Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft
File:                     6D508CF79A65F098AC311FE1079E8840C240F1E0.mft (raw, json)
Hash identifier:          iWE9fR3+Jv4J+mTXEPgMdImZP4nQY66m4tSKd94s/70=
Subject key identifier:   27:11:F2:CE:F6:EC:F2:72:33:1F:8C:51:CB:00:6C:E3:DE:19:A0:DB
Authority key identifier: 6D:50:8C:F7:9A:65:F0:98:AC:31:1F:E1:07:9E:88:40:C2:40:F1:E0
Certificate issuer:       /CN=6D508CF79A65F098AC311FE1079E8840C240F1E0
Certificate serial:       3CEBEE02D8A4F3ABC5689B255CF6D1481D48F12E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft
Manifest number:          1A
Signing time:             Thu 21 May 2026 06:02:38 +0000
Manifest this update:     Thu 21 May 2026 05:57:38 +0000
Manifest next update:     Fri 22 May 2026 09:07:38 +0000
Files and hashes:         1: 6D508CF79A65F098AC311FE1079E8840C240F1E0.crl (hash: eAIGXoypFtvLi1qMUEPBHDXydjrQ2hgLFl/By+ahAao=)
                          2: AS4761.roa (hash: ADAJv0tCjqrkfl7kHKQQa/gmh2pyLICyQ2Yo1anWdAk=)
                          3: AS45727.roa (hash: NQJlZcEt8XbEu6li30gl5gj7oBqSk0UpCNFCIlpUiV0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.crl
                          rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 09:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:eb:ee:02:d8:a4:f3:ab:c5:68:9b:25:5c:f6:d1:48:1d:48:f1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D508CF79A65F098AC311FE1079E8840C240F1E0
        Validity
            Not Before: May 21 05:57:38 2026 GMT
            Not After : May 22 09:07:38 2026 GMT
        Subject: CN=2711F2CEF6ECF272331F8C51CB006CE3DE19A0DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:93:5c:f9:57:54:31:02:f1:7b:3a:a9:4e:
                    65:3a:f1:a0:07:c7:8d:b1:11:d5:f9:ea:54:1e:15:
                    d8:e9:48:b3:98:8e:0e:7b:7d:5f:a9:ee:d4:95:84:
                    cc:12:bd:fe:20:84:4c:a8:2f:20:72:bf:5e:ea:68:
                    3b:0d:8b:b7:9a:f8:30:4d:48:ec:d8:26:7b:04:20:
                    6a:39:10:5d:de:1e:80:91:11:c3:cf:72:d0:56:38:
                    29:31:9e:bf:bb:d7:0d:da:a7:41:a5:42:a5:d1:c2:
                    49:9e:f6:74:5b:ee:d5:17:64:40:31:e7:fc:01:d5:
                    6e:7f:1d:c5:af:a2:ba:55:a4:21:96:96:e5:d0:1e:
                    c0:ac:31:12:b7:81:27:15:26:54:ee:4f:81:b5:96:
                    21:b9:9b:d8:41:82:79:8c:75:bf:31:01:17:3c:b3:
                    5c:98:5d:f4:40:d7:31:52:01:50:26:fe:fe:7f:1d:
                    00:ee:53:04:db:ba:74:83:c7:ec:52:5b:be:8d:6f:
                    b5:41:fe:e0:b6:e8:b6:80:7a:62:62:e0:6d:dc:c1:
                    47:ff:39:6b:5c:48:a0:73:63:b7:f1:f3:87:90:ee:
                    7d:73:a7:46:04:d2:90:ab:3c:0a:11:17:08:b0:cd:
                    c2:16:80:d2:b9:1d:0d:d8:7a:9a:0d:d2:05:ec:66:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:11:F2:CE:F6:EC:F2:72:33:1F:8C:51:CB:00:6C:E3:DE:19:A0:DB
