Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
File:                     C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft (raw, json)
Hash identifier:          cOvz80rMlUk4mGvkcMIj3QzrLa8ytc+UwWRjq5YMuVg=
Subject key identifier:   08:98:E7:FD:98:CD:66:6D:BE:C4:8D:9D:9A:DB:5B:1C:11:22:E6:5F
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Certificate issuer:       /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial:       109316CCDB21AFF20FA926912E0E0128772F6675
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:32:22 +0000
Manifest this update:     Tue 12 May 2026 17:27:22 +0000
Manifest next update:     Wed 13 May 2026 17:48:22 +0000
Files and hashes:         1: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl (hash: jNjbCtDmOnVk9YAHWp7n97BosjyWyKmZbelltZx72n4=)
                          2: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: YSFAL2tW6cTVQfgDTgZL8q+MB0PvmVYIYCi98VnDYcA=)
                          3: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: j1suU85D1/7FjlJvr2yGn6MbcsgwWHNmUCiTqlRJqgg=)
                          4: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: ykRVY1EBIN+ucKdlxDLDuc2SEVpBAQD0eYMAZuEgryE=)
                          5: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 9h4BjIyizuthkQUuXWWv2bNzQm5B95LJDNd0MLV8X24=)
                          6: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: GPynHByObMVja2DkXkj4DTeAw6Zu/eMPLF3FIx9zUPw=)
                          7: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: g2Ud6J6HCNFfVncrEeujGYDFgaSbLTIo6wU1RvlC+Tc=)
                          8: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: eKAt3iHXo2lgEa5TxrbQhnXVdOLFjM4blG/eTgED9F0=)
                          9: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: YRJhcs0eQNvvPgXOg+gQPByywRt+Knf6CLtlmsMwkjM=)
                          10: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: fi/7+4zEIqvSpKlVqvbMDeqY2YCrGnjUpksCJ4fAKrA=)
                          11: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: WqJlVr9FXIRfRfoifCa2GdwTJsz5m8eNFT1ExD1lr/o=)
                          12: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: RkOZ4BqJISFweILCm3wRYadHRRUC1NJILvlksQQiLxk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
                          rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:93:16:cc:db:21:af:f2:0f:a9:26:91:2e:0e:01:28:77:2f:66:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
        Validity
            Not Before: May 12 17:27:22 2026 GMT
            Not After : May 13 17:48:22 2026 GMT
        Subject: CN=0898E7FD98CD666DBEC48D9D9ADB5B1C1122E65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:29:64:da:85:d4:7a:f7:ac:1d:ac:8a:f3:f5:
                    a0:e3:b6:01:eb:de:01:2d:dd:e2:b9:0d:3e:98:5e:
                    38:e5:0c:03:cc:14:17:26:fb:0b:84:34:d8:77:24:
                    25:e5:11:eb:e0:60:bd:ed:c4:ac:32:58:fd:27:7e:
                    f6:cd:96:26:26:34:83:6e:61:fa:01:1d:d5:c1:8e:
                    3b:fd:6d:a2:39:7c:61:21:2a:22:4a:b9:04:81:a8:
                    0b:88:6d:12:e6:2c:d6:2a:f3:50:6a:24:07:0a:18:
                    fa:f3:cd:83:ef:4c:35:4c:c7:0c:68:4f:c5:f3:8c:
                    37:35:dd:26:64:d5:1e:a3:c6:83:d6:c4:7e:2d:c4:
                    f2:8c:51:2f:b6:52:bd:77:a0:05:30:43:44:73:0f:
                    9b:2f:4c:42:ac:27:64:87:a5:40:9f:45:6d:f1:85:
                    fd:43:27:0a:b9:b2:24:78:3f:9c:ea:e7:7a:ae:da:
                    fd:83:e1:2e:ff:2d:0e:5c:58:08:5a:10:3b:14:2e:
                    6c:7c:e5:eb:d2:92:0b:c2:f6:3d:9a:54:61:90:a0:
                    1f:3e:94:c1:b6:2b:e0:af:83:c4:6e:b0:82:84:b9:
                    df:5d:ad:2b:d4:7a:14:cb:62:51:89:49:f1:19:37:
                    48:30:a3:fd:f3:9c:25:e0:15:73:b7:b8:4c:3f:ca:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:98:E7:FD:98:CD:66:6D:BE:C4:8D:9D:9A:DB:5B:1C:11:22:E6:5F
            X509v3 Authority Key Identifier:
                keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:bf:e1:1f:3d:18:41:e6:e0:39:53:a0:dc:3b:2c:2c:4b:
         34:ef:43:63:7e:e3:17:75:71:b7:0e:6a:38:c0:2f:cf:80:b2:
         db:dd:3d:a9:2e:d0:83:08:ab:c8:9b:93:ee:19:0d:ce:0c:3c:
         f4:0f:5c:84:f4:d9:67:65:38:01:8a:d0:de:a9:70:9d:39:a5:
         e1:3c:30:06:8e:d9:1b:14:89:88:2c:2a:b6:16:7f:6f:d0:fd:
         69:e9:e0:14:0e:69:f5:f3:68:36:bf:1c:8d:01:2a:0a:a8:5d:
         03:81:ed:c3:3d:f4:fe:86:5c:45:a5:29:eb:28:8f:97:3a:c4:
         51:12:f5:50:d3:7e:69:49:7b:dd:b0:eb:a3:c2:b4:bb:c6:70:
         80:46:d4:4f:cd:98:ae:3f:8d:f9:fa:3f:fd:43:82:cb:50:39:
         13:1a:16:4c:39:34:ea:cc:0a:07:e3:92:ea:04:88:99:78:17:
         2e:e7:54:33:8e:10:22:48:79:9a:46:44:2b:89:8f:fb:cc:b2:
         df:d7:09:87:6b:df:2e:be:e8:6f:32:d0:e4:d5:e3:fd:19:80:
         b5:6c:ac:9a:d0:f8:be:54:91:38:5c:ec:c1:67:3c:15:bc:a7:
         cc:cf:a1:b8:c6:4c:d9:cb:e2:b1:e4:44:6b:5a:a9:d3:c0:6f:
         a7:32:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:06 2026 by rpki-client