Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
File:                     F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json)
Hash identifier:          YvLDgjD1Wpqmyn5tet63Ah/yJRABwIRqxKBfZwWXe98=
Subject key identifier:   8C:61:24:07:E8:43:34:3B:89:A5:10:7C:D4:44:19:5A:AB:DF:0E:F1
Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
Certificate issuer:       /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Certificate serial:       17A86BA7FEB1EFCEBB954160E793D6E2433AD78E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 18:13:20 +0000
Manifest this update:     Tue 12 May 2026 18:08:20 +0000
Manifest next update:     Wed 13 May 2026 19:45:20 +0000
Files and hashes:         1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=)
                          2: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: +LQbAyKhO0Dm0RHg/jMTReEQTrPDygvvjspbQtmmZ5M=)
                          3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
                          rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a8:6b:a7:fe:b1:ef:ce:bb:95:41:60:e7:93:d6:e2:43:3a:d7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
        Validity
            Not Before: May 12 18:08:20 2026 GMT
            Not After : May 13 19:45:20 2026 GMT
        Subject: CN=8C612407E843343B89A5107CD444195AABDF0EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:f6:ae:0b:9e:8c:bc:3a:9a:08:72:f3:cb:
                    d4:cd:7c:56:45:dd:f1:b9:a9:67:a9:5f:71:4d:55:
                    9d:50:47:a3:96:52:06:d3:ce:ee:9c:a0:3e:de:d5:
                    36:36:29:12:58:e0:75:90:8f:30:4a:5c:51:ef:6e:
                    2d:d7:de:dc:fd:55:67:c5:97:a3:44:7c:2a:48:9d:
                    d8:c6:14:20:fd:5b:7c:ae:6d:22:99:58:31:4a:3b:
                    2e:5b:a4:6e:ec:33:19:d9:b5:9c:17:35:2d:db:ea:
                    0c:ea:7d:b1:9b:d2:3d:49:0d:97:57:d3:ed:0b:9d:
                    c1:80:48:73:60:96:bc:5d:8c:4c:d1:06:01:99:01:
                    51:91:3a:2b:14:84:d1:2e:0b:2a:4b:e5:2a:58:3e:
                    cf:06:db:46:09:77:0f:4a:ae:bd:03:02:ec:40:65:
                    5a:c7:2d:01:0f:e6:d0:6d:9a:7e:26:5e:8c:3c:41:
                    50:c0:07:6d:91:7d:95:3a:68:58:5b:1c:26:fc:eb:
                    cf:8b:17:7d:8d:cd:75:10:df:04:ef:e9:6d:58:ae:
                    69:97:0d:15:78:60:49:44:b9:45:94:ce:6c:7c:88:
                    02:ff:cf:9d:b9:2c:f9:72:fa:5b:18:b3:33:30:7e:
                    71:c9:b2:06:cf:c3:c0:49:b9:5a:c8:a6:e1:d6:51:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:61:24:07:E8:43:34:3B:89:A5:10:7C:D4:44:19:5A:AB:DF:0E:F1
            X509v3 Authority Key Identifier:
                keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:80:fd:a6:86:60:dd:f4:5a:1d:0d:66:d6:f1:82:5c:2f:
         41:fd:99:71:9b:33:ac:dc:f4:16:94:7e:ca:65:0c:60:f7:ba:
         5b:7a:bc:4e:88:2c:de:22:7f:6f:9c:35:5d:0d:a2:dc:b2:84:
         fc:cc:90:00:a1:e6:ea:96:a0:52:c7:90:24:81:df:ee:18:ec:
         90:cb:92:16:00:52:13:16:c8:ae:eb:5f:ce:3f:aa:12:40:31:
         35:65:29:e1:58:bc:be:d4:7f:6d:00:75:24:f3:20:52:b0:c4:
         f5:0a:0a:c7:44:ea:d5:6a:d4:98:73:a7:33:23:ae:c3:d0:0f:
         9f:a7:b8:61:7d:77:5b:86:75:60:d4:1f:b2:d2:fb:22:13:9c:
         6e:b4:b6:47:4f:23:d7:be:fa:77:08:f9:a9:8b:23:71:55:75:
         5c:4d:24:20:3b:fa:93:24:0c:4a:64:4d:45:f5:6b:1f:73:5b:
         42:c1:03:22:86:02:10:14:cc:fc:70:11:91:d6:ae:82:65:a1:
         2d:b6:ae:a2:b8:36:3d:7c:dd:b5:d3:ff:c2:6f:c6:62:c0:48:
         c1:f7:75:78:20:b5:64:84:68:48:87:7e:20:0d:30:49:ea:de:
         da:03:f4:da:47:76:ea:dd:ce:cc:bc:00:fb:30:5e:4b:6c:5f:
         93:ae:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:12 2026 by rpki-client