Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
File:                     AF6B7BCDACF90BA83205EA298327379BAB489418.mft (raw, json)
Hash identifier:          UwYF+lmOP3E2m2mnyK575DI3i2iqWxz+FWK9u5ndPkI=
Subject key identifier:   5D:48:59:F4:B9:7E:17:DD:21:55:4F:8E:34:9B:D3:72:C0:B2:BE:82
Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
Certificate issuer:       /CN=AF6B7BCDACF90BA83205EA298327379BAB489418
Certificate serial:       3420645F3DE934E9935FEA32C03C18B86E6D1246
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
Manifest number:          73
Signing time:             Sun 26 Jul 2026 20:03:17 +0000
Manifest this update:     Sun 26 Jul 2026 19:58:17 +0000
Manifest next update:     Mon 27 Jul 2026 22:59:17 +0000
Files and hashes:         1: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: g0pqFy9DWm0Sz42lbSirSeYkq3Vdx407OgsTjSScBgc=)
                          2: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: K8j/ZLU+ci7JWbQ44lPBg2aflFRtCWtRODUltXPnDVo=)
                          3: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: +CIQNtkENDgMFXO899OFs+eQgqEbZwGsuSxbjsO2CJU=)
                          4: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: qCc2JIEbiwtQdnz7uQXbC2p3w6YwxAaU8dCI6McQWsM=)
                          5: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: oE4Q0cuL75fyXaIHf3JDUpfM+2/K4+wsnH/TeLPodS0=)
                          6: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: m+sPMgDP6AqfDbfIIzCUcgfgt53+FkXMgNrd1zzKT1I=)
                          7: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: y5wzCpmCgccfr9+aDXB1mUmJvFdLQ1aEGTJds2iwsoo=)
                          8: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: Lg4qdsj1osZUt2Wgs1cQh8M+Cq27I8kA05MBhaZ1e2E=)
                          9: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: xu1cN52iKwYrST7ZHiU1OG9/BN4NR23in1R/aZa/9/Y=)
                          10: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: BxCzNrTcp0dp4A7C91gDRudiTOOmKrDBcvkaJa1pltE=)
                          11: AF6B7BCDACF90BA83205EA298327379BAB489418.crl (hash: pk8yiakuuBtXdizFqDcH7T/ooTol4CYlpTfSusKRbew=)
                          12: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: EFzx2gdrAoK4dLqP6OWhoqarBZwTNPP8hlTF8ndHsA8=)
                          13: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: sxFoSO5566DvevtkqciXR0xAuQamF9AudcC/0/+/BMA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl
                          rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 22:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:20:64:5f:3d:e9:34:e9:93:5f:ea:32:c0:3c:18:b8:6e:6d:12:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418
        Validity
            Not Before: Jul 26 19:58:17 2026 GMT
            Not After : Jul 27 22:59:17 2026 GMT
        Subject: CN=5D4859F4B97E17DD21554F8E349BD372C0B2BE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:1f:8d:dc:1a:13:cb:ab:3f:f4:fa:01:14:
                    2c:38:60:16:07:39:6a:30:c7:5e:ab:20:2e:ee:30:
                    89:41:c2:02:8f:06:30:f6:c2:03:b8:1c:b4:56:5b:
                    b6:cd:56:aa:47:20:e3:66:55:f6:77:94:15:d0:4d:
                    a5:ef:e6:e6:a7:52:e7:cc:fa:3f:f6:d5:9f:a6:32:
                    77:4f:9d:f5:95:cb:d8:d3:e7:20:c1:0b:e7:fd:7f:
                    b1:37:c1:0f:0a:09:d3:ab:a5:20:82:d8:61:4a:c5:
                    8f:e8:4e:52:b5:c5:89:94:d9:25:f5:0b:56:61:2c:
                    25:e8:4e:da:50:ee:fc:aa:31:2d:1c:16:f0:db:99:
                    b5:95:95:73:cf:06:ee:c2:bc:6f:b7:3a:5f:fa:7a:
                    62:6d:80:9e:11:51:20:ba:43:2d:01:a1:c5:79:a3:
                    a0:b0:66:fa:29:8b:e6:69:e6:52:20:81:ec:8f:09:
                    d4:74:ff:01:4a:b7:4c:4e:9f:01:52:a3:70:9a:17:
                    ea:2e:3a:05:94:fe:40:5c:85:88:26:ae:5e:bc:6f:
                    5f:5e:4c:df:6d:84:14:54:72:c5:5c:7c:f2:8b:a9:
                    e8:9a:2f:3f:42:9d:4e:e5:4e:48:19:85:c3:44:0e:
                    08:9e:e3:c5:5e:8e:ee:11:46:ac:5a:67:6a:c7:f4:
                    76:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:48:59:F4:B9:7E:17:DD:21:55:4F:8E:34:9B:D3:72:C0:B2:BE:82
            X509v3 Authority Key Identifier:
                keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d1:2f:3b:3e:a1:18:21:c2:f3:f6:2a:06:29:38:9b:ef:33:
         25:f2:c4:7a:e5:77:b7:ef:4d:42:28:31:f0:77:48:de:15:13:
         d2:d9:3e:b2:7d:a5:91:5b:cb:f3:f7:52:36:da:e1:59:ac:c9:
         b1:02:f6:c8:19:62:b9:d1:74:60:1e:e3:a3:6f:a7:81:46:06:
         a4:e1:bf:57:e1:f3:44:61:ac:1f:f8:cc:b2:89:01:6f:e5:0d:
         bb:89:ef:0c:d6:0e:42:9e:cd:db:16:24:40:42:c8:a1:84:1f:
         9b:23:1b:f6:89:1f:b5:43:0f:61:dc:23:dc:10:00:e3:25:da:
         46:d1:6c:72:d8:c8:13:0c:b5:3c:05:96:42:23:41:26:a8:4e:
         01:19:2f:6e:49:de:cd:9d:7e:fd:38:18:39:af:21:04:b7:73:
         37:0b:19:32:f9:f3:bf:2b:30:c6:a9:67:a4:47:e5:4a:6a:8d:
         53:fc:f0:17:06:a2:87:f5:e1:91:60:3b:04:b1:48:b0:ba:61:
         0d:af:33:b2:38:60:16:95:94:ca:a7:91:5c:ee:a1:84:5b:bd:
         98:4a:02:94:41:37:c2:32:b3:19:81:7c:08:31:fd:43:d0:cc:
         b7:b4:ba:f6:9a:5f:8e:66:7e:9b:4b:f9:3e:f6:ce:2d:9f:8e:
         39:aa:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:22:02 2026 by rpki-client