Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
File:                     BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft (raw, json)
Hash identifier:          Jeqfy8i0L88C0Puw2vCtA/qzY7VJtB3Ykw8JUlIxBf4=
Subject key identifier:   DA:C8:85:6E:8C:D5:92:FA:97:11:B5:36:42:FD:AC:FD:B5:7A:B4:79
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       3D296314692C1AC98AC6CAEDF31A37640E9E653F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 17:48:26 +0000
Manifest this update:     Mon 20 Jul 2026 17:43:26 +0000
Manifest next update:     Tue 21 Jul 2026 18:35:26 +0000
Files and hashes:         1: 34352e3132362e35362e302f32342d3234203d3e20313332363437.roa (hash: 51eavTWPFrNxa8bjSHcdJ8vtzC1mzLQPZlm9M3COLDU=)
                          2: 3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (hash: GF5sw5TIyMg/HEZpyvFvO1rBAEJgs3CpQYQY8RN9uRY=)
                          3: 3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (hash: Tm/UNBU0RZeScJfXS8SuxK9KL1FxgoN/n8Ti+/I4iaM=)
                          4: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (hash: c/+B9i/CScu7h8jGuv1JRMe6ArsSJVjID5tIfBJTEZE=)
                          5: 323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (hash: d2p1pz6iSVKmhRvc7KcXU5ZyLMfCL4gLganI40S2YnI=)
                          6: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (hash: W4Y/Jl2Uo2TA6PRaW+Lr7qZLcsDrqBIfU1uczmpPuG4=)
                          7: 3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (hash: AWDTDU1uK2yBZAsT7txzvxIXXk3Q8Vz2Xvi0KaFLsOk=)
                          8: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (hash: fBsZSMatjucO+T7+pnQaQszpCsK34WTaNL1x8+auaVA=)
                          9: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (hash: /o29HECkwJutgVmG0I5lSxBVN20fSE9q8Dt9mr1Ct3U=)
                          10: 3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa (hash: u6hQoPKoHiVtYDbwuT9Uz8f5A+6L4NtjJ2yTHSMpD0s=)
                          11: BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl (hash: TRaJ+2FPHQ72mCWa63mvUFoII7fvzLk+r25JxDMWruw=)
                          12: 3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (hash: SrggenrhOddxkHmFx2q+pbw4/0dGiORptPNzRQuuHtg=)
                          13: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (hash: qArl8RBpNQGv7NW/pHMi5u7s8FPFuQtE+K0tYbKrjHU=)
                          14: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (hash: elFR1hwQeXN8BTtaNU77MnFeZSQYNz4QlrPnRy3FSWk=)
                          15: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (hash: 3tV7ePWEh+EaJKm0cDZuNy9PmGNGDZkDyBgahcmdLds=)
                          16: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (hash: 8tz20JsrCmWJ12URHbvfs5cYxrQj1byexdS6hWPseS4=)
                          17: 323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (hash: PfU7mv6IN/K07oNWG+0wCm4fLi1KFnoKFqJbJk9QcX4=)
                          18: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (hash: Q3RsZBk5q9tyrBDMlbDRl2T3DfnBOVkpF/7xiffBucI=)
                          19: 34352e3132362e35382e302f32342d3234203d3e20313332363437.roa (hash: 22qOI7kA6d3/l7AQiyRyGMcKna9TfZu2inXLqY/VILw=)
                          20: 34352e3132362e35362e302f32332d3234203d3e20313332363437.roa (hash: BC4anIQ+a9WUEuTcYN68YGrrV6yunSX3tOj+gke3HOM=)
