Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft
File:                     F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft (raw, json)
Hash identifier:          IcLZyOBob1G3Febp3kWZFs6kUdHYTXdV/cS9E07nKbY=
Subject key identifier:   5A:F5:49:77:6B:2F:29:3B:12:5F:BB:84:56:F4:98:A8:C2:0B:77:8C
Authority key identifier: F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5
Certificate issuer:       /CN=F0EB208891BC3271A7761F7969A4F4B152C4F0E5
Certificate serial:       4F934A251773A4659C3DD6399C7521F6211A616A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 19:40:41 +0000
Manifest this update:     Mon 20 Jul 2026 19:35:41 +0000
Manifest next update:     Tue 21 Jul 2026 21:01:41 +0000
Files and hashes:         1: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: PCd+knmr04J6Gzr/RkHIouax9jjuHK8/vfxjUSI6hdw=)
                          2: F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl (hash: Odlzpi1rUO/b0EDHmvnpdZ7OPAK6PxIQA1oQ8JZkzy8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl
                          rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 21:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:93:4a:25:17:73:a4:65:9c:3d:d6:39:9c:75:21:f6:21:1a:61:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EB208891BC3271A7761F7969A4F4B152C4F0E5
        Validity
            Not Before: Jul 20 19:35:41 2026 GMT
            Not After : Jul 21 21:01:41 2026 GMT
        Subject: CN=5AF549776B2F293B125FBB8456F498A8C20B778C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:91:82:ef:c5:b9:a1:cd:9b:45:19:2a:c0:
                    50:35:b0:b3:17:0f:d2:e7:3d:ee:71:a5:41:72:44:
                    6f:df:b0:fa:4b:61:1b:3b:8d:b5:19:9e:28:56:23:
                    65:09:61:ab:e5:9e:d8:c0:6e:d0:f5:2f:c0:bc:fb:
                    63:0b:d7:0d:9d:d1:77:2d:0c:e8:d1:8f:0a:60:32:
                    a6:60:3a:87:3f:2e:43:02:1f:f4:1a:07:35:1a:b3:
                    b0:f1:f1:31:9a:87:66:7a:c4:bb:dc:95:75:5f:5c:
                    2d:2a:a0:90:76:6f:b2:66:30:11:aa:a9:af:94:21:
                    33:e5:9b:df:65:24:96:fb:35:31:23:e4:c7:c8:9b:
                    25:35:f6:f3:f6:79:be:39:96:10:9c:cd:08:75:b4:
                    ff:01:c3:99:ac:a9:89:89:ec:37:f1:5f:89:83:dd:
                    4c:dc:70:05:9a:92:8a:9c:08:b3:2e:3c:f7:54:db:
                    84:f5:35:ee:da:ad:79:12:65:f0:2e:31:1e:cf:d9:
                    e2:4f:f5:6d:17:17:cb:02:ec:59:ee:02:57:3b:b0:
                    bd:03:0a:1a:f0:ed:bc:58:83:f2:6f:f2:59:ed:e9:
                    ef:85:e2:08:bc:13:c1:81:65:c5:70:60:03:74:18:
                    7c:0d:5a:8c:8b:d6:3d:96:12:8b:9b:28:88:f9:ea:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F5:49:77:6B:2F:29:3B:12:5F:BB:84:56:F4:98:A8:C2:0B:77:8C
            X509v3 Authority Key Identifier:
                keyid:F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:c1:cb:80:57:25:f5:41:cd:24:4e:24:d9:2b:27:ca:57:a0:
         f6:8f:b4:43:89:97:80:45:03:a9:27:66:d7:2a:0b:2f:91:21:
         b0:8e:b2:e0:4a:b0:7a:e5:53:9f:b6:87:66:11:cc:e4:34:5f:
         8e:20:87:c1:01:ed:cd:1d:cf:97:f5:52:31:f6:6c:d5:e3:74:
         e8:ae:57:a2:55:b1:e6:79:32:d2:36:12:be:4d:e1:09:10:da:
         5a:5e:1a:07:71:5a:aa:bc:d1:f5:aa:c1:dd:20:a9:f5:72:92:
         f9:20:9c:cd:37:9d:40:6c:09:52:4f:22:6d:d4:45:89:f5:2e:
         b4:53:24:4c:50:8c:f5:6d:61:a2:7e:bc:9d:2d:4c:5d:19:a4:
         3d:ce:8b:77:cb:20:76:ab:53:59:84:b1:ec:df:c6:b8:1a:d7:
         9a:e6:de:47:10:a1:ed:89:c6:9a:69:39:6a:94:ed:60:78:41:
         28:4f:c3:90:4e:63:1d:ff:78:80:a0:9d:bb:11:74:fe:4a:51:
         9a:97:90:7a:f4:0e:ed:20:8e:5c:40:f6:e7:31:62:8e:9b:ed:
         79:1f:81:4b:37:ad:ff:df:5f:3e:60:f1:f2:b6:30:cf:6d:cd:
         2e:ba:6c:af:8a:ad:49:9d:61:d2:21:c3:09:56:5d:65:83:4d:
         b8:e7:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:45:54 2026 by rpki-client