            X509v3 Authority Key Identifier:
                keyid:6D:50:8C:F7:9A:65:F0:98:AC:31:1F:E1:07:9E:88:40:C2:40:F1:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:59:b7:be:b0:64:ad:bd:4c:85:ab:ff:d8:06:49:34:17:0b:
         f8:50:49:5d:80:0d:ec:58:44:fc:df:34:76:95:c1:83:ba:0a:
         66:0e:e4:d7:ae:0f:ff:78:06:31:68:85:07:75:b4:0f:06:05:
         72:c5:79:5e:55:a6:db:57:9b:0f:e2:1f:34:26:ed:e9:ce:b7:
         38:b3:12:2e:db:0c:04:0a:d1:4f:57:b9:c8:09:d4:25:2d:f3:
         f8:3a:bf:d6:2a:4b:40:e8:27:5b:32:35:34:3a:35:aa:83:63:
         96:e2:dd:ad:33:05:45:c0:10:12:1a:69:e3:d1:ea:b7:38:53:
         c4:a7:99:a0:01:f8:d2:15:67:48:8a:83:91:ab:03:32:1c:18:
         16:e2:70:42:14:63:36:60:15:2c:da:d2:8a:44:94:9e:08:e7:
         b8:3d:5f:1d:c0:57:c0:6f:63:8b:e5:0d:d6:fe:4d:ce:4f:a0:
         07:6f:fd:be:e4:45:31:fa:18:d0:65:20:ff:53:08:94:20:d3:
         dc:6c:ad:05:dc:8e:64:01:d1:5e:69:4e:23:50:f3:aa:77:8f:
         d8:48:0f:94:a2:0f:ab:dc:fd:12:0e:06:7b:e1:04:07:8a:b0:
         a6:0a:45:02:a0:73:4c:52:b6:19:ff:75:0d:6f:92:54:df:f0:
         69:bb:b6:9e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPOvuAtik86vFaJslXPbRSB1I8S4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ1MDhDRjc5QTY1RjA5OEFDMzExRkUxMDc5RTg4NDBD
MjQwRjFFMDAeFw0yNjA1MjEwNTU3MzhaFw0yNjA1MjIwOTA3MzhaMDMxMTAvBgNV
BAMTKDI3MTFGMkNFRjZFQ0YyNzIzMzFGOEM1MUNCMDA2Q0UzREUxOUEwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq35Nc+VdUMQLxezqpTmU68aAH
x42xEdX56lQeFdjpSLOYjg57fV+p7tSVhMwSvf4ghEyoLyByv17qaDsNi7ea+DBN
SOzYJnsEIGo5EF3eHoCREcPPctBWOCkxnr+71w3ap0GlQqXRwkme9nRb7tUXZEAx
5/wB1W5/HcWvorpVpCGWluXQHsCsMRK3gScVJlTuT4G1liG5m9hBgnmMdb8xARc8
s1yYXfRA1zFSAVAm/v5/HQDuUwTbunSDx+xSW76Nb7VB/uC26LaAemJi4G3cwUf/
OWtcSKBzY7fx84eQ7n1zp0YE0pCrPAoRFwiwzcIWgNK5HQ3YepoN0gXsZmw3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJxHyzvbs8nIzH4xRywBs494ZoNswHwYDVR0j
BBgwFoAUbVCM95pl8JisMR/hB56IQMJA8eAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWVjNmVlZjktNzEzYy00ZTZiLWIyYmMtNGMwNDUyODkwMzQ1LzAvNkQ1MDhDRjc5
QTY1RjA5OEFDMzExRkUxMDc5RTg4NDBDMjQwRjFFMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RDUwOENGNzlBNjVGMDk4QUMzMTFGRTEwNzlFODg0MEMyNDBG
MUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWVjNmVlZjktNzEzYy00ZTZiLWIy
YmMtNGMwNDUyODkwMzQ1LzAvNkQ1MDhDRjc5QTY1RjA5OEFDMzExRkUxMDc5RTg4
NDBDMjQwRjFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFFZt76wZK29TIWr/9gGSTQXC/hQSV2ADexY
RPzfNHaVwYO6CmYO5NeuD/94BjFohQd1tA8GBXLFeV5VpttXmw/iHzQm7enOtziz
Ei7bDAQK0U9XucgJ1CUt8/g6v9YqS0DoJ1syNTQ6NaqDY5bi3a0zBUXAEBIaaePR
6rc4U8SnmaAB+NIVZ0iKg5GrAzIcGBbicEIUYzZgFSza0opElJ4I57g9Xx3AV8Bv
Y4vlDdb+Tc5PoAdv/b7kRTH6GNBlIP9TCJQg09xsrQXcjmQB0V5pTiNQ86p3j9hI
D5SiD6vc/RIOBnvhBAeKsKYKRQKgc0xSthn/dQ1vklTf8Gm7tp4=
-----END CERTIFICATE-----
Generated at Thu May 21 12:23:29 2026 by rpki-client