Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft
File:                     FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft (raw, json)
Hash identifier:          H6bavQtUMfCCn1bI96RiCj8/vXiTflhfvfusrY6olLU=
Subject key identifier:   B9:BA:D8:A1:41:42:6D:AF:1D:00:D5:28:7A:3C:CA:10:41:52:8D:4C
Authority key identifier: FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5
Certificate issuer:       /CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5
Certificate serial:       254A4943D8F43AEF09D1360572A2B1EE425102
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 16:36:14 +0000
Manifest this update:     Tue 12 May 2026 16:31:14 +0000
Manifest next update:     Wed 13 May 2026 19:36:14 +0000
Files and hashes:         1: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl (hash: WK/s8Eola6MJIor7x9n8eoPRkML//fWOZs4txXNgtaY=)
                          2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: /EYgr4bEX5yF2cD2wxIp6ztYlU72xJsVBSPBoR3u9Fw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl
                          rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4a:49:43:d8:f4:3a:ef:09:d1:36:05:72:a2:b1:ee:42:51:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5
        Validity
            Not Before: May 12 16:31:14 2026 GMT
            Not After : May 13 19:36:14 2026 GMT
        Subject: CN=B9BAD8A141426DAF1D00D5287A3CCA1041528D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:35:c3:42:52:6b:43:74:2c:92:44:05:1a:
                    81:a6:9b:44:39:f3:2c:77:ef:02:b0:dc:cf:c8:c0:
                    b5:3b:93:50:78:ef:ae:b6:1c:5d:b0:df:ba:7e:c3:
                    fc:ee:c2:1f:7d:9b:6a:68:62:15:e7:64:6f:41:e0:
                    3a:1a:ea:4b:5d:72:c5:34:81:49:72:09:70:8c:de:
                    be:57:7b:eb:24:99:68:d4:50:6f:5a:6a:fa:a7:9d:
                    91:c0:0d:21:1b:de:f7:89:52:99:8e:86:35:fd:77:
                    f9:be:2a:01:a8:60:30:5a:29:38:76:2e:d0:ca:d9:
                    53:e9:b7:9c:fb:4b:6f:bc:db:f9:96:9b:66:16:eb:
                    47:5f:9d:7f:75:ba:83:5b:dd:e9:71:38:dc:1f:9f:
                    e0:47:0f:5f:1d:53:b2:63:ab:6b:31:7f:8c:f7:06:
                    d0:df:5e:0f:47:c2:75:c1:45:87:83:11:06:66:71:
                    c5:8b:ca:95:1f:de:53:84:e0:0d:0c:0b:cb:e2:6d:
                    8b:3c:54:2a:77:1d:a9:a0:51:d5:ea:e0:db:ef:cf:
                    36:f6:60:fb:01:68:0d:6c:d8:de:c1:c2:17:b2:e5:
                    e6:3d:3b:72:93:b4:74:ae:35:43:89:e4:b3:7d:f8:
                    6f:e3:ad:7c:7d:82:18:45:b1:c1:79:9a:81:dd:87:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BA:D8:A1:41:42:6D:AF:1D:00:D5:28:7A:3C:CA:10:41:52:8D:4C
            X509v3 Authority Key Identifier:
