Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
File:                     A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json)
Hash identifier:          KF60dvBs6NjI67Kef02NR56T6uHYJD9x1SYX+J4+6OA=
Subject key identifier:   B0:57:0B:58:39:1C:61:38:11:FC:D8:49:1B:B3:6E:30:F7:C4:2D:AF
Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16
Certificate issuer:       /CN=A008821941A61F29770FC73A584B71178BCAE916
Certificate serial:       3D4F7446CD42934D8ACAA18315F5A857963A0ECC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 15:09:47 +0000
Manifest this update:     Tue 12 May 2026 15:04:47 +0000
Manifest next update:     Wed 13 May 2026 18:34:47 +0000
Files and hashes:         1: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=)
                          2: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=)
                          3: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: zclbjkR100EdIm1U39op0C0cIviGDE027PFMl/xkbcs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl
                          rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4f:74:46:cd:42:93:4d:8a:ca:a1:83:15:f5:a8:57:96:3a:0e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916
        Validity
            Not Before: May 12 15:04:47 2026 GMT
            Not After : May 13 18:34:47 2026 GMT
        Subject: CN=B0570B58391C613811FCD8491BB36E30F7C42DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:18:3d:f2:e3:65:86:79:5a:20:fc:7b:13:fb:
                    f7:fd:9d:f6:f1:7d:41:0a:8c:44:40:67:6a:86:8a:
                    4a:2e:25:c6:bc:7c:7a:ee:bc:da:db:e2:4d:e2:42:
                    80:1a:00:e6:8e:11:4b:c8:06:2e:93:ec:b2:30:be:
                    2c:c5:83:37:6f:8a:fa:87:52:9e:46:60:09:69:fe:
                    35:f8:59:ef:23:01:34:b1:e8:86:9f:e4:e7:47:bc:
                    dc:33:6a:a3:39:27:cd:1d:de:a0:96:d1:bd:92:44:
                    15:5b:2e:11:bf:63:4d:3a:02:9f:79:de:a2:c1:20:
                    b4:b6:56:5c:f8:39:52:a5:af:71:d4:42:1c:e2:ca:
                    14:54:47:13:d7:0f:a4:29:6f:5f:45:56:d6:d5:04:
                    65:c2:ae:f1:f8:4b:0b:ec:95:dc:de:d8:4d:60:d3:
                    84:89:3e:e1:05:d7:85:c6:44:45:6f:ef:f7:4f:5d:
                    db:4b:56:35:59:26:37:fd:6b:12:8c:f9:c7:cf:00:
                    77:70:0e:96:21:15:f5:6b:07:ee:95:ca:6f:ff:7a:
                    d0:7c:67:42:2e:1c:ee:cd:c5:ef:fb:fd:b2:25:ef:
                    fe:91:06:86:0a:c0:37:d9:32:83:0a:8f:7e:c9:dd:
                    62:ac:48:57:8d:93:96:8d:e8:b2:27:ed:5f:2c:2e:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:57:0B:58:39:1C:61:38:11:FC:D8:49:1B:B3:6E:30:F7:C4:2D:AF
            X509v3 Authority Key Identifier:
                keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:24:e4:cd:c4:b8:d5:14:95:15:ee:1a:49:98:c6:00:e7:28:
         c7:92:3f:5c:d8:73:b9:71:53:35:2c:5b:35:69:05:5a:f4:bd:
         c1:d0:8f:ef:40:e6:d3:e2:06:0c:21:65:f3:1b:17:91:99:55:
         d3:1c:a0:06:5a:69:e7:7e:c3:f5:44:b2:75:1f:83:86:87:f8:
         ca:68:df:28:27:27:6e:d2:c6:e4:39:84:1a:8c:23:97:2b:72:
         93:90:7d:9c:9f:78:1a:18:22:22:94:12:c4:f3:48:26:97:9a:
         6a:a9:8d:2d:79:ed:de:52:fa:d6:13:22:22:d3:8c:9a:e6:ff:
         58:b0:59:3d:fd:70:b4:be:1d:2f:3a:0d:84:2e:4d:21:6e:07:
         92:f0:66:48:fc:50:3b:da:e9:f3:c7:ad:9e:02:b8:6d:7b:7d:
         da:11:12:26:fe:bd:70:cb:44:49:9c:36:e7:45:10:63:2f:4a:
         7d:0d:6e:d7:4e:9c:8f:c6:7a:34:9f:e2:43:b7:c3:08:17:bb:
         7d:0f:a1:1a:f8:a5:e7:36:b7:5f:c5:23:a8:7b:b1:75:1f:fd:
         b3:aa:0b:48:11:ca:ed:b7:9f:50:1f:61:fd:46:6f:bf:01:50:
         24:56:06:5b:f5:24:f5:f3:88:e2:bb:c0:df:79:4e:85:88:59:
         a8:47:76:49
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPU90Rs1Ck02KyqGDFfWoV5Y6DswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4
QkNBRTkxNjAeFw0yNjA1MTIxNTA0NDdaFw0yNjA1MTMxODM0NDdaMDMxMTAvBgNV
BAMTKEIwNTcwQjU4MzkxQzYxMzgxMUZDRDg0OTFCQjM2RTMwRjdDNDJEQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnGD3y42WGeVog/HsT+/f9nfbx
fUEKjERAZ2qGikouJca8fHruvNrb4k3iQoAaAOaOEUvIBi6T7LIwvizFgzdvivqH
Up5GYAlp/jX4We8jATSx6Iaf5OdHvNwzaqM5J80d3qCW0b2SRBVbLhG/Y006Ap95
3qLBILS2Vlz4OVKlr3HUQhziyhRURxPXD6Qpb19FVtbVBGXCrvH4Swvsldze2E1g
04SJPuEF14XGREVv7/dPXdtLVjVZJjf9axKM+cfPAHdwDpYhFfVrB+6Vym//etB8
Z0IuHO7Nxe/7/bIl7/6RBoYKwDfZMoMKj37J3WKsSFeNk5aN6LIn7V8sLv+5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsFcLWDkcYTgR/NhJG7NuMPfELa8wHwYDVR0j
BBgwFoAUoAiCGUGmHyl3D8c6WEtxF4vK6RYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmFhZDZhM2YtNmNhMC00NjY5LTk4ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0
MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4QkNBRTkxNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMDA4ODIxOTQxQTYxRjI5NzcwRkM3M0E1ODRCNzExNzhCQ0FF
OTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4
ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0Qjcx
MTc4QkNBRTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACAk5M3EuNUUlRXuGkmYxgDnKMeSP1zYc7lx
UzUsWzVpBVr0vcHQj+9A5tPiBgwhZfMbF5GZVdMcoAZaaed+w/VEsnUfg4aH+Mpo
3ygnJ27SxuQ5hBqMI5crcpOQfZyfeBoYIiKUEsTzSCaXmmqpjS157d5S+tYTIiLT
jJrm/1iwWT39cLS+HS86DYQuTSFuB5LwZkj8UDva6fPHrZ4CuG17fdoREib+vXDL
REmcNudFEGMvSn0NbtdOnI/GejSf4kO3wwgXu30PoRr4pec2t1/FI6h7sXUf/bOq
C0gRyu23n1AfYf1Gb78BUCRWBlv1JPXziOK7wN95ToWIWahHdkk=
-----END CERTIFICATE-----
Generated at Wed May 13 05:48:17 2026 by rpki-client