Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
File:                     6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft (raw, json)
Hash identifier:          88HPYgv1cNxHY6Xmg6ddNdL3MjcCCpe5Pg2ykewe83A=
Subject key identifier:   66:60:0A:93:F7:1F:A1:8D:B7:8B:BA:5D:A0:9B:9E:C4:98:D3:13:F0
Authority key identifier: 6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9
Certificate issuer:       /CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
Certificate serial:       4F7EFF45533EB5A386F3484A71F0648ACD725718
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
Manifest number:          37
Signing time:             Thu 11 Jun 2026 21:32:16 +0000
Manifest this update:     Thu 11 Jun 2026 21:27:16 +0000
Manifest next update:     Fri 12 Jun 2026 23:15:16 +0000
Files and hashes:         1: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: rudZyii7Lfn+6okPP2nCFidqxEenNHuTRiklT0/cCEo=)
                          2: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: bcguRSTNIvY7rQWdHUJuBPCFUG/a1bSosrWujs3HsG8=)
                          3: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: 5LO3t2ec+zSYnCCLyJbszIEpzPO5hPTaFRVOpZoVwb8=)
                          4: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: cwuInxrHcmUcjS9mdJBqkUWmxRheczWjceRV75wKsAU=)
                          5: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: nlEA9xUBNBAj9ND4TVjIFUzBFmwE5L2VS2arw13QDV8=)
                          6: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: /xP/BGJ/T56GUz9rKdqDuLuvM0oUPcvbASLwBYqfNoc=)
                          7: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: wgVvr0GfPg6coWh3Xe95X5cFnSDCPizf4FPOmRoPulE=)
                          8: 6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl (hash: +z7pl+FKqOxTQAoxM41Cip4uLrS3HyvkMybI+flwVes=)
                          9: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: kJg5+UCDAgaArEK7/bYT2qXA/yuQ9gOq7vOoYhIRuNU=)
                          10: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: q2LZg0zPA/HJmUlCZRt+sM1EA4mJwCgzRoQLJXxQSgQ=)
                          11: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: yXjHOo1VGbJmJqyGKpG7QhsHY0G1S2EWqXUcTRW8WwE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl
                          rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7e:ff:45:53:3e:b5:a3:86:f3:48:4a:71:f0:64:8a:cd:72:57:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9
        Validity
            Not Before: Jun 11 21:27:16 2026 GMT
            Not After : Jun 12 23:15:16 2026 GMT
        Subject: CN=66600A93F71FA18DB78BBA5DA09B9EC498D313F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:0a:35:61:fa:a4:f3:0a:db:f9:ca:60:6f:
                    3e:a1:46:e3:c2:89:ba:71:9b:86:e3:6e:bb:e8:f7:
                    2b:5c:c3:f6:7e:a9:59:fb:7a:27:95:f5:e4:06:f4:
                    95:b3:53:c1:de:94:ef:7d:73:47:9c:a1:52:95:1b:
                    00:f9:d7:ed:a0:25:d5:e7:74:f9:65:94:c4:7a:cf:
                    e2:a4:a4:ee:3c:c8:68:af:3b:c5:ef:80:1f:40:ed:
                    01:f4:07:94:d8:0b:ba:64:a1:82:22:e4:5b:40:74:
                    9f:1a:cf:1d:98:25:47:b4:a8:2c:b7:8a:45:32:59:
                    ed:e1:0c:5d:27:98:4c:7f:68:32:5b:ff:e2:93:e4:
                    b6:0a:cb:6e:c4:3c:eb:be:2c:cc:21:02:e6:5c:86:
                    96:67:c8:e6:d1:f3:ed:cb:65:d3:f2:52:f1:7d:67:
                    a1:3d:e4:84:71:e0:ef:41:c3:77:87:51:b3:7f:40:
                    df:1a:31:fa:0f:1a:43:2b:09:3e:9f:7b:6a:4d:d0:
                    ad:e6:59:76:66:bf:ec:25:60:e8:a8:a4:8c:41:f4:
                    19:f7:d0:96:da:d1:a8:0d:6a:28:3c:22:ff:62:73:
                    26:14:12:b1:cc:38:cb:95:c9:f4:e7:a5:30:b4:8c:
                    69:87:54:a9:f6:6c:7d:80:29:40:6d:7c:76:a1:9a:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:0A:93:F7:1F:A1:8D:B7:8B:BA:5D:A0:9B:9E:C4:98:D3:13:F0
            X509v3 Authority Key Identifier:
                keyid:6E:6A:5F:0E:4D:D7:C2:13:80:03:36:3A:1A:33:1E:FD:43:30:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/6E6A5F0E4DD7C2138003363A1A331EFD4330AEB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:5e:a5:c5:fb:e7:2f:2f:0b:2c:31:e6:dd:a8:ec:cd:34:4d:
         4b:e5:f3:61:b8:9f:c3:0c:17:05:dc:cb:a9:3f:f0:8e:f0:30:
         86:1c:4d:d9:97:cb:7f:23:e8:e6:47:c9:9a:08:7f:fe:67:99:
         59:93:31:d4:a0:0b:8c:cc:42:45:a3:22:8d:12:8a:5a:03:7c:
         0c:2a:d3:69:93:0f:9d:08:d0:ca:80:94:7b:25:4b:0e:99:81:
         84:df:cd:a0:ee:d9:1b:59:62:45:e1:5d:21:2a:0e:a2:29:f8:
         b4:93:24:6e:4c:8f:29:27:4a:fa:2e:f4:4b:cd:bc:52:57:12:
         59:47:94:04:80:31:99:06:6a:70:de:9a:a4:3b:f9:a3:91:f6:
         b7:97:e6:c9:6b:7c:2d:b8:17:ea:90:1e:95:23:6a:fb:5a:c8:
         21:09:50:35:bd:8b:b4:65:aa:a6:25:8f:fa:75:fc:08:f8:df:
         f3:31:fd:69:63:d3:17:c3:6e:57:58:99:08:44:9c:92:f8:0d:
         9b:cc:62:e9:f2:4f:07:ad:a3:27:a1:81:bf:06:cb:72:7f:60:
         3f:59:8b:13:4a:86:d4:8c:00:99:86:f8:f7:26:fe:47:0a:dd:
         3e:a1:60:31:34:25:c4:17:1e:e4:df:8c:0c:23:d7:c8:fb:1b:
         74:74:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:04:07 2026 by rpki-client