                keyid:FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:2d:e7:d9:1c:78:a5:a9:4d:31:14:20:f2:c7:d4:17:a3:
         75:5f:b5:2a:f5:06:87:2a:2f:6a:9a:2b:8a:6a:4c:47:4c:7b:
         28:3e:2a:08:bc:75:87:75:34:ea:0f:c6:2c:3a:d7:2a:43:20:
         cf:16:ee:cf:f2:73:cb:02:82:79:3c:8b:38:a7:4b:21:50:50:
         6b:bd:57:99:13:03:5f:f5:d8:03:17:5b:84:68:13:bf:a9:a2:
         63:8a:e9:73:4e:25:c9:1f:9d:9f:41:3b:a4:1d:bf:3b:07:ac:
         48:34:f3:32:68:3c:d7:98:14:34:98:9d:88:1a:3e:26:69:4e:
         48:46:fd:fb:f9:2f:0d:03:46:d9:47:52:4d:08:ea:d5:f4:20:
         99:dd:3e:2f:13:c6:34:15:43:ce:44:51:e0:ee:f0:e1:46:2b:
         b8:87:bd:88:b9:b8:13:90:ef:96:9f:7d:3e:55:50:c8:f6:b8:
         b0:82:1d:79:28:37:6d:6a:c3:82:87:ac:a9:23:cc:67:fb:1d:
         36:59:e8:7e:8a:09:2b:11:eb:02:a7:eb:c2:cb:6f:43:4e:49:
         6f:dc:09:61:84:87:ad:f2:dc:93:7f:9a:d1:6d:d8:2e:8e:bd:
         24:37:8c:de:9d:0d:81:b7:3d:00:be:3f:30:b0:4c:73:40:ac:
         f1:44:7e:b6
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITJUpJQ9j0Ou8J0TYFcqKx7kJRAjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhGQ0FDQ0RDRjBGREVCNTBGMkM5ODE2RUJDNDU1MEY3ODBD
ODI5NUU1MB4XDTI2MDUxMjE2MzExNFoXDTI2MDUxMzE5MzYxNFowMzExMC8GA1UE
AxMoQjlCQUQ4QTE0MTQyNkRBRjFEMDBENTI4N0EzQ0NBMTA0MTUyOEQ0QzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCnNcNCUmtDdCySRAUagaabRDnz
LHfvArDcz8jAtTuTUHjvrrYcXbDfun7D/O7CH32bamhiFedkb0HgOhrqS11yxTSB
SXIJcIzevld76ySZaNRQb1pq+qedkcANIRve94lSmY6GNf13+b4qAahgMFopOHYu
0MrZU+m3nPtLb7zb+ZabZhbrR1+df3W6g1vd6XE43B+f4EcPXx1TsmOrazF/jPcG
0N9eD0fCdcFFh4MRBmZxxYvKlR/eU4TgDQwLy+JtizxUKncdqaBR1erg2+/PNvZg
+wFoDWzY3sHCF7Ll5j07cpO0dK41Q4nks334b+OtfH2CGEWxwXmagd2H/s8CAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBS5utihQUJtrx0A1Sh6PMoQQVKNTDAfBgNVHSME
GDAWgBT8rM3PD961DyyYFuvEVQ94DIKV5TAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud
HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8x
NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC9GQ0FDQ0RDRjBG
REVCNTBGMkM5ODE2RUJDNDU1MEY3ODBDODI5NUU1LmNybDByBggrBgEFBQcBAQRm
MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw
by9JRE5JQy8xL0ZDQUNDRENGMEZERUI1MEYyQzk4MTZFQkM0NTUwRjc4MEM4Mjk1
RTUuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNTBkMWFhMS00YzdmLTQ0OGItYjJi
Yi0wMmM1NzE1MWYyMTAvMC9GQ0FDQ0RDRjBGREVCNTBGMkM5ODE2RUJDNDU1MEY3
ODBDODI5NUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAKn8t59kceKWpTTEUIPLH1BejdV+1KvUGhyov
aporimpMR0x7KD4qCLx1h3U06g/GLDrXKkMgzxbuz/JzywKCeTyLOKdLIVBQa71X
mRMDX/XYAxdbhGgTv6miY4rpc04lyR+dn0E7pB2/OwesSDTzMmg815gUNJidiBo+
JmlOSEb9+/kvDQNG2UdSTQjq1fQgmd0+LxPGNBVDzkRR4O7w4UYruIe9iLm4E5Dv
lp99PlVQyPa4sIIdeSg3bWrDgoesqSPMZ/sdNlnofooJKxHrAqfrwstvQ05Jb9wJ
YYSHrfLck3+a0W3YLo69JDeM3p0Ngbc9AL4/MLBMc0Cs8UR+tg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:31:17 2026 by rpki-client