Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
File:                     6C21F371FCEDD2DE29AE914B353F6951F995079A.mft (raw, json)
Hash identifier:          sPhZPqiCwhoxeY38o3o739iiQthA1GoR7TSn2Y9sGus=
Subject key identifier:   86:9D:EF:E2:11:AE:28:77:A7:A1:B4:E7:2C:F4:ED:7E:EA:7E:60:BA
Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A
Certificate issuer:       /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
Certificate serial:       28932934B732A0C6849706081212F5F9C13C0066
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 16:55:19 +0000
Manifest this update:     Tue 02 Jun 2026 16:50:19 +0000
Manifest next update:     Wed 03 Jun 2026 17:41:19 +0000
Files and hashes:         1: 6C21F371FCEDD2DE29AE914B353F6951F995079A.crl (hash: YMIrm5kkBBg/9TRNuACYvrgrB694Tj1EiQ0l0WssGU8=)
                          2: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: CkM4X/yZuIpVot2VwvF94RS/8alQIcg8MpI/CzafrjY=)
                          3: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=)
                          4: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl
                          rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:93:29:34:b7:32:a0:c6:84:97:06:08:12:12:f5:f9:c1:3c:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
        Validity
            Not Before: Jun  2 16:50:19 2026 GMT
            Not After : Jun  3 17:41:19 2026 GMT
        Subject: CN=869DEFE211AE2877A7A1B4E72CF4ED7EEA7E60BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:7b:db:8a:cb:a1:0b:7b:a0:20:a1:a1:83:
                    7d:e4:bd:e1:a2:62:62:d0:69:46:a5:da:7b:ee:c3:
                    e1:8d:18:70:ff:64:b2:1e:6f:5e:81:19:48:a5:dd:
                    a1:e7:5a:ee:16:81:a6:94:cd:95:63:6e:3f:e0:47:
                    0d:1d:a5:68:7d:d3:1c:6a:31:59:8f:3a:9b:6d:25:
                    15:a4:08:62:e0:fd:7c:6f:bf:78:ff:5b:93:e0:4d:
                    fb:5b:1d:dd:4f:fb:fa:43:b8:03:f5:1d:15:7d:c7:
                    e9:77:e6:b1:e5:bb:a7:20:cc:f3:cb:eb:3e:db:c5:
                    80:7d:95:70:4e:9b:60:33:22:8e:d0:2a:d1:62:97:
                    10:fd:25:32:3f:86:60:b9:d4:12:d9:b0:26:26:03:
                    37:12:e6:56:20:4a:07:b2:92:b1:3f:62:f9:ec:c8:
                    ac:de:6f:0c:44:34:a4:10:a6:f9:01:6b:a5:d3:04:
                    61:75:1c:d3:59:15:2b:bf:33:1a:3b:b1:72:17:6d:
                    5e:a4:fc:ad:3e:af:b6:c3:f2:97:ee:29:12:e9:50:
                    13:25:a4:05:14:56:99:75:d9:68:f8:29:18:2a:98:
                    64:76:23:23:36:ab:05:c1:4f:5d:36:fa:1c:ed:3f:
                    35:4a:c4:b4:73:72:53:33:69:09:f8:c6:8f:8a:2f:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9D:EF:E2:11:AE:28:77:A7:A1:B4:E7:2C:F4:ED:7E:EA:7E:60:BA
            X509v3 Authority Key Identifier:
                keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:20:47:81:2e:85:6a:b4:1d:d8:63:49:b5:a5:9c:52:42:b0:
         77:0c:43:4a:73:ba:c1:43:38:6f:91:80:70:a8:2f:b6:6c:e9:
         a7:5f:13:d5:a7:f3:ab:06:ce:77:57:62:2e:2c:49:2e:25:8b:
         14:db:b4:69:ad:18:e3:2b:f6:68:8b:9a:62:65:70:1c:ad:ab:
         fb:6d:6d:1a:56:6d:50:74:13:69:82:bc:a5:79:6d:47:e6:e0:
         01:c7:1f:ff:bc:f9:56:b4:4c:ab:26:0d:1e:45:ad:65:47:62:
         eb:11:2b:1b:f6:98:4d:78:95:b9:76:99:79:7f:6d:ce:48:3f:
         90:92:f6:6d:f2:9c:0d:f2:38:60:42:ff:f3:73:ff:9d:79:3c:
         48:ca:e9:74:af:50:4a:2e:31:b2:a2:47:71:9a:22:23:2f:50:
         4b:45:21:99:a6:be:16:e3:a3:f4:73:fe:d5:89:c6:af:ad:0b:
         45:37:a8:7c:42:0b:fe:84:e5:f3:d4:b6:89:c6:8e:63:34:9d:
         da:38:4c:94:2a:2e:62:83:7d:80:e3:02:b7:2f:83:8c:77:15:
         7d:b9:dd:56:a2:b2:43:69:29:04:50:d8:76:31:1a:3b:76:dd:
         c0:97:e0:a0:24:0e:34:40:17:dd:92:b8:9a:01:51:c4:29:99:
         87:ac:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:11:58 2026 by rpki-client