Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
File:                     6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft (raw, json)
Hash identifier:          JVoKMT2cH0SmwBKV7hKw5pIhrIAR+reJ4f4xmRP4TSw=
Subject key identifier:   97:BC:3E:49:21:56:20:CE:22:5C:36:E2:71:C5:A6:82:4B:3A:7C:68
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Certificate issuer:       /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial:       414CCBE31404DC9009FE86E5BE2E09FEC0AE1EC1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
Manifest number:          6A
Signing time:             Mon 20 Jul 2026 20:16:20 +0000
Manifest this update:     Mon 20 Jul 2026 20:11:20 +0000
Manifest next update:     Tue 21 Jul 2026 20:23:20 +0000
Files and hashes:         1: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: pjt/PoMD2rISkjEBbEVdFpq3Lfkti0ImQZr5UDhsxdI=)
                          2: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=)
                          3: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=)
                          4: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os=)
                          5: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl (hash: NeusYfRluTLy9Q6BhcqLfIxDt+2aytBmG2Aq250CtdU=)
                          6: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=)
                          7: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: 2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=)
                          8: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: S7UAzIZzLebBGoPx8HW74rT6/bn+VmPadNNYeTv3kZU=)
                          9: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 20:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4c:cb:e3:14:04:dc:90:09:fe:86:e5:be:2e:09:fe:c0:ae:1e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
        Validity
            Not Before: Jul 20 20:11:20 2026 GMT
            Not After : Jul 21 20:23:20 2026 GMT
        Subject: CN=97BC3E49215620CE225C36E271C5A6824B3A7C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:f8:29:05:b5:0b:29:58:2d:1c:16:ed:75:
                    46:d1:0e:5e:60:f8:72:3b:7c:a5:9a:28:0f:10:5b:
                    f5:1e:f7:b3:7f:d8:22:de:95:98:5c:02:db:c3:8f:
                    31:ec:b6:d1:0b:3b:83:54:af:78:e4:63:03:cd:36:
                    87:f2:92:1c:98:84:a5:8d:f1:8e:85:34:bc:b9:40:
                    4f:11:75:46:c0:d7:e0:86:6b:77:a1:81:86:7d:04:
                    77:43:f8:6a:52:e3:50:ba:e8:91:4b:cb:dd:88:38:
                    d1:de:2c:79:3f:2f:cd:01:be:f7:8a:36:d0:2c:df:
                    89:40:4b:64:df:aa:b6:6b:3a:dd:b2:ab:12:f7:64:
                    8e:6e:bc:af:83:99:ad:37:97:c3:ad:ba:15:ac:85:
                    ff:5e:70:7b:c8:06:a4:8e:6c:92:16:b5:47:e5:18:
                    e1:79:2e:db:96:33:80:8a:1c:32:7d:1e:df:62:94:
                    5d:c3:48:9c:1b:93:3d:59:43:82:81:9f:6e:a6:7c:
                    fc:f1:fe:ef:57:66:0c:f3:93:4c:e3:e7:8d:67:d0:
                    be:54:5c:9e:9c:19:4c:bb:69:09:4d:03:94:47:0c:
                    fd:e9:ac:bb:9e:fc:d1:12:31:7e:3c:8b:fa:84:ea:
                    53:92:2a:e7:a8:58:bd:44:22:21:3b:f9:4a:c1:3d:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BC:3E:49:21:56:20:CE:22:5C:36:E2:71:C5:A6:82:4B:3A:7C:68
            X509v3 Authority Key Identifier:
                keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:40:d1:01:8e:3f:cb:46:37:11:98:bb:17:41:49:6c:8e:6c:
         7f:d7:af:bc:cd:b9:d6:5d:94:4d:96:54:91:af:10:d0:07:9e:
         ac:19:54:ae:a0:46:fe:3b:da:38:cc:14:b4:89:e5:d0:18:3a:
         0d:65:03:af:59:e4:49:d3:33:09:2f:7e:9b:1d:de:f4:4b:d3:
         e3:ac:d7:a2:eb:20:f2:4b:77:8a:6a:23:e3:5d:bd:66:f7:2a:
         24:67:c0:06:cc:44:6c:9b:4e:81:01:54:ff:61:93:fc:25:d4:
         b3:5b:62:b1:4e:49:51:b4:f2:e7:d6:a6:5b:c0:ed:1f:b4:16:
         8c:63:bd:ca:e4:65:6c:11:f8:30:7f:b7:9c:c4:52:6b:bb:65:
         8a:2e:4e:96:6e:2a:94:43:90:d9:d8:34:cc:29:2d:58:49:87:
         b5:a4:5d:9c:0c:22:12:0d:78:77:06:d4:2c:dc:11:81:f4:16:
         dd:18:f5:63:d2:ef:b7:08:54:29:ea:78:11:29:9d:b4:2c:93:
         9f:aa:3d:f9:05:84:72:a6:cc:00:84:a4:6b:ac:d0:21:7f:d8:
         66:09:ac:7c:10:1a:18:1e:c1:dd:4e:bf:57:b5:bd:42:5f:ba:
         30:a5:12:01:df:ec:31:b0:9c:f2:50:8d:a9:8f:c0:a8:72:d0:
         bd:c5:33:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:43:42 2026 by rpki-client