Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
File:                     B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft (raw, json)
Hash identifier:          tl38e7VP9w+NFjG6Tezb+lyzDlJxOEJbSeykiYH/Gpw=
Subject key identifier:   E5:AF:59:A0:3B:66:DC:0C:C1:05:68:03:87:D6:48:09:C6:FB:F6:91
Authority key identifier: B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1
Certificate issuer:       /CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
Certificate serial:       21DF68AD6EBCA03F2118B91B37979A92914975A6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
Manifest number:          6B
Signing time:             Mon 20 Jul 2026 12:52:29 +0000
Manifest this update:     Mon 20 Jul 2026 12:47:29 +0000
Manifest next update:     Tue 21 Jul 2026 15:57:29 +0000
Files and hashes:         1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: hdJk3P7tUKxgaAbM7WQzserDmvKDtOC0Ipsv3OLAf5g=)
                          2: B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl (hash: LWA2bFgOJUPWmxwTSe4er30B8No4qOoKaUzm2LQ8l+c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl
                          rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 15:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:df:68:ad:6e:bc:a0:3f:21:18:b9:1b:37:97:9a:92:91:49:75:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
        Validity
            Not Before: Jul 20 12:47:29 2026 GMT
            Not After : Jul 21 15:57:29 2026 GMT
        Subject: CN=E5AF59A03B66DC0CC105680387D64809C6FBF691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:96:76:a9:79:3c:18:db:da:f9:c0:d3:83:
                    6a:de:6a:50:35:0c:b9:d1:f6:e3:58:7b:73:21:c9:
                    c3:9b:d4:70:71:12:e0:93:cb:71:5a:f4:ce:ee:ed:
                    ab:56:3a:d4:37:d0:a3:51:16:da:af:cd:17:cb:a6:
                    31:66:87:c9:c4:76:b8:a4:91:1d:b7:01:bb:ba:63:
                    bb:f0:67:56:2e:79:13:94:58:4d:8f:fc:2b:cb:f8:
                    0d:be:08:e0:30:3e:da:ea:ad:ef:e1:66:02:97:d9:
                    b9:a2:f4:1c:fa:e1:62:fb:4f:d1:fc:f3:06:f0:11:
                    d8:36:7d:08:6f:62:69:e8:5a:a1:52:74:c7:9d:3c:
                    fc:51:fb:c4:c5:36:42:c8:8f:69:e7:9d:d2:ae:87:
                    c3:a4:b2:03:9b:7e:e7:d0:14:b8:6f:30:3f:06:84:
                    63:5d:2f:9c:a8:da:ea:fe:ad:d0:d8:29:9a:62:f4:
                    fd:38:0d:6a:74:2f:6e:45:5d:83:48:e5:cd:ea:24:
                    ae:30:8e:6e:c1:9c:97:54:75:0c:74:33:2e:70:b6:
                    f3:36:87:7d:ab:c7:88:e1:ad:42:60:bd:02:e7:ac:
                    33:fb:0b:00:1b:fb:f3:72:f1:1c:ab:39:e8:72:24:
                    aa:68:10:ba:59:7b:55:4e:17:6c:96:9b:b1:0c:c5:
                    f8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AF:59:A0:3B:66:DC:0C:C1:05:68:03:87:D6:48:09:C6:FB:F6:91
