Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
File:                     FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft (raw, json)
Hash identifier:          imDn474EL4UOpprYoKOic8cZOCliIqOoDUaL8gzSvpA=
Subject key identifier:   29:42:22:08:72:CA:26:25:44:07:3A:B3:9A:0C:25:7F:98:FE:15:D1
Authority key identifier: FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46
Certificate issuer:       /CN=FD6BC01026034705BA5D14EB31CD23B6C3F86B46
Certificate serial:       6FEE183D650B2AEDB1660A49B47FD08904CB8E47
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 17:05:36 +0000
Manifest this update:     Tue 02 Jun 2026 17:00:36 +0000
Manifest next update:     Wed 03 Jun 2026 17:40:36 +0000
Files and hashes:         1: 3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa (hash: fbSCqhwvsaol0lBcmUKKDf4ORcQLNjmes/NlWyieIPw=)
                          2: FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl (hash: p2+8lfWaQBdLCCEAVGEcPkm2qCafLkVXgwwrjDEeVl8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl
                          rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ee:18:3d:65:0b:2a:ed:b1:66:0a:49:b4:7f:d0:89:04:cb:8e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6BC01026034705BA5D14EB31CD23B6C3F86B46
        Validity
            Not Before: Jun  2 17:00:36 2026 GMT
            Not After : Jun  3 17:40:36 2026 GMT
        Subject: CN=2942220872CA262544073AB39A0C257F98FE15D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:7c:f6:cc:60:51:3e:f5:ac:a5:37:b1:40:
                    af:7a:ef:dd:aa:5c:c1:c6:c6:46:c8:c3:5c:ea:08:
                    79:ca:c2:1d:fe:72:89:45:cd:4d:85:ab:e4:fe:a3:
                    35:fb:05:62:f0:23:12:30:a4:90:79:f6:db:c0:0e:
                    a1:57:da:33:f3:dc:34:aa:5f:6c:0f:58:1f:84:a1:
                    fc:a0:a9:67:fd:c9:c6:ef:4a:f0:32:1a:32:c0:a6:
                    8f:4d:2f:a5:4b:95:8f:2b:c3:c7:1f:6b:c8:fc:41:
                    e0:d9:2b:6d:ad:8f:e5:3c:01:4a:c3:1b:35:8a:03:
                    5f:85:d1:92:6e:9a:a3:70:3d:cc:e1:c5:d3:a5:03:
                    51:7b:f2:ec:f4:9b:1b:d4:b0:cb:02:34:7b:43:c6:
                    ff:3a:15:e8:89:35:29:32:77:a4:29:d3:8b:92:ae:
                    08:be:dd:c7:17:7f:01:0e:ed:65:f1:5f:ce:84:a3:
                    7f:c7:f6:bd:16:47:b7:bc:a3:c2:c1:29:e4:30:7b:
                    f9:c7:ae:99:1c:5c:b2:6d:07:27:0a:2e:cc:ac:04:
                    af:45:da:9e:b5:85:66:c0:83:b3:0b:10:aa:98:ea:
                    89:b5:9d:56:6d:39:37:c2:3f:17:5d:41:ef:95:e9:
                    30:42:58:a8:49:e4:c7:8b:53:c3:e7:5a:67:60:82:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:42:22:08:72:CA:26:25:44:07:3A:B3:9A:0C:25:7F:98:FE:15:D1
            X509v3 Authority Key Identifier:
                keyid:FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:84:9a:6f:f2:3f:64:24:2f:14:c6:3c:e2:f4:1c:4d:ba:9e:
         eb:df:ee:7c:18:c7:d8:57:d8:e2:c5:d8:5e:6b:a2:6c:7f:1f:
         ba:16:e5:10:1d:a3:5b:63:f6:1b:11:5a:2e:62:04:2a:09:95:
         a3:e1:4c:42:01:ec:d6:e2:12:b2:08:2d:70:09:0e:f8:51:ba:
         94:eb:7d:c8:a1:9a:8a:b9:e2:d5:32:c8:15:bd:62:cd:ce:44:
         2b:20:44:6a:e1:ba:70:24:07:85:d4:4b:2d:87:ab:47:30:4b:
         ef:41:20:68:e2:db:64:1b:18:29:ba:16:14:0f:ea:1d:0a:16:
         3c:9e:7e:48:b3:74:38:85:a0:1c:57:a4:f6:0e:3b:c7:89:d0:
         7d:94:3a:dc:65:3a:51:07:47:64:df:e8:7a:c9:26:ba:fb:48:
         5b:91:6e:97:5b:6e:a2:69:91:d5:be:b2:6d:44:3b:31:db:99:
         4d:50:39:31:c3:7c:55:27:7d:45:4a:cd:42:13:84:1d:28:ff:
         03:a6:8b:8d:05:de:1c:63:5e:9c:55:b2:c3:99:0a:54:44:44:
         f0:d7:22:51:96:97:5e:96:da:75:09:b8:fa:99:1a:58:4e:e7:
         7a:ef:63:e5:6d:de:b5:14:9f:0b:90:a1:76:bc:10:34:ed:ac:
         af:38:dd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:53:25 2026 by rpki-client