Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
File:                     E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft (raw, json)
Hash identifier:          jmjHVijZVSFkMA1k65C5ib2FQxst4iivZaEnQ4gYd4k=
Subject key identifier:   B6:29:98:63:AA:3A:96:F4:85:86:ED:6E:B3:41:FD:BC:C2:5D:D3:9F
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       41125015BF0BC87B39921087546BB68EED261288
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
Manifest number:          73
Signing time:             Mon 27 Jul 2026 05:24:30 +0000
Manifest this update:     Mon 27 Jul 2026 05:19:30 +0000
Manifest next update:     Tue 28 Jul 2026 08:03:30 +0000
Files and hashes:         1: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: phcDv0m0vLlfwZ99qeKbMtyh63ijZFKiTdhh4MVincM=)
                          2: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: ho4hOFufXidWAYsTbOliD6cEtUCuHGtc5gpjUTGtn7w=)
                          3: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: E6gLrMvPbF2DgnqL5izEh9JlZeBZOXfgDDhLttXgRCM=)
                          4: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: Sd3fhLkfAzIYKIa+lxI8//LD+Sqt+jk5hVCJVdmO8ro=)
                          5: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: v44LsT6qMPli0zPJF9qTEG8AjfBqu7Oywt77FQr+HWc=)
                          6: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: m1pNwOSLl0bdCga72bgV0UjJBtOBSgU1ellU74iVk3k=)
                          7: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: PekXXJ/q55kTEO5kx0CRU0xx2H+12J366upyeQ1nZA8=)
                          8: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl (hash: yC9pOOg27fgHA+dd6/GQSgREvUNQEqD3nHeac+1rU1s=)
                          9: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: 0O4aswxD1VoxCc8I8JRXFhna+2fhOQAti4akwG9PjgQ=)
                          10: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: M9jyn5/cfkiIh8r7xaktGDoS2J9kM31RBGKJ46gBojU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:12:50:15:bf:0b:c8:7b:39:92:10:87:54:6b:b6:8e:ed:26:12:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: Jul 27 05:19:30 2026 GMT
            Not After : Jul 28 08:03:30 2026 GMT
        Subject: CN=B6299863AA3A96F48586ED6EB341FDBCC25DD39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:c4:9e:99:51:0c:eb:a2:20:28:83:b6:db:
                    98:e5:86:22:05:1e:32:14:23:cd:ec:2e:fc:3a:46:
                    dc:0b:e8:46:bb:0a:06:43:18:dc:90:ee:79:5a:70:
                    38:e4:8f:e1:9e:75:7d:77:ab:47:43:2d:a4:76:ba:
                    44:7f:74:8e:14:03:0f:d8:cc:da:f6:58:a8:8e:0a:
                    55:8a:e6:41:ec:fb:61:72:7b:ce:ca:bc:67:c7:12:
                    9a:4b:39:13:41:ff:f0:6e:68:9f:8e:83:be:a6:b2:
                    bd:38:75:24:0b:03:d4:c0:df:1e:30:c4:d0:e1:c0:
                    47:07:a0:01:29:85:2d:0b:e5:60:16:10:00:f9:b2:
                    81:94:a2:17:e1:df:45:47:e4:90:11:b0:19:5b:ba:
                    0f:2e:45:94:90:b0:c3:9d:4f:0c:55:d9:db:66:53:
                    db:96:e8:37:75:3f:7b:8c:a7:79:74:ba:7b:f9:ff:
                    7a:81:8a:cd:47:5d:17:22:51:65:e3:4d:78:09:5d:
                    61:ea:65:3e:ba:19:c9:6d:05:90:3d:eb:04:6f:7d:
                    f1:b8:9f:a1:e6:df:63:e1:a7:66:90:a2:f8:18:71:
                    24:9d:2f:68:e9:8b:c8:a3:52:e7:7f:ec:9e:52:c9:
                    48:e3:ef:e3:4c:d1:6e:d4:71:54:2d:95:08:f6:3b:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:29:98:63:AA:3A:96:F4:85:86:ED:6E:B3:41:FD:BC:C2:5D:D3:9F
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2e:c0:84:db:3a:2f:48:46:d2:92:10:e9:e1:d7:47:68:11:
         74:67:90:f1:89:04:3b:bd:71:63:e4:82:4f:82:8a:11:62:6a:
         55:4c:47:7d:ab:69:d9:40:23:a6:be:5d:97:3c:11:ec:55:de:
         ae:43:6b:21:d2:9f:c2:32:81:56:ed:01:c8:9d:ba:8c:26:50:
         fa:81:64:1a:10:4d:4d:68:35:19:2e:a9:c0:e2:73:c3:6b:da:
         f7:36:94:cb:ab:e8:ee:02:6f:0d:5e:32:73:ef:ad:15:8b:54:
         8c:bd:fd:78:7a:80:9a:12:83:e8:6f:ef:cd:4f:b2:ba:6b:29:
         19:51:79:b0:38:ca:c1:51:ff:ae:ac:0a:db:32:0e:7d:fb:35:
         5e:aa:3b:9d:b0:09:ac:f7:ba:89:1a:28:74:f1:91:04:dc:65:
         2e:0a:e5:f6:3d:07:4b:5b:84:ac:98:f3:b7:87:5c:ca:f7:f8:
         d0:e6:11:b7:e1:8d:d9:f2:e4:b6:00:ea:e5:a8:09:06:4e:01:
         57:a3:66:ea:64:70:7d:2b:52:21:92:e8:c7:2b:79:d5:d4:d0:
         98:34:39:63:1a:da:54:38:21:52:67:22:cf:99:c9:1e:a4:6a:
         06:ee:4c:43:fa:d4:32:fe:5f:b0:d2:2e:58:c0:9f:8a:2c:16:
         44:d9:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:49:45 2026 by rpki-client