Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
File:                     6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft (raw, json)
Hash identifier:          s3Tx4440NoT2chOOVkTBImwqxA1lMa8ZXBBS7lh5pxU=
Subject key identifier:   FA:6B:3E:B3:9E:FC:C3:25:EB:11:53:13:2A:1C:C5:A2:CF:66:FE:BD
Authority key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6
Certificate issuer:       /CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
Certificate serial:       11DC902A80CC92C1D796340F2F46EED92EECCD21
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
Manifest number:          40
Signing time:             Thu 18 Jun 2026 11:25:58 +0000
Manifest this update:     Thu 18 Jun 2026 11:20:58 +0000
Manifest next update:     Fri 19 Jun 2026 15:07:58 +0000
Files and hashes:         1: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: ap5cL+dJSygyHy3JSYMtq1KZaapKag3yb69415WykFA=)
                          2: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl (hash: 3dJHMxOIwyTOhPuN086b6PHHKLccSV67LYA6XBMgUic=)
                          3: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: hHnDBBqlNlJkiM3kC0egNr5SgsQ3bN7kXgKmTLM7WAQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl
                          rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 08:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:dc:90:2a:80:cc:92:c1:d7:96:34:0f:2f:46:ee:d9:2e:ec:cd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
        Validity
            Not Before: Jun 18 11:20:58 2026 GMT
            Not After : Jun 19 15:07:58 2026 GMT
        Subject: CN=FA6B3EB39EFCC325EB1153132A1CC5A2CF66FEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:ff:0c:c7:51:d3:5b:db:22:97:10:da:f5:
                    b5:f1:86:e2:99:21:34:7f:5e:74:b4:4c:33:d4:21:
                    b4:90:9a:e4:1b:a0:1f:45:cc:db:e4:16:2b:44:3b:
                    b7:4a:f4:f0:7b:2c:64:43:f3:eb:99:fe:73:08:f1:
                    fb:5c:c8:92:85:5e:50:41:5c:e6:d6:ac:e2:dd:c9:
                    11:8e:b9:93:98:be:3b:3e:f8:e5:fe:a4:51:64:85:
                    cb:7f:13:c1:af:4a:c5:e0:2d:fc:be:df:5c:ab:2c:
                    5a:1c:45:da:bb:51:20:dc:21:81:10:d6:ae:d6:76:
                    6e:97:63:4e:df:bc:a5:b3:81:1a:71:92:2d:0c:85:
                    43:23:56:7f:96:f0:b4:14:93:f3:a5:40:10:1a:83:
                    90:2d:e8:91:e0:f6:a1:32:7a:32:98:d3:3c:bf:d1:
                    58:69:cb:b8:62:b1:e2:c5:c5:90:e6:35:06:76:db:
                    ac:40:10:c8:54:13:48:f2:73:38:cd:41:c4:f0:3a:
                    47:38:88:89:5e:01:de:aa:c7:13:32:b6:8b:f8:0b:
                    bb:90:dc:63:b1:07:3d:b7:8e:2f:72:9b:78:3c:2c:
                    78:3b:47:c0:4a:3f:9c:c0:e5:e3:62:06:58:0c:74:
                    f2:3d:8f:25:4a:1f:83:7f:7c:a8:88:77:da:88:a2:
                    f1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6B:3E:B3:9E:FC:C3:25:EB:11:53:13:2A:1C:C5:A2:CF:66:FE:BD
            X509v3 Authority Key Identifier:
                keyid:6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:b9:65:55:6c:e3:d6:9c:31:78:10:7e:04:60:c2:57:76:
         77:c4:42:d6:6a:fd:f8:bc:d5:ab:90:05:47:d6:ac:67:4c:8a:
         84:d6:bd:5a:91:c1:65:be:cc:e0:65:d7:b7:d5:e4:eb:00:af:
         d1:01:76:08:35:2d:0d:1e:2b:49:a9:35:e6:df:81:cf:99:4c:
         1a:26:c0:ba:3a:3e:03:2b:51:46:15:64:dd:7f:4d:d1:91:91:
         08:f6:56:a9:3c:7c:43:de:81:18:7c:1f:c3:fd:62:b2:6c:b8:
         fe:8b:3c:53:81:7f:a9:0a:1d:c5:42:b6:f6:30:dd:4d:b6:c3:
         c9:f6:f0:af:ed:16:bd:12:8e:9d:30:58:a5:e0:c9:70:be:ad:
         7c:bd:74:f5:f2:17:d9:3e:b2:0d:b5:10:29:89:8b:3e:03:51:
         b1:85:c8:dc:e4:ce:4b:08:d0:e5:d9:a2:4a:8c:b1:a8:f2:a1:
         a5:b7:a8:9a:df:3a:66:84:fc:0b:ab:72:58:ae:31:c5:e9:a0:
         25:52:10:86:07:e3:2e:f6:eb:95:e5:d2:df:52:95:59:ef:25:
         f3:64:a8:9e:24:9d:64:b1:ef:a3:7c:af:96:59:dd:4d:3f:b8:
         f0:59:36:61:f6:23:e5:3e:38:ad:5b:7c:b9:42:ce:02:68:b3:
         f5:72:43:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:33 2026 by rpki-client