Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft
File:                     BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json)
Hash identifier:          j6xG/IQSEZO9WS63nYF0Z03KVq5reEx9RMnwK2SFOWo=
Subject key identifier:   BC:17:5C:3B:32:54:9F:12:AE:C7:59:8D:DD:35:2D:89:9E:38:6F:95
Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67
Certificate issuer:       /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67
Certificate serial:       3695264C138258F6516200EE5FE867C09334D59E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 17:41:47 +0000
Manifest this update:     Thu 23 Jul 2026 17:36:47 +0000
Manifest next update:     Fri 24 Jul 2026 19:26:47 +0000
Files and hashes:         1: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=)
                          2: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=)
                          3: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=)
                          4: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=)
                          5: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=)
                          6: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=)
                          7: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=)
                          8: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=)
                          9: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: k622EAFI/yMdOu5mCR6u0JGhXgDpUo7+80WxgN2meMk=)
                          10: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=)
                          11: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=)
                          12: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=)
                          13: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=)
                          14: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl
                          rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:95:26:4c:13:82:58:f6:51:62:00:ee:5f:e8:67:c0:93:34:d5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67
        Validity
            Not Before: Jul 23 17:36:47 2026 GMT
            Not After : Jul 24 19:26:47 2026 GMT
        Subject: CN=BC175C3B32549F12AEC7598DDD352D899E386F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:8e:fc:fa:55:5e:ae:77:00:aa:a4:91:04:
                    1c:f7:ff:14:f3:b7:bb:4d:b5:03:7b:5b:f9:8e:18:
                    73:c1:e0:d0:73:aa:4f:53:e4:fc:78:30:4d:d7:3f:
                    29:7a:a4:00:93:82:a0:76:2b:d2:29:a9:db:40:e6:
                    83:2f:bf:64:90:52:49:b3:5b:0d:7d:e1:a1:5c:49:
                    2e:20:e5:38:7b:9a:67:c8:bc:b5:90:7e:10:a9:a3:
                    a8:3e:df:6d:96:14:fb:6a:f2:77:87:40:89:0c:a4:
                    07:c6:8a:1c:9b:10:7d:20:f5:b2:97:03:5f:39:64:
                    f4:56:93:0a:74:52:a8:9f:49:a1:e0:97:46:d0:66:
                    32:da:17:75:fb:bc:a7:93:47:48:2d:6f:4c:fe:d5:
                    d5:11:d4:12:4c:4f:86:0b:29:ed:27:8f:ea:7f:68:
                    a3:be:8f:23:19:97:ac:90:6d:b8:07:ab:85:b0:cf:
                    15:56:c8:61:66:8a:fa:9c:e2:48:20:09:ad:5c:3a:
                    10:fa:f7:6e:76:32:c6:41:21:68:15:de:6f:7a:76:
                    39:68:8a:df:c3:da:45:9f:ce:0c:aa:81:48:f6:b3:
                    92:ff:7c:0a:58:94:60:ea:e7:eb:4b:a9:32:f2:62:
                    0f:62:55:0b:88:77:f4:8b:93:2f:d3:b2:16:6e:a5:
                    fa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:17:5C:3B:32:54:9F:12:AE:C7:59:8D:DD:35:2D:89:9E:38:6F:95
            X509v3 Authority Key Identifier:
                keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d6:83:37:f4:a8:0b:58:88:08:6f:5e:1e:29:0d:f8:01:7d:
         fe:12:fa:6a:bc:e1:d8:2b:bf:78:0b:16:6d:ed:a9:d0:2e:20:
         78:07:06:30:50:ae:0d:0f:ff:5e:5e:59:8f:bf:4c:11:e6:8d:
         80:bb:58:0c:2d:15:33:c6:5f:6b:07:78:65:ec:9f:88:dd:40:
         25:d1:2c:e4:0f:85:48:77:6f:aa:bf:10:fe:c5:b8:71:4d:72:
         c5:13:b5:55:35:cc:4c:16:27:90:74:be:5a:d9:41:b7:85:26:
         c3:1f:e2:0c:7c:84:c2:42:14:f7:28:a7:e6:1b:67:c1:41:19:
         3d:df:6c:6d:36:11:2e:3a:56:ba:9d:0a:43:69:c9:20:65:92:
         59:15:d2:38:c3:36:8f:d3:99:70:79:90:3a:23:32:bc:ab:f4:
         b1:68:20:3d:d2:fc:2c:77:8e:a8:5c:7a:ca:d6:18:e6:cb:93:
         a3:97:42:c6:a1:b9:b7:18:6e:2c:42:80:b7:34:93:51:bd:f1:
         7e:9a:f6:e1:10:78:7b:9a:64:1c:f5:bc:79:fd:3c:1d:34:eb:
         92:da:4c:db:61:0a:2c:5c:8d:1c:5b:50:b1:cb:b9:73:45:39:
         e8:cd:de:70:bb:8c:8a:0f:ed:ae:88:a2:1b:b5:8d:99:c5:80:
         69:17:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:02 2026 by rpki-client