Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
File:                     6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft (raw, json)
Hash identifier:          7UZNECvZ+TRVcVA69O3515/tiBTjhqIbCPIg9KR23Jo=
Subject key identifier:   FE:DC:07:6F:7B:4D:30:4F:97:A8:06:C5:DA:D2:5E:BF:2B:38:43:8C
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       17DA181314835E9E34B820C3B7A477D6DA76886F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
Manifest number:          EE
Signing time:             Tue 27 Oct 2026 15:19:26 +0000
Manifest this update:     Tue 27 Oct 2026 15:14:26 +0000
Manifest next update:     Wed 28 Oct 2026 16:31:26 +0000
Files and hashes:         1: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: /xP/BGJ/T56GUz9rKdqDuLuvM0oUPcvbASLwBYqfNoc=)
                          2: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: rudZyii7Lfn+6okPP2nCFidqxEenNHuTRiklT0/cCEo=)
                          3: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: nlEA9xUBNBAj9ND4TVjIFUzBFmwE5L2VS2arw13QDV8=)
                          4: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: kJg5+UCDAgaArEK7/bYT2qXA/yuQ9gOq7vOoYhIRuNU=)
                          5: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: wgVvr0GfPg6coWh3Xe95X5cFnSDCPizf4FPOmRoPulE=)
                          6: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: bcguRSTNIvY7rQWdHUJuBPCFUG/a1bSosrWujs3HsG8=)
                          7: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: yXjHOo1VGbJmJqyGKpG7QhsHY0G1S2EWqXUcTRW8WwE=)
                          8: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: q2LZg0zPA/HJmUlCZRt+sM1EA4mJwCgzRoQLJXxQSgQ=)
                          9: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: 5LO3t2ec+zSYnCCLyJbszIEpzPO5hPTaFRVOpZoVwb8=)
                          10: 6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl (hash: CdrSjj7gVwJATNJrtlCDu/GABVEjMgvkANETcC6MfgU=)
                          11: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: cwuInxrHcmUcjS9mdJBqkUWmxRheczWjceRV75wKsAU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 11:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:da:18:13:14:83:5e:9e:34:b8:20:c3:b7:a4:77:d6:da:76:88:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: Oct 27 15:14:26 2026 GMT
            Not After : Oct 28 16:31:26 2026 GMT
        Subject: CN=FEDC076F7B4D304F97A806C5DAD25EBF2B38438C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:aa:3e:cd:8c:ac:41:e3:dd:cc:07:36:14:
                    31:d1:40:f6:c9:5e:a6:06:68:ce:b2:88:d6:26:30:
                    e0:5b:06:ec:ee:6a:96:67:10:71:0a:11:40:f8:73:
                    98:68:03:b6:8d:6c:fa:6f:eb:c4:5a:74:65:6f:97:
                    ee:ef:e7:04:25:02:34:a6:d1:3b:55:7e:c0:2f:a7:
                    24:c3:9f:d3:f2:49:6c:2c:04:1e:fc:5a:09:15:e7:
                    a7:0e:48:6a:7b:f5:a6:1f:93:ab:0c:2f:13:3e:87:
                    1b:67:98:c2:a1:c9:fd:3e:0c:e7:52:b8:20:48:10:
                    4c:8f:54:16:9d:95:3a:4b:d3:55:eb:97:76:41:e0:
                    a5:9c:b2:45:95:76:4b:07:ea:56:51:48:45:16:34:
                    83:0f:e3:b2:ca:32:04:98:32:fa:56:ef:e5:bb:01:
                    44:cc:43:f5:00:72:bf:57:e4:0f:b9:cf:06:cb:dd:
                    24:56:20:c7:9d:c9:27:98:24:dc:0a:dd:69:ba:3f:
                    30:28:62:c1:d3:36:8e:ca:fb:aa:54:5c:a3:3d:e2:
                    27:b4:f2:08:76:30:4a:ed:bc:d9:79:34:af:b4:38:
                    73:91:b2:c1:b1:94:f8:5f:19:7c:c8:90:3a:10:6f:
                    9e:82:bf:e3:27:15:d6:6e:53:ba:36:22:1d:e1:aa:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:07:6F:7B:4D:30:4F:97:A8:06:C5:DA:D2:5E:BF:2B:38:43:8C
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3e:58:e7:4f:b7:fa:7b:a4:19:be:e3:ef:9a:ea:f3:1c:de:
         43:66:72:25:85:02:c1:ad:65:8b:3a:78:88:9c:b0:dd:c6:91:
         45:d7:b1:36:a4:c1:fc:44:0c:f4:3e:b7:0f:bc:19:a2:7e:a8:
         ac:e0:85:a8:55:d0:8a:d1:83:54:83:9c:35:7c:63:17:88:3d:
         fe:1e:83:fd:eb:58:e4:4f:a6:47:95:8d:d8:8d:13:0f:09:ed:
         08:2a:5b:97:21:ad:5c:2d:69:cd:e8:39:4a:77:70:45:d3:df:
         e2:fc:3b:f3:09:7e:13:8a:89:37:e9:b6:8b:26:e8:9b:82:2e:
         56:d4:6c:15:02:30:24:91:3d:b1:40:91:f5:38:17:b4:4a:fd:
         77:11:13:4a:47:d1:6e:69:48:b2:e0:8f:99:d8:d4:73:b5:de:
         77:4f:bf:c4:60:1e:3e:9f:d7:35:e1:16:c7:6f:83:90:02:14:
         bd:c0:f6:f5:36:06:73:6d:b6:ff:30:f4:5d:01:87:e6:d4:ee:
         bc:a6:89:91:24:35:e8:be:57:5a:64:d6:c9:60:e5:ec:05:bb:
         c0:5d:ab:c9:29:c6:6a:05:49:01:ef:af:a8:0c:9a:2c:ea:da:
         e4:dc:b7:81:6c:c3:08:e1:5f:8d:56:43:e0:fc:26:80:a0:80:
         eb:ba:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:56 2026 by rpki-client