Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
File:                     AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json)
Hash identifier:          HAx2uyAl2hpGY3XbPWNjGwwOAjONKmKSdo0oqzXGSSE=
Subject key identifier:   F5:B5:4F:2C:61:92:57:DD:CB:C0:8D:1B:B0:EE:0F:E4:6D:92:A6:57
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Certificate issuer:       /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial:       0CD45478E3073CEDDF9B5E2CB85C8C773977F759
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 06:22:09 +0000
Manifest this update:     Tue 12 May 2026 06:17:09 +0000
Manifest next update:     Wed 13 May 2026 07:23:09 +0000
Files and hashes:         1: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=)
                          2: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=)
                          3: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=)
                          4: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=)
                          5: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=)
                          6: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=)
                          7: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=)
                          8: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=)
                          9: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: iNOPO8M86HzwdnfUfBIKkCi+YX2biRkEaa4lWVbCnIg=)
                          10: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=)
                          11: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=)
                          12: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=)
                          13: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
                          rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d4:54:78:e3:07:3c:ed:df:9b:5e:2c:b8:5c:8c:77:39:77:f7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
        Validity
            Not Before: May 12 06:17:09 2026 GMT
            Not After : May 13 07:23:09 2026 GMT
        Subject: CN=F5B54F2C619257DDCBC08D1BB0EE0FE46D92A657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:14:9f:fe:bc:5d:7c:bb:e4:3f:79:48:ba:0d:
                    ef:e9:4a:0a:0d:51:0d:8d:c7:df:3c:96:97:59:75:
                    c2:37:12:4a:7b:d2:b0:73:75:aa:46:cc:da:f5:48:
                    0b:b5:29:27:1d:c3:bb:5a:0c:06:c1:a9:15:69:f6:
                    0a:5e:c3:98:e9:e8:b2:c6:84:89:09:ae:95:99:9c:
                    d6:8a:91:0b:9d:f5:d0:7e:04:dd:8e:ae:a0:8d:b9:
                    5a:85:1b:4c:ca:0a:7f:bd:fb:69:8e:36:2d:1d:63:
                    13:b0:70:f1:e1:ee:cb:18:b6:20:b0:2f:01:fd:0a:
                    a8:63:ed:b6:8f:61:aa:20:d8:03:82:fb:13:1c:d5:
                    03:7c:79:2d:84:05:2c:14:73:04:5c:e0:9e:23:0e:
                    bb:a2:95:0d:1e:96:53:7e:54:09:24:29:d9:b9:95:
                    67:c4:83:b2:ef:f3:f0:3a:cb:19:38:4c:85:c5:b2:
                    c9:50:7c:5f:c6:86:4b:aa:e9:a1:d5:10:ea:5b:49:
                    b8:4d:8f:e2:23:e7:96:e3:8e:e9:b2:6a:af:15:79:
                    36:a2:e2:39:c6:25:16:92:7f:b5:8a:62:82:73:89:
                    6b:59:f3:d1:61:55:3f:9d:2a:10:6a:5b:83:b9:c3:
                    92:1b:d7:ec:02:57:7c:d3:0b:04:0c:cd:db:89:94:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B5:4F:2C:61:92:57:DD:CB:C0:8D:1B:B0:EE:0F:E4:6D:92:A6:57
            X509v3 Authority Key Identifier:
                keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:93:d0:f4:f4:ee:a7:01:23:02:43:d1:fb:14:c9:21:b3:4f:
         5d:fd:44:bb:c1:ad:73:f5:5c:85:43:dd:7d:b5:50:d5:89:49:
         2d:98:b1:b9:e3:1b:7a:1f:3c:02:e5:f8:e6:02:1d:18:05:b1:
         89:3e:c8:d5:6b:f3:78:27:30:06:d7:63:06:ed:f6:2e:36:f1:
         04:14:81:fc:f3:1f:7c:cf:61:a0:ed:95:b9:c8:cf:94:69:b3:
         ba:c0:46:ae:b6:c5:99:88:7b:18:45:11:01:71:fd:12:09:d7:
         44:35:45:98:e7:e7:66:84:7e:c1:ad:e4:fc:10:92:3a:25:fb:
         1d:b5:d2:b7:19:4a:8a:ae:e8:bf:d2:ee:1d:2f:82:9b:53:29:
         46:5c:75:99:6f:20:08:0f:e3:b7:1a:d0:85:23:c2:46:4c:d0:
         18:48:1d:ce:36:0c:fa:7c:22:c5:c9:eb:e0:5c:fb:82:ab:85:
         20:0b:87:cd:e6:49:a1:4b:82:94:f0:18:b5:10:39:70:df:0b:
         7a:2b:38:6e:60:ba:7e:87:4d:52:5d:b8:56:39:a5:69:f6:2f:
         70:a4:73:66:55:29:ff:76:03:5d:01:60:cb:95:83:e5:88:98:
         d9:7f:45:f2:c2:4a:3b:12:15:a7:be:d7:24:46:36:b2:2b:34:
         98:4d:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:53 2026 by rpki-client