Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft
File:                     6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft (raw, json)
Hash identifier:          eiNY66z1LFk2cLVpBfS4JTZXo2CDtlJzJTOPs6JPRTc=
Subject key identifier:   69:2C:6F:01:CA:52:5B:5B:B6:6A:99:2F:1F:66:A1:A2:F2:84:3F:F9
Authority key identifier: 6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC
Certificate issuer:       /CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC
Certificate serial:       404FE7FF2F401C607F8A23AEF6442B2877791735
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft
Manifest number:          42
Signing time:             Sat 20 Jun 2026 05:51:51 +0000
Manifest this update:     Sat 20 Jun 2026 05:46:51 +0000
Manifest next update:     Sun 21 Jun 2026 06:35:51 +0000
Files and hashes:         1: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: qG2bUOWwTNZiIfdaTpDPVpMrBFbrT7QpU559kWrN28I=)
                          2: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl (hash: 3hkPBD0sqxn4mGEuAMA+09/4KVoidmQ2XA0jSxkG7/Y=)
                          3: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: JPVutpb2XwCsO88296+IeYMvqUecuYWuKlBQq43d27Y=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl
                          rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 06:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4f:e7:ff:2f:40:1c:60:7f:8a:23:ae:f6:44:2b:28:77:79:17:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC
        Validity
            Not Before: Jun 20 05:46:51 2026 GMT
            Not After : Jun 21 06:35:51 2026 GMT
        Subject: CN=692C6F01CA525B5BB66A992F1F66A1A2F2843FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:dc:4c:82:34:e9:58:f4:52:31:4f:91:0c:
                    31:e0:28:c4:88:3d:2b:d1:ff:eb:22:cd:2f:75:15:
                    f6:5e:3f:ad:4d:a5:73:d0:6a:5a:c8:5f:27:eb:d1:
                    d3:94:bb:2c:78:74:ba:8d:e3:a1:7f:ae:8c:19:58:
                    53:89:e5:c1:bf:2d:ac:63:16:a7:c4:26:4f:35:57:
                    13:cb:57:13:6b:9d:14:3a:04:25:d9:87:5a:3a:53:
                    97:ac:2d:78:07:fb:c1:db:51:57:da:9d:06:24:95:
                    22:70:62:4b:56:cd:d7:c1:2a:67:26:c0:8c:6c:0f:
                    f9:08:de:5f:84:46:b1:7f:0c:02:9d:d7:2a:71:7f:
                    09:99:fa:77:5a:f4:8d:70:a8:dc:ed:6c:66:76:68:
                    84:4f:ca:e9:59:d5:e7:eb:a3:12:01:9a:ab:fb:f7:
                    97:1c:af:e5:47:ab:33:45:22:56:0f:bf:f8:ce:15:
                    f7:8a:df:24:14:e4:28:e4:96:03:68:f1:a2:67:67:
                    8a:82:4c:d4:37:62:d2:66:23:4c:59:d3:19:03:e9:
                    b8:ba:a5:79:a3:9e:09:4b:2e:de:5d:d2:70:1f:c8:
                    3f:11:29:2d:75:cf:c6:ad:96:81:ba:0d:6d:5b:b0:
                    dc:01:5a:c3:d8:1b:3f:45:bd:c6:3d:6b:09:bd:af:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:6F:01:CA:52:5B:5B:B6:6A:99:2F:1F:66:A1:A2:F2:84:3F:F9
            X509v3 Authority Key Identifier:
                keyid:6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:02:aa:24:c1:bf:5d:4d:a8:da:0b:e8:50:3a:97:f0:5f:a2:
         15:13:27:51:b3:ae:07:ea:fb:ab:e9:21:03:97:47:d7:4c:64:
         19:27:c7:8b:7b:02:28:25:01:f3:8f:3a:fa:54:38:38:84:aa:
         b4:42:da:24:9f:f0:98:e7:c1:d6:20:d3:ee:51:25:09:b3:06:
         6d:b2:5c:98:30:19:a9:9f:55:6b:6e:c5:33:23:a6:42:c3:3f:
         04:c2:5a:3b:2d:54:89:cf:f6:8d:d9:c9:5c:f4:09:30:37:18:
         41:94:bd:96:c7:6a:7d:4d:c6:60:b2:0a:57:65:4c:27:06:1c:
         ec:96:a7:bf:7f:1b:cf:91:e5:22:54:c5:40:74:bb:1e:b3:6e:
         4b:63:f8:ad:de:21:21:0d:31:c7:24:e5:38:52:6c:79:71:de:
         30:fb:d7:36:c5:dc:4f:41:c3:ab:58:e2:1f:92:b7:d7:e7:ce:
         4d:70:ee:0d:58:e0:7d:9b:59:eb:84:ce:8d:b9:d6:a2:14:d4:
         ef:2a:98:74:ae:05:16:f0:a3:0e:9e:d1:f9:5f:6f:2b:f8:6f:
         b9:88:3d:bc:39:b9:c5:44:29:16:bd:90:83:f4:49:f5:54:b0:
         9a:ad:8d:f1:a1:c5:de:91:ec:f4:b5:ca:8a:a6:9e:6d:65:bb:
         68:fe:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:21:08 2026 by rpki-client