Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
File:                     D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft (raw, json)
Hash identifier:          pBY/G2u/aumAO0S7kKjpIxZYZ6ncjaUWhdZYOCoTpow=
Subject key identifier:   96:F0:C3:CB:93:F8:10:D4:B5:78:C9:08:95:CA:50:D8:D3:B6:F1:B0
Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF
Certificate issuer:       /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
Certificate serial:       50B5A321D5EC7BC184DA3EB2C6EA1ED69F5079F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
Manifest number:          94
Signing time:             Wed 19 Aug 2026 18:05:48 +0000
Manifest this update:     Wed 19 Aug 2026 18:00:48 +0000
Manifest next update:     Thu 20 Aug 2026 20:32:48 +0000
Files and hashes:         1: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA=)
                          2: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0=)
                          3: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: uML5u30yWokqHzJ1SmFvpIB0jm9tfbVvuIh4MPBrSV4=)
                          4: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=)
                          5: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc=)
                          6: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl (hash: h23zBWdxTUQ+tOQuivxhy3nYd9TcankvKau0gWaegRs=)
                          7: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: QjvSUWXkehuis++c3tdVVUbDO47gQG2w6XSjtlUzYcs=)
                          8: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: tTZQRAZZ/xG34AQ1RUk/V3CgCC8lS878wnNuxBTMYiw=)
                          9: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: oeT54NjL50r7xCLxIqfzZvTu9HtL0qe2DtlLMw9OJ/s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl
                          rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 20:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b5:a3:21:d5:ec:7b:c1:84:da:3e:b2:c6:ea:1e:d6:9f:50:79:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
        Validity
            Not Before: Aug 19 18:00:48 2026 GMT
            Not After : Aug 20 20:32:48 2026 GMT
        Subject: CN=96F0C3CB93F810D4B578C90895CA50D8D3B6F1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:64:ba:0c:d3:fb:f6:f5:91:a9:50:74:6e:
                    70:01:76:b6:9b:1d:c0:97:f4:cd:03:4b:33:75:b5:
                    73:cb:bc:c9:50:d9:25:31:39:86:7b:df:bc:dc:c8:
                    75:d7:fc:de:d2:9b:39:05:b7:f7:96:d4:e6:5c:e3:
                    34:22:d1:81:a3:36:b5:da:ac:b7:c6:2d:0c:7e:a4:
                    6b:a5:70:2f:9d:1d:0e:8c:ee:23:f2:8c:d8:75:fe:
                    d5:b8:0d:e5:6e:9b:46:30:dd:91:a5:df:3e:05:1d:
                    70:12:52:5d:09:3c:68:bf:e3:02:d3:79:1b:ab:8e:
                    5a:84:2c:b8:f6:a3:d9:20:a1:ff:e7:c1:0e:18:4f:
                    db:6d:41:cc:f9:9e:ac:bb:d6:75:b9:7b:43:a1:fa:
                    a0:27:fd:1b:71:7b:96:d0:d8:36:e0:8f:5b:1d:92:
                    ed:52:c9:cc:02:b8:0c:00:70:18:61:6c:b7:4d:54:
                    71:05:6d:66:78:8c:2e:c1:7b:6f:55:ec:4e:00:79:
                    00:8a:ba:16:25:e3:f7:fc:29:9e:fd:8b:ef:df:85:
                    2d:99:16:31:d3:49:41:72:85:a6:79:d0:9b:d3:38:
                    b6:75:c9:9b:7a:0f:ed:61:e9:b4:cd:18:d2:8a:5b:
                    ea:18:b5:f1:24:cd:b7:c3:1b:55:d9:e3:2b:08:23:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F0:C3:CB:93:F8:10:D4:B5:78:C9:08:95:CA:50:D8:D3:B6:F1:B0
            X509v3 Authority Key Identifier:
                keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:92:05:28:6a:b7:9b:a0:65:0c:c9:0c:ca:ec:6c:24:22:60:
         f8:b0:f5:9b:68:d2:82:08:7c:85:17:d5:cc:28:71:1e:09:f3:
         ea:18:49:ea:c6:be:88:d3:78:60:ab:2d:c0:c8:7e:64:26:62:
         c7:71:61:be:44:31:39:f6:81:f6:d4:e8:bb:78:ad:41:96:7b:
         e1:9f:57:81:15:18:05:a3:70:9b:6e:9b:4f:23:2d:e8:13:c5:
         14:33:2d:e3:0b:b5:5d:58:e0:8d:cd:8b:f4:fb:b6:91:0d:68:
         b3:c7:51:99:11:5e:1e:42:8d:82:d8:5b:50:b1:a3:64:35:14:
         ff:96:ba:32:8e:0b:5a:05:23:36:bd:e3:de:f3:43:62:d7:3d:
         b6:42:bb:81:9c:a1:59:b1:98:91:de:d9:81:27:d2:fa:0c:66:
         b2:bb:c8:2c:4e:b2:04:ab:24:69:e9:6a:d8:96:38:34:4d:20:
         1a:3f:6b:f5:67:b6:7d:4b:b4:50:ec:43:ba:7f:3a:79:5b:a3:
         6e:95:57:7c:52:13:9d:b1:f3:82:d1:2e:83:4f:9d:5d:6f:78:
         f4:3d:fd:57:03:72:ef:b4:ee:c7:4a:85:c1:01:45:7b:57:3c:
         ba:01:cb:f7:30:60:2d:20:65:dc:e5:b2:2a:98:bd:cf:f1:20:
         17:3f:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 13:14:59 2026 by rpki-client