Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft
File:                     0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json)
Hash identifier:          jFWCg2UuYUemUeDOgK/bQjXRMbALarKu82FBUZXh0Pc=
Subject key identifier:   D6:C3:09:58:3A:42:78:65:48:76:CE:E6:A4:1A:31:7A:31:2A:E1:2B
Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E
Certificate issuer:       /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E
Certificate serial:       183C4A5E1B20E558E9CBAF887A0F5C6A62F3017F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:51:25 +0000
Manifest this update:     Tue 12 May 2026 22:46:25 +0000
Manifest next update:     Wed 13 May 2026 23:47:25 +0000
Files and hashes:         1: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=)
                          2: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=)
                          3: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: oAfuZvJxAQd9McXNHJRM/WgUqfst3zrjPkHIcA4kQQw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl
                          rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3c:4a:5e:1b:20:e5:58:e9:cb:af:88:7a:0f:5c:6a:62:f3:01:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E
        Validity
            Not Before: May 12 22:46:25 2026 GMT
            Not After : May 13 23:47:25 2026 GMT
        Subject: CN=D6C309583A4278654876CEE6A41A317A312AE12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:47:c4:a8:16:d1:88:77:f7:19:50:b1:a0:
                    6a:f0:71:90:06:37:a7:4a:19:f5:7d:a9:cc:2a:65:
                    f0:95:69:92:3a:54:65:d0:63:8b:3e:95:18:28:12:
                    63:0d:78:37:a4:57:fd:dc:58:6f:04:31:b3:71:fd:
                    ff:a0:cf:25:4a:35:3e:df:1e:bc:fa:5d:94:59:33:
                    6e:85:1d:a5:37:d0:78:71:fa:63:69:31:23:71:fd:
                    06:bd:b4:d5:a8:f2:53:4a:d6:71:14:48:10:25:01:
                    b3:0e:50:b3:bb:82:74:c2:a8:cc:52:68:0b:36:7f:
                    13:3c:96:fb:ec:2d:c0:e6:42:d0:5e:ac:11:73:1b:
                    47:08:15:e6:8e:9d:9c:4d:fb:b9:d8:e9:7e:48:1d:
                    56:e8:e8:dc:21:3d:73:8b:c7:91:17:c0:3e:94:7a:
                    c1:22:5f:d1:c7:95:56:3a:21:1f:bf:57:ba:02:37:
                    e2:8f:9f:73:11:0c:78:5c:d8:b9:62:57:9d:f1:87:
                    02:e9:c5:70:11:0e:4f:68:34:2f:84:21:13:65:d4:
                    67:92:f9:eb:1c:38:4e:51:99:19:01:6e:8c:1a:67:
                    85:50:3e:53:8d:a0:12:6b:8d:52:68:56:7f:7d:07:
                    16:a3:b2:f9:45:b2:83:6b:da:c8:52:e2:da:39:7c:
                    0f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:09:58:3A:42:78:65:48:76:CE:E6:A4:1A:31:7A:31:2A:E1:2B
            X509v3 Authority Key Identifier:
                keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:b2:3c:77:c6:23:1c:15:a5:75:1d:de:06:18:33:c8:50:
         ec:29:4e:b3:ab:d4:27:95:d0:7f:d3:fa:d3:b9:22:34:ff:6b:
         a5:09:9e:ef:c4:54:71:92:53:f6:51:f2:82:27:76:42:e6:ff:
         99:e5:dd:87:56:c2:e6:1e:d4:1a:5d:a8:82:03:58:82:dd:f0:
         4e:d4:23:c3:8c:30:e5:a7:13:94:15:2f:df:65:1a:12:9c:03:
         d3:41:41:d0:f9:2b:98:15:21:7d:8e:59:a0:30:78:07:40:93:
         0a:2a:d1:b1:93:61:45:34:51:a8:80:40:10:c0:32:cc:b3:c1:
         b8:91:ea:4c:90:22:47:c9:80:2f:1d:09:b5:b3:3b:c5:5b:a2:
         5a:2a:4d:a9:6b:3d:2f:3a:b7:b9:0a:c8:53:51:69:81:b5:bf:
         68:d5:d5:bd:e8:29:fa:34:46:23:6a:9c:ff:42:27:41:7e:e2:
         f8:29:7e:dc:7f:5d:b9:80:5f:df:1d:16:73:6a:ec:05:18:14:
         6c:68:9b:ba:f6:99:36:bb:6d:fd:48:4b:35:b5:cc:43:65:11:
         0d:81:24:21:d8:f3:26:ee:18:69:8a:d2:ce:0d:6f:0c:45:42:
         7f:ee:05:d1:6d:1b:96:3e:2e:86:25:9a:67:38:4e:92:a8:63:
         ca:2e:d7:0b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGDxKXhsg5Vjpy6+Ieg9camLzAX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1
M0EwODAwRTAeFw0yNjA1MTIyMjQ2MjVaFw0yNjA1MTMyMzQ3MjVaMDMxMTAvBgNV
BAMTKEQ2QzMwOTU4M0E0Mjc4NjU0ODc2Q0VFNkE0MUEzMTdBMzEyQUUxMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4EfEqBbRiHf3GVCxoGrwcZAG
N6dKGfV9qcwqZfCVaZI6VGXQY4s+lRgoEmMNeDekV/3cWG8EMbNx/f+gzyVKNT7f
Hrz6XZRZM26FHaU30Hhx+mNpMSNx/Qa9tNWo8lNK1nEUSBAlAbMOULO7gnTCqMxS
aAs2fxM8lvvsLcDmQtBerBFzG0cIFeaOnZxN+7nY6X5IHVbo6NwhPXOLx5EXwD6U
esEiX9HHlVY6IR+/V7oCN+KPn3MRDHhc2LliV53xhwLpxXARDk9oNC+EIRNl1GeS
+escOE5RmRkBbowaZ4VQPlONoBJrjVJoVn99BxajsvlFsoNr2shS4to5fA/RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1sMJWDpCeGVIds7mpBoxejEq4SswHwYDVR0j
BBgwFoAUCYfH+GOaXsc5gm9kDI4E/VOggA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDYzOGJkMjEtYmU1Ni00MmI0LTgyNzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2
MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1M0EwODAwRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOTg3QzdGODYzOUE1RUM3Mzk4MjZGNjQwQzhFMDRGRDUzQTA4
MDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy
NzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0
RkQ1M0EwODAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAOKsjx3xiMcFaV1Hd4GGDPIUOwpTrOr1CeV
0H/T+tO5IjT/a6UJnu/EVHGSU/ZR8oIndkLm/5nl3YdWwuYe1BpdqIIDWILd8E7U
I8OMMOWnE5QVL99lGhKcA9NBQdD5K5gVIX2OWaAweAdAkwoq0bGTYUU0UaiAQBDA
MsyzwbiR6kyQIkfJgC8dCbWzO8VboloqTalrPS86t7kKyFNRaYG1v2jV1b3oKfo0
RiNqnP9CJ0F+4vgpftx/XbmAX98dFnNq7AUYFGxom7r2mTa7bf1ISzW1zENlEQ2B
JCHY8ybuGGmK0s4NbwxFQn/uBdFtG5Y+LoYlmmc4TpKoY8ou1ws=
-----END CERTIFICATE-----
Generated at Wed May 13 03:56:24 2026 by rpki-client