Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
File:                     16E36A76C68AD7EF73B872D0A244597711CEC92B.mft (raw, json)
Hash identifier:          41T8HaJJYobPW9OkvUb059wgE4Hzn4ZyX5yDHE1plZo=
Subject key identifier:   BC:85:1C:9F:B5:2D:A5:33:69:0C:30:09:C0:7A:A4:EC:33:0F:D6:90
Authority key identifier: 16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B
Certificate issuer:       /CN=16E36A76C68AD7EF73B872D0A244597711CEC92B
Certificate serial:       35345FD3ADD1378AFF769A5E2108D5B29EAC6A08
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 15:24:59 +0000
Manifest this update:     Tue 12 May 2026 15:19:59 +0000
Manifest next update:     Wed 13 May 2026 17:12:59 +0000
Files and hashes:         1: 16E36A76C68AD7EF73B872D0A244597711CEC92B.crl (hash: 7VZ5dQvC6ahruEDe6P2kY8GZbE29nKfGW5dr+cVB6jo=)
                          2: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: d1VIPUB5246bc9b42k+QQyjwKQyjJBedF26BcXOCp3E=)
                          3: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: AGIMZGexipjyvpy+LmJUJY6hAht+8SMw5E+al1hg6Ds=)
                          4: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: EANVJlxEg4YVe0voA5UkBVDWr1/ZEx1MsPgsXOFauYo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl
                          rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:34:5f:d3:ad:d1:37:8a:ff:76:9a:5e:21:08:d5:b2:9e:ac:6a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E36A76C68AD7EF73B872D0A244597711CEC92B
        Validity
            Not Before: May 12 15:19:59 2026 GMT
            Not After : May 13 17:12:59 2026 GMT
        Subject: CN=BC851C9FB52DA533690C3009C07AA4EC330FD690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:bc:33:3a:a1:ff:8b:96:2f:95:42:1e:33:
                    c1:2c:56:53:2e:0a:aa:2c:4c:31:54:ce:4c:5f:60:
                    79:85:a8:09:c1:e6:5b:d9:5b:1e:7b:06:3a:6c:29:
                    f3:46:80:31:46:65:ac:45:e5:de:ad:50:0c:e3:be:
                    1e:ac:e3:fe:cd:a4:81:f5:d7:26:b0:6a:3b:e9:67:
                    5d:3f:73:06:f4:13:2a:21:ae:af:fe:a3:38:55:12:
                    bd:37:1f:93:01:ab:90:ef:93:3c:9c:37:7e:fc:f2:
                    70:48:99:36:58:99:9b:bc:53:1a:3f:c5:a7:c7:d9:
                    c1:78:d8:25:eb:13:7e:5c:40:9c:26:1d:96:ba:6e:
                    ba:9b:7a:40:c0:e7:3d:3b:be:19:89:c9:02:8e:3e:
                    1e:4e:91:89:b7:6d:24:10:2f:95:c0:9e:02:f7:d5:
                    cb:ba:0e:7a:2a:20:2f:98:f6:4c:10:78:3c:1b:da:
                    ba:e1:bb:32:f0:84:38:6b:a7:6e:49:60:f4:9f:7f:
                    a6:58:ba:cf:72:c3:17:de:c9:03:7e:87:e1:6f:fe:
                    9a:13:63:54:da:41:7e:30:ca:ca:1f:9a:fc:b6:96:
                    cf:d5:50:f0:04:bb:da:7e:b5:7e:ff:7b:e3:c5:7c:
                    d6:62:a3:bd:a0:b2:84:14:f6:60:7c:87:94:94:b0:
                    68:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:85:1C:9F:B5:2D:A5:33:69:0C:30:09:C0:7A:A4:EC:33:0F:D6:90
            X509v3 Authority Key Identifier:
                keyid:16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:0a:59:d7:22:35:98:f6:98:41:2d:c0:c3:56:51:de:4b:
         8a:f1:fe:08:9b:a8:c8:e7:e6:19:21:b8:53:0f:e6:39:44:ec:
         50:f6:55:c7:9b:42:9f:b7:0d:43:0b:e7:d6:ed:e4:16:e6:98:
         21:9c:79:96:11:6b:b3:fe:bf:db:fa:f3:03:50:3e:67:6c:6a:
         7c:70:95:82:20:ca:52:1d:96:ec:f9:4e:d8:77:7f:88:0e:16:
         5b:0b:24:51:ce:1d:11:ca:40:3f:87:3a:b0:ca:46:36:46:f0:
         95:a1:d3:bc:3e:03:51:d5:6b:36:b2:8b:5f:0f:ff:c5:58:ca:
         07:d8:b2:a3:74:92:72:96:4a:56:fa:cf:e9:24:0f:fa:74:de:
         87:c9:d5:2e:6c:d9:ca:59:9f:ef:31:b7:21:36:35:fb:e7:61:
         29:f1:98:5b:02:41:05:1a:a6:bc:09:c3:79:7e:01:fe:56:88:
         30:5b:34:f2:33:8d:e0:cb:7f:3f:0e:78:7c:72:26:0d:89:af:
         90:c0:ed:04:bc:e8:23:93:3f:72:d4:49:b5:7a:e5:a8:68:7a:
         d4:28:b7:68:d5:84:48:8e:a7:80:97:ec:2a:ce:14:7e:a0:5f:
         5c:33:65:51:94:0c:9d:8e:c3:12:e0:11:30:a1:67:53:0a:99:
         a3:33:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:29 2026 by rpki-client