Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
File:                     5843958BB240779320D7F0C2B674ACF5EF6122BC.mft (raw, json)
Hash identifier:          MFubIUfxPTykWiYmT3qdi0Rr6ACx2kQp9AmS3XeHq/4=
Subject key identifier:   1E:A3:BC:D7:E2:53:60:CB:E9:58:25:27:AE:70:6E:EF:14:7A:7D:5D
Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
Certificate issuer:       /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Certificate serial:       31295D3BA05D779B2860113B4EF938533A9A0243
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:34:23 +0000
Manifest this update:     Tue 12 May 2026 04:29:23 +0000
Manifest next update:     Wed 13 May 2026 07:46:23 +0000
Files and hashes:         1: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: 3HeHx0erxEkjN9PtOgU3W6tKucWeXKE5FEYLyXwycJc=)
                          2: 5843958BB240779320D7F0C2B674ACF5EF6122BC.crl (hash: Tz0gSC7rWoqyYB62oMi81MDkbCmAys4DC/O7V7pUF+U=)
                          3: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: lVR5iCrB58ZGOeyqsgP1KQLwdS0WjCcfUKPYsWN8lxI=)
                          4: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=)
                          5: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: bNdzrUkHylX3nBoyTDryEKwja6jOzq2DQP/kaLdB4H4=)
                          6: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: jOCXET8yniqJ02iHiMoBI6iwGo2/5oUN4/jc3LtL0jQ=)
                          7: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: zO201tAVoPKGV/ct4ikI5lfPCjZ1ksaQX5GMEkLajwg=)
                          8: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: yPK7GQUu85mTor59GtzCw8idVr6kmAEeffKza8nzEd8=)
                          9: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: t3N8/NmkXItiVJAARc4CSYWSo+yW57apDjW3aqHeSkc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
                          rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:29:5d:3b:a0:5d:77:9b:28:60:11:3b:4e:f9:38:53:3a:9a:02:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
        Validity
            Not Before: May 12 04:29:23 2026 GMT
            Not After : May 13 07:46:23 2026 GMT
        Subject: CN=1EA3BCD7E25360CBE9582527AE706EEF147A7D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:db:18:da:9e:20:7f:14:c5:0e:fa:86:60:
                    ec:0c:ea:db:ee:ba:fd:fe:9b:9a:f2:7a:80:37:97:
                    45:d0:69:cc:0e:6a:64:2f:1c:6f:42:d2:fe:8a:c1:
                    6d:13:17:bc:cf:19:8c:68:a9:a8:cf:59:0e:b1:2a:
                    2e:64:de:20:3c:57:ef:3f:45:1f:d7:59:af:08:9d:
                    7f:5e:c7:5a:9f:6a:08:e7:e8:12:75:2e:df:23:01:
                    6c:3b:8c:d5:8e:c4:73:9e:51:6b:20:79:04:e9:2c:
                    f1:47:81:b4:b8:a3:8a:39:b2:42:5f:0c:c4:8b:e9:
                    1b:69:33:75:43:87:86:e4:2b:e2:84:3c:cc:5e:92:
                    d0:62:6a:69:54:a2:61:09:d9:f0:a2:4a:47:bd:1b:
                    91:14:0f:f3:4d:7e:5e:1c:5a:3a:e9:31:52:7d:a1:
                    c8:21:7e:9a:45:94:19:e4:8d:81:04:d6:44:84:cb:
                    58:39:d3:58:62:43:50:56:55:77:e6:d4:1e:c5:8e:
                    e6:68:c3:cb:46:02:25:b3:38:30:85:ad:5f:6e:87:
                    04:61:93:8f:02:48:77:35:a0:bd:f7:31:cf:6d:5e:
                    8c:92:d1:ec:71:13:6c:0a:34:8e:88:01:5c:f2:50:
                    0f:13:ed:67:74:af:f7:f3:9b:04:ad:f0:49:00:ad:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A3:BC:D7:E2:53:60:CB:E9:58:25:27:AE:70:6E:EF:14:7A:7D:5D
            X509v3 Authority Key Identifier:
                keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:08:a7:93:b8:5c:23:1e:0c:fb:b1:3a:85:b6:18:e3:0b:4e:
         72:73:77:0a:c8:72:60:73:5f:97:e5:5c:51:e9:53:98:1d:08:
         52:2e:ca:fc:64:5a:74:1d:dc:76:2c:09:d0:1c:b7:9c:3c:61:
         6f:a1:cc:a9:fb:d3:94:3f:e2:6d:1c:f2:57:e5:dd:ac:61:76:
         70:bb:eb:c9:ab:a0:db:71:a2:a5:9e:40:5c:ed:87:e0:2c:68:
         25:52:ae:7a:9b:59:97:b9:ef:dc:c5:7b:ff:aa:03:63:50:0b:
         87:b5:3e:11:50:99:9e:62:56:5e:5d:bd:e5:4f:88:fe:35:cd:
         ca:76:93:24:a3:9d:48:d3:26:ad:f6:9d:c7:32:7b:d4:b3:be:
         e6:97:f5:e1:1e:cd:60:5e:cf:3d:97:5e:30:db:2c:8e:58:5b:
         48:19:30:3c:1b:de:a6:ac:b0:cf:26:1d:9d:6e:f0:da:ba:b0:
         4f:02:e1:62:41:47:70:e0:4c:1f:7d:a6:8f:39:ef:6a:92:22:
         3e:e8:ed:f0:33:ff:41:37:88:fe:62:d8:d2:bf:9b:79:c2:83:
         b5:2d:3a:49:d9:f3:af:f1:ad:cd:0c:6c:7c:c5:a6:fb:5e:a9:
         8c:bc:68:6f:56:d2:49:4c:06:4a:fe:cc:ee:ea:0c:37:44:1f:
         98:ef:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:27:48 2026 by rpki-client