Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
File:                     7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft (raw, json)
Hash identifier:          Pd+03nUmiLRt+hQcn2zJzBYs1wQ0MXceE2K9Yu+AHAQ=
Subject key identifier:   0D:5A:CC:D0:19:45:9B:11:D5:3C:EB:EF:6F:96:E3:1D:DA:DF:BF:FE
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Certificate issuer:       /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial:       4972F59090C7A568FF668709D19D96849140E95E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:47:47 +0000
Manifest this update:     Tue 12 May 2026 17:42:47 +0000
Manifest next update:     Wed 13 May 2026 20:13:47 +0000
Files and hashes:         1: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 7Txv9C0CleyV9C9DJEoBZ+ODaZPJvEcP4KfRLd5UzEc=)
                          2: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: 45AAQ0VUPgUlngwmQc08RYng8iNJmTJSeNFh2/3cLi0=)
                          3: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (hash: 1B1TVPRMyjlvdSS5PDnfi+a+7Z7dzoKNS0Tsds8V9X4=)
                          4: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: dBMRidIHmDJpAXQnRb7chQxbiE61M8MP8MR8WVkobdk=)
                          5: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: mkTvztfJSo91nm3StwqhTN6opwgEonPpDJuRndRoQxg=)
                          6: 7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl (hash: IB7uZvjsj9eAN2Xr98EaMeZUND2OP3haCYbYIhmlc7k=)
                          7: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: F6rhjUutKa29bUnm7/UxG094I13DCzG5bjD0FGBZBes=)
                          8: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: 9+aWSYM5qln+RUD+mRbEe6cHjWT6vF9wbMbOOp4+klI=)
                          9: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: LFWm0EcZVdKQjPdOneLLEFWhQfSN5g3Hf6HGlVqHaI8=)
                          10: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: nJbUH2HeehvwuwWk5Ov+PdaciTDOUHySNuFD9i+1zG8=)
                          11: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: 9qfFoBhiNHzp+LreK9FNs3OMOxGnSUcOBWmf2OnEzeE=)
                          12: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: kzOezK5pJW56638YkKVBJp7Z9zkDhQFuaxKkqL/Jq6c=)
                          13: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: lnZUd67/u+q68sxl1PDDYAeJMb51iAPVqKyYmLq4L8A=)
                          14: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: K/TdIZS/b961M+WBr5AdYVjyihtdzB52T4G83Wtnnt4=)
                          15: 3230322e39312e33302e302f32342d3234203d3e20313532303639.roa (hash: tPMzPTpsoYjE3xnLVYHISDf6L6hBGhuk0Owt7ukQ+FM=)
                          16: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: f3sbcSJJAXRFf4psPjs2YrJ+ZQorOa5bzyPsnXVoi58=)
                          17: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: gQkyLjmlcDwKcd2z2flGb/EQPjqBxcBo5tmP6HZn8gU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
                          rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:72:f5:90:90:c7:a5:68:ff:66:87:09:d1:9d:96:84:91:40:e9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
        Validity
            Not Before: May 12 17:42:47 2026 GMT
            Not After : May 13 20:13:47 2026 GMT
        Subject: CN=0D5ACCD019459B11D53CEBEF6F96E31DDADFBFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:84:56:ca:2f:46:cb:6d:d3:f4:f4:fc:89:d6:
                    e5:e8:41:c9:6b:19:fb:38:1d:3f:7c:ed:5c:e3:24:
                    29:89:ff:29:1e:5c:1f:47:c3:b8:ae:5f:ea:a1:73:
                    56:63:20:7e:1b:e2:da:64:9d:2c:e7:b9:e5:d2:82:
                    93:0f:c9:ca:ba:65:8e:11:39:30:52:84:c4:4a:ec:
                    78:ba:ba:dc:50:f5:9f:7e:9d:ce:2b:b0:36:e6:f9:
                    24:bc:55:a4:64:ce:c8:99:13:e4:f4:6f:66:5b:88:
                    5b:fc:72:b4:9d:f4:64:91:c8:9a:ed:5b:03:4b:ba:
                    d9:cb:17:7e:a1:b7:96:bf:a6:4b:31:d4:96:14:e2:
                    f7:3a:39:00:d3:3b:bf:58:ac:bc:e7:df:73:e0:e0:
                    1b:78:8e:ec:50:4c:95:9d:09:c8:c7:3b:48:76:ba:
                    70:49:f6:7c:fa:3e:91:96:e6:ac:5d:f7:1f:ee:b3:
                    b0:21:88:97:a9:63:5e:c5:f5:6d:f7:57:54:82:d0:
                    d6:18:ac:b2:6f:0f:7c:f5:5b:88:9e:73:a2:5f:69:
                    31:60:b4:53:e5:a7:01:1c:e8:63:6f:26:84:89:f9:
                    c8:04:f9:cd:36:d7:aa:7a:91:b5:06:e6:c3:d0:33:
                    79:c6:ad:48:44:19:76:0d:a2:79:38:60:c8:01:d1:
                    89:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5A:CC:D0:19:45:9B:11:D5:3C:EB:EF:6F:96:E3:1D:DA:DF:BF:FE
            X509v3 Authority Key Identifier:
                keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:eb:67:f2:bf:c5:52:64:49:4b:80:47:e1:fc:3e:b8:8a:26:
         79:49:12:a9:95:9f:ec:95:17:bf:ee:ae:72:1c:ae:ec:2a:03:
         fd:59:37:a9:b6:6d:c1:64:b0:33:39:00:04:33:21:11:50:4d:
         7c:c3:8d:09:1a:f3:d2:ff:d1:c6:4e:f2:c1:4d:43:11:ff:3b:
         69:e2:b8:38:f8:71:04:f7:02:be:f0:06:cd:8f:4d:28:29:95:
         55:0c:0b:fa:36:d5:44:a4:3a:ef:5b:81:59:33:4c:01:43:60:
         0b:a2:39:aa:98:c7:a2:12:75:1a:f1:3f:94:85:2f:45:e0:3d:
         35:c0:5d:cc:e6:b5:bd:6f:95:68:d5:26:ad:74:e2:75:b9:8b:
         c2:1e:c2:58:22:02:3a:0c:fb:3c:e3:a6:8e:b7:3c:92:22:a6:
         9a:3c:a4:46:fa:b7:28:0e:8a:d0:10:4b:c4:75:06:f3:8f:8f:
         e0:00:6d:52:32:20:a0:13:a1:e4:04:7c:b7:e6:8a:0a:4d:5c:
         bf:53:19:26:57:ba:45:f7:a9:20:b4:46:f4:01:7f:0e:2a:aa:
         1a:4f:dc:d1:9d:98:75:d4:09:10:66:0f:8a:c8:d6:9c:9f:44:
         f2:53:74:43:fe:c2:f2:90:b4:18:6b:b1:48:5b:0c:78:71:38:
         1d:b2:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:25 2026 by rpki-client