                          21: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (hash: atskKnHk5T0oqegQKA+HINuV5pfMQiIduF8R7Q4ZG+c=)
                          22: 323430323a656538303a35383a3a2f34382d3438203d3e20313332363437.roa (hash: e+Gw3YTY2+X+FfuH6e/RIS9HElWcKHLwAE2PQqgXfvw=)
                          23: 323430323a656538303a643a3a2f34382d3438203d3e20313332363437.roa (hash: Sm4mr8PZqNPV9oAJvZYba4Nbo01h5qyGSwF7hDwYhaE=)
                          24: 3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (hash: H4QyDpAYJgb2cSZHnPV/4PL7jlc0wOLp4dMIreHw0fQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 18:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:29:63:14:69:2c:1a:c9:8a:c6:ca:ed:f3:1a:37:64:0e:9e:65:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: Jul 20 17:43:26 2026 GMT
            Not After : Jul 21 18:35:26 2026 GMT
        Subject: CN=DAC8856E8CD592FA9711B53642FDACFDB57AB479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:22:fc:77:79:09:28:21:9c:b5:f3:8c:d9:11:
                    36:4c:be:77:f9:00:23:8a:c4:6d:3b:a3:ab:3f:a6:
                    14:69:59:5c:8f:28:32:c7:92:e6:b4:30:2c:fe:d6:
                    aa:d0:f9:7e:07:9d:7f:74:50:7d:22:16:11:40:31:
                    f1:45:bd:4a:f0:23:6d:83:51:6a:8a:52:7e:ba:00:
                    bf:5c:d6:88:4c:43:7d:11:3a:90:84:d0:28:8d:a2:
                    de:36:a9:20:bf:7c:64:63:83:07:93:db:05:82:69:
                    31:ad:01:b6:a1:cd:c1:f5:c8:75:45:9f:f0:3f:a5:
                    c5:d8:0d:9e:6d:5a:4d:b6:9b:00:f1:47:18:fd:32:
                    c2:9e:71:13:e2:c3:87:31:f9:ff:5b:57:18:e4:7f:
                    70:cf:b8:4f:69:ea:27:4b:a9:12:7b:c7:12:df:67:
                    60:c1:f5:11:35:da:3a:6b:ee:06:be:50:e6:fe:0f:
                    9c:87:8d:95:4f:49:fe:44:58:bb:11:47:0a:34:54:
                    64:8d:45:df:97:97:b9:58:d8:8d:39:0a:48:c0:f2:
                    26:6b:75:72:60:9e:63:e2:e5:f0:b1:55:f5:e4:42:
                    54:9b:82:85:13:79:15:dd:53:83:f3:c3:44:f7:25:
                    cd:d2:17:6c:40:a3:74:86:0e:10:5f:46:1b:23:1d:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C8:85:6E:8C:D5:92:FA:97:11:B5:36:42:FD:AC:FD:B5:7A:B4:79
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:0d:2b:0a:8c:96:c3:99:5b:3e:0b:52:00:cb:c6:e2:fe:
         8a:7e:cd:e0:b2:31:e9:fa:9d:e6:10:94:37:05:68:9f:50:1c:
         42:79:d7:9a:e9:00:53:9d:24:cf:0b:bc:01:dd:1c:ad:ad:ca:
         f0:e9:2a:d8:fe:c1:9c:d8:c7:00:12:ad:5d:46:ff:9c:7b:fd:
         b3:f6:2c:ce:c5:8f:cd:08:48:f0:77:1f:0c:9c:28:f2:55:90:
         61:ea:e8:9a:f5:73:a9:bd:6c:42:b5:6f:95:72:75:d9:e8:c4:
         98:31:9e:85:d9:c4:f7:59:51:89:9c:b7:e7:fd:7b:82:e7:7f:
         87:d6:b9:8e:97:e3:87:23:e3:ba:ce:d2:33:8d:98:a1:6a:4a:
         1a:35:a6:e6:8d:b2:b3:4a:f4:8e:dc:d8:d0:b5:68:97:dd:61:
         d0:68:2d:84:f0:5d:cd:ec:f4:db:0d:44:2c:4a:c8:e5:cb:e9:
         b0:24:7b:d9:23:1a:8b:1d:97:ec:9d:1d:6d:7e:e3:4c:c7:f6:
         26:1f:f1:77:2c:a2:6a:ff:75:18:28:15:3d:5d:38:3d:81:ea:
         70:59:54:e0:a7:15:79:89:c3:81:c7:1e:b8:37:32:6e:90:6c:
         2b:fe:dc:72:68:0e:16:55:4e:1c:51:af:c7:cd:54:45:a5:f7:
         ac:36:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:09:00 2026 by rpki-client