIaz6deDkrg5ibNpli+8/f+eL7h/o=)
                          7: 3138322e34382e3137342e302f32342d3234203d3e203436303330.roa (hash: 9EIhETWWjW1dZSmzJuION9agY2xrl3P3+FsQS+Eeaz0=)
                          8: 3138322e34382e3137302e302f32342d3234203d3e203436303330.roa (hash: NjGWi/sX/azA4LSsxWgygXlT2qGazE96SDmeU5APEvg=)
                          9: 3138322e34382e3137382e302f32342d3234203d3e203436303330.roa (hash: 18ON4ArCTP+lfrAOcIUbJ7NgSJlxjIjAeKAx8615vRA=)
                          10: 3138322e34382e3136352e302f32342d3234203d3e203436303330.roa (hash: Ztfsn5PM55Asy7cf5oKAtrKPTWkPp+IkS2IEf6RTR1I=)
                          11: 3138322e34382e3138392e302f32342d3234203d3e203436303330.roa (hash: JelzHvBp0OxgIxm8Nd0pErRqQIE2QVfU6EWcp42vk6c=)
                          12: 3138322e34382e3136362e302f32342d3234203d3e203436303330.roa (hash: 2D0T0jFXIOTwpKsYTX89X6+Gi1/+sOAN5iJ3Wcaskhg=)
                          13: 3138322e34382e3138302e302f32342d3234203d3e203436303330.roa (hash: hj8RfWuHMvR3IOUvRxyV2D2ELgKW3xEoS/ad7SVLqpU=)
                          14: 3138322e34382e3137392e302f32342d3234203d3e203436303330.roa (hash: tPLdls9+EYZXd6ZrhIRMSY3IobhJMxdyCJJTVoTUXQ8=)
                          15: 3138322e34382e3137362e302f32342d3234203d3e203436303330.roa (hash: 4anjPKb7dXOuM/Ubgl9czTBsQlokGVQ9YcUxyhwp+mc=)
                          16: 3138322e34382e3138382e302f32342d3234203d3e203436303330.roa (hash: CTAc5TKDYG8jWJrPFMAEsp+Pffmom314/f31IgCyWSY=)
                          17: 3138322e34382e3138372e302f32342d3234203d3e203436303330.roa (hash: 2snhbL2/LyEOsVO40C/SJRnBQy8yVpoiYYd3VX7I0Dk=)
                          18: 3138322e34382e3136332e302f32342d3234203d3e203436303330.roa (hash: ewmkkTzxhOGyo6MzFFyyoH5/Y+VapDFv9s96w13qA+g=)
                          19: 3138322e34382e3138362e302f32342d3234203d3e203436303330.roa (hash: 0jFA4bTcIReYiFePWq4UpaLmoZT+NXzEuKJPz4tjPhs=)
                          20: 3138322e34382e3136302e302f32342d3234203d3e203436303330.roa (hash: hDks4xSZEu4ylfv9eeFQE9ITujGlv6mJTmcyl6KcPEA=)
                          21: 906CD1832E095FD864326D9340C3360CE2E04D88.crl (hash: SXZMgO2No4H7sWPTd+CtZlgmzbIr+n2b7fTtSSZMy5k=)
                          22: 3138322e34382e3137312e302f32342d3234203d3e203436303330.roa (hash: nIA/3S+EQWlw4ZuLmZhS5zgcudA5d4PuWSKtEk22u0A=)
                          23: 3131362e3231322e37322e302f32312d3234203d3e203436303330.roa (hash: 58v6IS1MSPKg2yYeVDyyuTvIzqpTnW0JbX79eRAkar4=)
                          24: 3138322e34382e3136342e302f32342d3234203d3e203436303330.roa (hash: ZoVbl1Ej5vOkXGYFcM3GgFWF5vBfmm2YepIHJBqDbQM=)
                          25: 3138322e34382e3137372e302f32342d3234203d3e203436303330.roa (hash: AB/+vqxGjG+WUGNrWInFpg+QqvDIp89T4SFZCCScCf4=)
                          26: 3138322e34382e3139302e302f32342d3234203d3e203436303330.roa (hash: wwLLX5QwOXj8WIt4dR7Y6UuHuuR7pT2z8l/3xL/x9i0=)
                          27: 3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (hash: o9EKVmFR1SvOj9uTbB2OlxRWlCxTxBe1nFco2QLJ8gE=)
