Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
File:                     08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft (raw, json)
Hash identifier:          8r3N6O6Letalg3TjEho8aTaJ0DXXvEsgpWd2EnPwmto=
Subject key identifier:   82:B5:7A:EC:CF:E9:74:CD:7A:51:35:16:AA:28:06:9B:C6:53:93:F9
Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4
Certificate issuer:       /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
Certificate serial:       72DE530E90E8C9A1F0D56E1FCF5B6ED1E7CC5029
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
Manifest number:          6C
Signing time:             Tue 21 Jul 2026 04:56:55 +0000
Manifest this update:     Tue 21 Jul 2026 04:51:55 +0000
Manifest next update:     Wed 22 Jul 2026 06:18:55 +0000
Files and hashes:         1: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: L1mfkBCHBmcBCuB53aap/zrreHda+IVKN915WxYStVY=)
                          2: 3130332e33392e31342e302f32332d3233203d3e203633383237.roa (hash: Lahi4UMwkr7lfFz+tMIIfdkh1kxRlOqmv3Bjync9vmg=)
                          3: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: Yobd92nJofxIMDnwcBhGJ8U1ARrNN8Txd0D+kOpJodU=)
                          4: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: NtkyFz71abqYBOulA/yf0usZVvUpaEttpy+f3u3kpp8=)
                          5: 34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (hash: qqj+W0YE7lPcQQyjA0h+/ikJ5uDXNaW6laVzLp1Qk3I=)
                          6: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: fBaN9jIwXMILmSYsIQ3Ue7JGtw7WhLW8vbb21prGNGk=)
                          7: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=)
                          8: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: Z/jdDipYuv3lK5eimMJ72Z70XTynWpBlz182XUeNc+E=)
                          9: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: jBX/qKx/JGa1Du2q2fgwV/fWVjEIgXCKAL9/GZt06jk=)
                          10: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (hash: MAEO7ACMQfPreayi5zBOy6AnAEF+RmZdQiFdMvjwjTI=)
                          11: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: hujlKc3DzwZfu+/QrUX39XVrQUFGamfbziw+u/7dNJ0=)
                          12: 3130332e33392e31322e302f32322d3232203d3e203633383237.roa (hash: 76gleer34esIgeXzP55Qltcq6KQymYiw2jWBaYJM1Rs=)
                          13: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: 4Q9iFO3TjE/l3D1QG4paADwmfWvHm0qtB66UILaf8Ho=)
                          14: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=)
                          15: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl (hash: e3PL8KRdbEszpichUuR+kTZPyRqQoXZvtFmeQ19WY0s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl
                          rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:de:53:0e:90:e8:c9:a1:f0:d5:6e:1f:cf:5b:6e:d1:e7:cc:50:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4
        Validity
            Not Before: Jul 21 04:51:55 2026 GMT
            Not After : Jul 22 06:18:55 2026 GMT
        Subject: CN=82B57AECCFE974CD7A513516AA28069BC65393F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:77:2d:fb:ae:82:f0:04:a4:d6:42:48:fe:
                    f8:65:bc:1d:c1:95:2b:70:12:3b:71:bd:61:3d:4a:
                    72:9f:4c:d1:3d:30:12:ab:5a:29:f3:68:7b:a3:14:
                    1c:d7:d0:68:25:aa:63:9a:be:e7:61:b9:c5:c6:43:
                    15:ac:d6:2b:ff:6a:c9:27:f4:a2:1a:d2:5d:ba:b4:
                    95:24:8f:05:08:67:c4:19:cd:aa:2f:51:8a:f6:18:
                    8c:6a:8b:6f:0d:22:56:79:5d:53:6d:b1:4b:b6:cd:
                    eb:8f:f6:75:43:16:00:ef:a4:11:21:94:8e:51:b1:
                    b7:0e:7c:66:57:ab:dc:72:47:ca:2a:10:69:7b:d2:
                    9a:d7:0e:b0:0f:03:69:d0:70:80:d4:cc:c2:8a:5b:
                    37:f6:74:2d:ca:60:f7:a4:51:49:81:cc:42:99:bc:
                    a2:5b:11:0c:2f:92:30:f5:ad:eb:b6:17:0f:c9:05:
                    9d:cd:71:f6:12:47:e3:3d:49:f3:b4:d2:f0:94:6b:
                    a0:01:71:56:9b:3f:9d:ae:a1:45:ec:27:8a:c4:5c:
                    2e:65:bb:35:31:64:82:77:0f:47:2a:18:f8:12:0b:
                    66:78:e2:4f:d8:ef:db:58:97:5e:ac:7d:7f:ea:90:
                    22:eb:fb:32:89:6f:56:fc:26:8e:48:08:94:33:10:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B5:7A:EC:CF:E9:74:CD:7A:51:35:16:AA:28:06:9B:C6:53:93:F9
            X509v3 Authority Key Identifier:
                keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a5:81:8b:fb:ca:ac:19:57:96:6f:5b:a8:49:11:0a:37:5b:
         58:21:ce:33:82:ad:d2:7b:04:44:31:65:29:34:75:94:bd:87:
         2a:4e:05:7a:0a:2c:87:e0:95:f0:4e:0f:33:86:a7:f4:fa:31:
         1c:2b:d1:e9:ac:ba:cb:b8:a5:f4:86:33:b7:4c:99:6b:7f:d2:
         f9:11:6e:9b:00:a7:60:24:f3:c4:ee:3b:a7:5f:61:e8:b6:36:
         2b:e1:eb:8a:57:2d:57:f4:bb:43:01:91:4c:51:13:03:89:04:
         c6:9f:34:76:b3:3c:99:4f:d6:40:e0:d0:83:41:f9:02:7e:32:
         80:de:2e:f2:e3:f9:db:97:db:a1:ee:43:1e:c8:72:0c:24:98:
         27:75:9c:b0:36:17:53:7f:ec:70:0a:c8:8a:3c:66:86:f3:30:
         33:ae:8c:9f:1b:df:d0:16:73:17:dc:92:65:6d:bd:0b:1a:c7:
         84:43:d5:49:90:77:69:f6:34:69:56:e8:6e:e1:16:80:33:c0:
         5b:42:4c:23:eb:e2:e5:18:0b:fe:bd:69:cb:ea:58:c4:86:21:
         c5:4f:60:d6:c0:85:68:24:62:33:b8:a0:79:01:b8:7b:8c:5c:
         ef:9e:18:53:49:6f:03:f0:84:f3:9e:1f:3d:b5:4b:54:71:f8:
         f7:be:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:47:42 2026 by rpki-client