            X509v3 Authority Key Identifier:
                keyid:B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:49:92:ef:10:28:83:69:cf:e4:c3:79:89:a1:54:fa:7d:be:
         9e:83:6a:1e:88:b3:7d:c7:ea:ae:4a:22:74:34:53:96:92:3b:
         f3:dc:20:1f:8e:27:6a:af:79:a4:20:bc:b5:f6:61:67:72:6c:
         56:f2:92:9c:46:ca:21:bf:00:c8:a6:df:d4:b1:fd:08:99:76:
         ca:de:6d:70:12:6a:bd:76:64:09:47:a0:10:02:3c:77:a2:5b:
         43:65:2f:dd:71:f8:2a:c2:3f:ab:0a:35:90:b0:7c:bc:79:9e:
         87:f7:71:a9:98:6f:2a:86:e3:6e:e3:af:9d:09:97:bc:52:4f:
         a7:9c:a7:20:12:a2:65:7d:fb:a9:7f:f6:83:9f:30:4f:56:52:
         ed:7d:9d:d4:13:3c:db:ac:b7:33:65:c9:0a:dd:c4:4e:08:00:
         b7:98:ce:db:b1:91:f8:75:65:bd:a7:51:fb:44:b7:da:00:5b:
         87:c4:7f:f1:c1:54:21:08:4e:a0:51:12:5f:47:2e:9e:d1:0b:
         aa:ad:dd:70:1c:2e:8b:8d:e3:e0:e9:89:d6:bb:ae:e3:65:bc:
         d0:cc:0d:dc:22:ab:7b:66:66:8d:1b:1e:17:e8:4a:09:d8:79:
         86:a4:08:7f:b9:fb:80:ea:43:71:e2:54:96:cc:d0:95:e8:62:
         12:91:d6:16
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUId9orW68oD8hGLkbN5eakpFJdaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE1RDkxMDBEQzhCMzAyOUEwMTZGNTA5QzdEM0RCQjE4
NDgwNUFBMTAeFw0yNjA3MjAxMjQ3MjlaFw0yNjA3MjExNTU3MjlaMDMxMTAvBgNV
BAMTKEU1QUY1OUEwM0I2NkRDMENDMTA1NjgwMzg3RDY0ODA5QzZGQkY2OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIpZ2qXk8GNva+cDTg2realA1
DLnR9uNYe3MhycOb1HBxEuCTy3Fa9M7u7atWOtQ30KNRFtqvzRfLpjFmh8nEdrik
kR23Abu6Y7vwZ1YueROUWE2P/CvL+A2+COAwPtrqre/hZgKX2bmi9Bz64WL7T9H8
8wbwEdg2fQhvYmnoWqFSdMedPPxR+8TFNkLIj2nnndKuh8OksgObfufQFLhvMD8G
hGNdL5yo2ur+rdDYKZpi9P04DWp0L25FXYNI5c3qJK4wjm7BnJdUdQx0My5wtvM2
h32rx4jhrUJgvQLnrDP7CwAb+/Ny8RyrOehyJKpoELpZe1VOF2yWm7EMxfhTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5a9ZoDtm3AzBBWgDh9ZICcb79pEwHwYDVR0j
BBgwFoAUsV2RANyLMCmgFvUJx9PbsYSAWqEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzlkZTBjMzktODRkNS00NDA1LTk1NGQtNGQzZDcxMjY5M2NlLzAvQjE1RDkxMDBE
QzhCMzAyOUEwMTZGNTA5QzdEM0RCQjE4NDgwNUFBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMTVEOTEwMERDOEIzMDI5QTAxNkY1MDlDN0QzREJCMTg0ODA1
QUExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1
NGQtNGQzZDcxMjY5M2NlLzAvQjE1RDkxMDBEQzhCMzAyOUEwMTZGNTA5QzdEM0RC
QjE4NDgwNUFBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKNJku8QKINpz+TDeYmhVPp9vp6Dah6Is33H
6q5KInQ0U5aSO/PcIB+OJ2qveaQgvLX2YWdybFbykpxGyiG/AMim39Sx/QiZdsre
bXASar12ZAlHoBACPHeiW0NlL91x+CrCP6sKNZCwfLx5nof3camYbyqG427jr50J
l7xST6ecpyASomV9+6l/9oOfME9WUu19ndQTPNustzNlyQrdxE4IALeYztuxkfh1
Zb2nUftEt9oAW4fEf/HBVCEITqBREl9HLp7RC6qt3XAcLouN4+Dpida7ruNlvNDM
Ddwiq3tmZo0bHhfoSgnYeYakCH+5+4DqQ3HiVJbM0JXoYhKR1hY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:32:21 2026 by rpki-client