Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
File:                     65DBBEC678177B7159AD901A4023BA57AA4096DC.mft (raw, json)
Hash identifier:          1BEXvSA49+7tFCDtQdX8e3+WubcrBHQ+VeKQKkiU4EE=
Subject key identifier:   5C:07:0C:97:1F:4E:FB:20:15:CF:DB:B3:CB:33:BA:E0:62:A6:D6:29
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Certificate issuer:       /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial:       74BE87D10BD2F059858BA3D28E57975AF27C96DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:19:01 +0000
Manifest this update:     Tue 12 May 2026 04:14:01 +0000
Manifest next update:     Wed 13 May 2026 07:14:01 +0000
Files and hashes:         1: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: uq0XahCuPwPF6uONqKm2eLZO4OTWzUiViXqNuFHYT+4=)
                          2: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: RES+IzVfinBoTB3WoZkBb0K0PMLwmwjFh6203Hnv7Fk=)
                          3: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: S4EP1lFYVTju24ot1ck+7kHJylZlYJvHzPIKURDcI5k=)
                          4: 65DBBEC678177B7159AD901A4023BA57AA4096DC.crl (hash: zpMQp5k/MivbsCj+qzp2K0sHkkhyBmc8vtDJFnX+yUs=)
                          5: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: HYOwWEsyIVZXnK4eLcj02fPXUV54e21APLG1OWqeK6Y=)
                          6: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: uoDjto4Bon7pce7gaQoVwabXxUeeyeeN7W67OfZu0pY=)
                          7: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: ahy9pgYJ/JRzmM8+Ec6KtXzoFXDTJf+AENe9YjQMlak=)
                          8: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: ryDBz/OArSkajCTSmWMTBuq6yxPVuRRR4FSfEXo1xKg=)
                          9: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: AMuay0c5oSMPzmQyIJxb21rH75gJq04Z09sxFsI2gX8=)
                          10: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: Os0dOUCAo82Ro4JJGXlWsdYmgpvswgP/lGrJ/rFU8kQ=)
                          11: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: XMUkhya/Im5TwnX+KHLLztrNmQIz+mhwII8y24T5T0Y=)
                          12: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: 2tjc/8qrga6+39EQjimW3zf16UfFL3aN5h4lRF828pQ=)
                          13: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: WJ8WqvkTLbC87sRVwP0S84GR9M75HVASRazE6C4BxN8=)
                          14: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: aAelOJ+yvf4qi4zR02tVF6ytUGxSBShT/+GgUk24frk=)
                          15: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: tvyLyjFncuafaNsnPRjTIe3OmM+u2yeMnvd+JSKf+OI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
                          rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:be:87:d1:0b:d2:f0:59:85:8b:a3:d2:8e:57:97:5a:f2:7c:96:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
        Validity
            Not Before: May 12 04:14:01 2026 GMT
            Not After : May 13 07:14:01 2026 GMT
        Subject: CN=5C070C971F4EFB2015CFDBB3CB33BAE062A6D629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:30:63:dd:83:9c:85:83:4a:00:e8:d9:56:
                    ae:72:9d:56:93:a6:49:8b:29:76:0b:a6:f5:80:37:
                    06:8f:b5:1a:0c:7a:5e:9d:ef:fc:d2:c2:ca:ef:31:
                    a4:18:63:30:a0:be:2d:bc:82:2c:01:03:ca:9b:1d:
                    de:9b:5e:24:13:16:18:6e:5a:b5:3f:62:9f:22:31:
                    23:4c:8e:f9:a1:73:b5:8c:38:6c:32:49:fa:a6:67:
                    09:82:b0:d3:79:d7:27:36:a1:ce:b2:5c:bc:cc:69:
                    14:0d:2b:f2:ff:6d:f8:6d:97:81:5b:90:de:ea:d8:
                    7b:1c:32:07:54:73:07:bf:7b:c2:71:62:29:eb:cd:
                    1b:8b:cf:ea:20:3e:0a:12:85:f0:8f:c8:c9:6c:d3:
                    2f:ab:79:34:07:65:df:cb:6a:d4:28:92:17:2a:01:
                    a0:44:6e:c2:fa:a3:d4:28:f7:94:75:8a:1b:18:a0:
                    0e:b1:fa:e1:d8:9c:b3:0c:27:38:40:ae:52:ce:8e:
                    cc:5e:6f:4d:de:20:75:37:6d:2b:2e:69:a6:b8:9a:
                    ea:32:77:e4:da:8d:2a:99:1e:b3:10:7c:b0:62:d7:
                    08:0d:41:aa:18:78:d1:af:7d:12:00:b7:aa:82:ac:
                    23:69:ce:2f:3d:80:35:e0:a4:de:de:ab:49:e2:ea:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:07:0C:97:1F:4E:FB:20:15:CF:DB:B3:CB:33:BA:E0:62:A6:D6:29
            X509v3 Authority Key Identifier:
                keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:19:ec:b3:c2:ac:62:f6:67:85:3b:45:b2:62:36:bf:61:83:
         ca:47:f1:b1:42:8e:07:93:d2:a6:46:c0:92:ef:78:55:84:d7:
         4b:6b:11:94:a8:57:5e:1e:7c:11:07:cb:b6:3b:ab:9e:07:e0:
         bb:d4:f9:ce:e9:80:20:bd:61:17:ce:ce:e0:e4:87:0a:c4:52:
         e2:04:a2:22:b0:32:18:c2:01:0f:80:c8:6a:93:dc:2c:17:c1:
         a6:d8:7b:72:de:56:20:2b:8f:be:72:a0:96:50:10:61:11:4e:
         5a:04:f9:57:8e:da:ba:ac:75:49:2e:5d:9a:27:33:b5:73:86:
         d4:1e:55:b1:1f:26:7f:6a:8f:8d:51:f0:49:d9:58:a5:6c:c0:
         8e:14:ba:76:ad:58:0d:71:00:4b:fa:73:60:7f:1b:65:2b:44:
         f1:90:51:e3:7d:7c:2f:ee:39:ee:6b:b8:67:72:1c:e0:cc:24:
         59:89:70:ca:7f:e9:d6:4f:97:ac:94:5c:7c:2d:2f:c1:64:6c:
         2c:81:78:02:bf:f7:56:9e:42:79:db:93:e7:80:33:eb:cc:5f:
         f3:e5:a3:a1:7f:ae:aa:02:7b:4a:08:30:47:cc:eb:e0:bc:16:
         8f:89:2f:92:1a:81:ce:ed:15:1e:32:ab:a0:e1:c4:6b:e0:e3:
         f0:6d:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:29 2026 by rpki-client