Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft
File:                     A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft (raw, json)
Hash identifier:          o09B7NnPSteLxGaX9YxvCxkNVkAm6l4vYvqi9Q/uD40=
Subject key identifier:   B4:6C:00:DD:42:3A:07:02:53:A0:FF:19:F6:C3:98:CA:92:E9:89:C6
Authority key identifier: A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA
Certificate issuer:       /CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA
Certificate serial:       613A3A744981A6F7831A913A7A020551EC733C75
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 16:26:00 +0000
Manifest this update:     Tue 12 May 2026 16:21:00 +0000
Manifest next update:     Wed 13 May 2026 18:44:00 +0000
Files and hashes:         1: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6SPqfWofEqX1QD5UAEMH2hqU1phhUwtiErMkzEVth0s=)
                          2: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl (hash: p36N/27XxsaOf+KVXgNXGHfVeZ/76g3xWtjxIM0Cxsc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl
                          rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3a:3a:74:49:81:a6:f7:83:1a:91:3a:7a:02:05:51:ec:73:3c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA
        Validity
            Not Before: May 12 16:21:00 2026 GMT
            Not After : May 13 18:44:00 2026 GMT
        Subject: CN=B46C00DD423A070253A0FF19F6C398CA92E989C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:4d:55:22:40:cf:be:19:b1:9e:37:1f:2f:
                    c8:6f:73:83:70:7b:c2:f6:5f:8b:f9:fe:d2:46:c1:
                    ab:99:ee:06:97:77:bb:e8:20:63:aa:4c:93:cf:3a:
                    a8:a9:54:74:a1:06:64:27:25:3b:8d:de:5c:56:37:
                    f2:cc:39:7b:67:38:7d:f1:e1:a2:36:72:41:c9:da:
                    f5:2d:d8:e2:07:fe:15:2d:7f:d3:ea:fe:d7:75:4a:
                    df:d4:f9:44:f5:03:d1:f2:3b:05:50:2e:2c:01:20:
                    e9:d5:5f:9a:2f:72:30:18:6c:05:cd:98:47:b3:6b:
                    b4:95:3a:91:7a:f5:28:e0:60:62:c5:29:36:2a:a6:
                    8e:ef:a1:78:73:6a:0b:73:d2:6e:3d:b5:56:91:b4:
                    82:a4:df:b8:de:dc:4e:cc:73:17:cd:02:70:96:59:
                    a7:ca:ae:0e:0d:db:e1:ff:ea:3e:21:e0:85:ed:10:
                    23:1c:e2:e5:5e:8d:f9:b5:a1:c8:ed:cc:45:5d:c7:
                    24:6a:57:18:c6:38:c5:81:22:28:44:8e:3b:15:0a:
                    da:31:26:7c:a1:e8:aa:95:5f:2f:c7:31:b4:f9:fb:
                    51:0a:13:13:9c:d5:41:a2:bd:f8:03:5b:8f:09:67:
                    a7:d1:10:c9:0d:1a:ae:d2:97:29:10:d3:8a:0d:a6:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:00:DD:42:3A:07:02:53:A0:FF:19:F6:C3:98:CA:92:E9:89:C6
            X509v3 Authority Key Identifier:
                keyid:A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:eb:ed:06:c2:e3:70:b0:b4:86:13:d7:7d:f8:b3:74:11:9a:
         10:bb:42:bc:0d:58:c5:69:2c:2f:a1:9c:26:7d:f9:d1:c4:0c:
         14:43:ef:76:e4:3b:43:78:0b:6c:ef:41:a4:68:51:8c:7c:90:
         58:a6:9f:16:c4:2b:06:4d:3a:be:4a:32:ce:b9:49:4e:66:cc:
         22:09:81:04:0f:2c:9b:47:bd:ce:c0:6d:47:40:cf:8d:4d:d9:
         25:0c:b0:eb:75:b6:47:b5:59:f1:7a:48:c3:4f:21:2b:19:03:
         0e:44:fe:06:be:9b:64:1f:5e:31:c1:00:1e:30:a0:fb:22:a0:
         04:50:02:46:5b:02:7d:67:67:ca:d3:f7:57:ea:62:65:ed:ab:
         4b:03:7e:b8:9b:0a:29:46:16:20:0f:86:fc:78:ea:6e:df:6e:
         e4:27:e1:48:de:ad:7d:47:34:b9:dc:5c:30:62:54:19:30:5b:
         54:9a:28:12:7f:97:d1:22:96:79:c4:35:00:4a:85:58:7b:fa:
         c4:4b:44:e3:99:6d:d5:ed:ec:7b:61:b4:93:73:d4:d6:78:b5:
         21:a8:86:a9:fc:dc:81:dd:32:6f:9b:0b:52:9b:c1:74:c2:2a:
         cc:54:f3:77:6b:d9:67:38:7f:bb:e7:04:05:59:85:b0:7f:ba:
         9b:a3:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:27 2026 by rpki-client