                          28: 3131362e3231322e37382e302f32342d3234203d3e203436303330.roa (hash: df8xcJtq0OjCMROhoKXLPGgNOi+tmSvnEinNpF80Ac0=)
                          29: 3131362e3231322e37322e302f32342d3234203d3e203436303330.roa (hash: 1gQP1KipyggAd+ZWxNv0xkFTvLsvr+/k6WShmO+e4Iw=)
                          30: 3138322e34382e3137332e302f32342d3234203d3e203436303330.roa (hash: Ng7waYdDe1Dfj8ZChcOrErxA2un9U810Hwr4zNlkzaw=)
                          31: 3138322e34382e3138342e302f32342d3234203d3e203436303330.roa (hash: DZQzCrIgtUXS6Vb+eF76haovEcz46KiCQaKT5Azbp5Y=)
                          32: 3131362e3231322e37362e302f32342d3234203d3e203436303330.roa (hash: J+EGvFPD67LFXGQZEHfVWDkOrWmqXhH9UPZC8CcEyic=)
                          33: 3138322e34382e3136372e302f32342d3234203d3e203436303330.roa (hash: d6Y5uYZP91y+eB3UDXZIOMOBcAWU0tFndBdXQKLT93k=)
                          34: 3138322e34382e3139312e302f32342d3234203d3e203436303330.roa (hash: PCggWZ4S0cmAIvlQ9OKIUJbBVOoSGkwzhD1/wRPVPCQ=)
                          35: 3138322e34382e3136382e302f32342d3234203d3e203436303330.roa (hash: zas81XYAzKm/epSWBwoKOUmYW9ltga5JFRl4SlgFNYQ=)
                          36: 3138322e34382e3138352e302f32342d3234203d3e203436303330.roa (hash: B/kblNkQ3ms1SzQMO/SpWc7KjkRSnbXvWp8KTyp1kwA=)
                          37: 3138322e34382e3136322e302f32342d3234203d3e203436303330.roa (hash: ZqAYiu/koAeNsoyjhjEI/IMs3ALOlSSQoYQ1BRd+P1g=)
                          38: 3138322e34382e3137352e302f32342d3234203d3e203436303330.roa (hash: 5T8Tor9uEyt7xupZTf9YjNdQa3WiJhFlyyfkYzVReeM=)
                          39: 3138322e34382e3137322e302f32342d3234203d3e203436303330.roa (hash: Yai10k7mfc36oSbam/+tt3MhIgvsdyGdsbNufFy+++s=)
                          40: 3138322e34382e3138332e302f32342d3234203d3e203436303330.roa (hash: UGbDMfBesxO5/EEF+JrapKZzclHkwuQF79qZ/AxYM8I=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 15:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ba:17:f8:6b:15:2f:7e:b7:21:a8:e5:4c:16:41:ee:b7:18:c2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: Jul 20 15:10:22 2026 GMT
            Not After : Jul 21 15:43:22 2026 GMT
        Subject: CN=2720E37824DD4BF76D62BD5345475AE41A2DE4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:fc:5a:18:ae:65:ce:a6:4f:c1:5c:c4:7b:
                    cc:22:37:ff:a5:ed:ba:e9:e7:e9:f2:c3:08:95:87:
                    e8:02:12:8b:02:b8:a0:e2:83:bb:c3:f2:ba:fa:64:
                    81:d6:fe:33:a2:7e:dd:8a:91:77:6b:05:32:51:6b:
                    74:6a:42:50:08:b4:b4:8d:2c:32:7a:5e:5b:b9:1f:
                    af:be:c5:ac:aa:06:11:bd:5b:20:82:bb:bf:60:25:
                    55:e7:29:6d:c9:3c:df:6e:ec:e9:e4:a7:33:9d:eb:
                    39:ad:a5:96:1e:e1:fd:aa:03:bf:b9:1a:ea:d1:09:
                    a7:fa:08:85:94:f2:57:4f:94:0c:59:9a:9f:1f:2c:
                    49:7a:28:94:d0:f8:e4:eb:b6:3d:00:d4:57:b9:6e:
                    0d:e9:26:2d:87:ce:2c:e1:7b:47:6f:e7:88:8a:b9:
                    89:df:48:63:f9:50:bd:2e:a1:0e:b4:26:94:ba:8c:
                    53:4c:42:89:8c:0a:a1:18:40:51:96:30:d9:ff:d8:
                    84:45:33:ef:bf:fa:cb:e2:79:cc:0d:5b:56:81:04:
                    f0:a0:1d:d0:74:0b:75:a1:92:2e:91:33:61:f9:bb:
                    30:27:f5:9c:2f:f0:43:3b:5e:4f:a3:9d:bd:2c:3e:
                    88:a9:ab:e7:d5:6b:5f:64:bd:c7:6e:7d:a5:03:1a:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:20:E3:78:24:DD:4B:F7:6D:62:BD:53:45:47:5A:E4:1A:2D:E4:C6
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:92:ae:2e:c2:83:74:3e:b3:2d:43:2c:8d:73:05:05:70:a2:
         be:8b:e1:b5:f5:e6:4c:4e:6f:18:29:47:3f:4e:9c:30:4e:53:
         81:4a:e5:0d:83:01:17:23:62:9c:48:99:86:55:59:94:db:f5:
         30:de:64:ad:64:50:87:28:1c:3e:07:d1:04:50:a2:5b:c0:6e:
         cb:c2:cf:e2:da:22:85:76:f3:08:84:c3:8c:f7:3e:24:71:84:
         2e:6a:21:f7:6b:88:15:8c:41:17:33:73:87:68:66:e6:bf:7d:
         d6:e8:10:9c:91:1c:c6:4f:f3:e9:59:a3:e9:e9:8f:86:c7:6e:
         c7:b2:8a:70:1f:f7:78:2c:6a:ca:11:fe:7c:af:ec:11:23:19:
         1b:3b:87:f9:7f:fa:21:db:2b:00:b5:2a:a7:67:ab:b4:83:1f:
         67:92:8d:7c:09:10:c1:fa:93:c8:4b:87:eb:64:6d:e7:f6:eb:
         2b:e3:ca:94:9f:dd:17:b0:ae:bd:6f:67:ef:20:aa:94:b1:24:
         78:85:7c:20:f7:07:ca:0c:78:ef:ff:dc:44:51:48:f7:87:01:
         de:5e:42:c2:d6:3c:24:f5:30:0e:c8:ef:5b:47:7c:37:8e:7e:
         de:a5:43:71:7a:0a:9e:52:d2:65:70:60:39:08:b9:8a:50:0b:
         b8:ef:ea:b5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVboX+GsVL363IajlTBZB7rcYwqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2MENF
MkUwNEQ4ODAeFw0yNjA3MjAxNTEwMjJaFw0yNjA3MjExNTQzMjJaMDMxMTAvBgNV
BAMTKDI3MjBFMzc4MjRERDRCRjc2RDYyQkQ1MzQ1NDc1QUU0MUEyREU0QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92PxaGK5lzqZPwVzEe8wiN/+l
7brp5+nywwiVh+gCEosCuKDig7vD8rr6ZIHW/jOift2KkXdrBTJRa3RqQlAItLSN
LDJ6Xlu5H6++xayqBhG9WyCCu79gJVXnKW3JPN9u7OnkpzOd6zmtpZYe4f2qA7+5
GurRCaf6CIWU8ldPlAxZmp8fLEl6KJTQ+OTrtj0A1Fe5bg3pJi2Hzizhe0dv54iK
uYnfSGP5UL0uoQ60JpS6jFNMQomMCqEYQFGWMNn/2IRFM++/+sviecwNW1aBBPCg
HdB0C3Whki6RM2H5uzAn9Zwv8EM7Xk+jnb0sPoipq+fVa19kvcdufaUDGpApAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJyDjeCTdS/dtYr1TRUda5Bot5MYwHwYDVR0j
BBgwFoAUkGzRgy4JX9hkMm2TQMM2DOLgTYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQxZDU5NmMtMDllMy00NjIxLWE2M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMy
RTA5NUZEODY0MzI2RDkzNDBDMzM2MENFMkUwNEQ4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MDZDRDE4MzJFMDk1RkQ4NjQzMjZEOTM0MEMzMzYwQ0UyRTA0
RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQxZDU5NmMtMDllMy00NjIxLWE2
M2ItMjBhNTEzY2Q0OGI5LzAvOTA2Q0QxODMyRTA5NUZEODY0MzI2RDkzNDBDMzM2
MENFMkUwNEQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL+Sri7Cg3Q+sy1DLI1zBQVwor6L4bX15kxO
bxgpRz9OnDBOU4FK5Q2DARcjYpxImYZVWZTb9TDeZK1kUIcoHD4H0QRQolvAbsvC
z+LaIoV28wiEw4z3PiRxhC5qIfdriBWMQRczc4doZua/fdboEJyRHMZP8+lZo+np
j4bHbseyinAf93gsasoR/nyv7BEjGRs7h/l/+iHbKwC1Kqdnq7SDH2eSjXwJEMH6
k8hLh+tkbef26yvjypSf3Rewrr1vZ+8gqpSxJHiFfCD3B8oMeO//3ERRSPeHAd5e
QsLWPCT1MA7I71tHfDeOft6lQ3F6Cp5S0mVwYDkIuYpQC7jv6rU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:36:24 2026 by rpki-client