Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
File:                     E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft (raw, json)
Hash identifier:          np/g4as/FaX54QwDIW60koUUpXLjwSyhVWLMCm5oDYg=
Subject key identifier:   BC:23:87:29:23:3A:26:4C:C9:20:A1:ED:DE:C1:EF:39:C0:22:AF:4C
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Certificate issuer:       /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial:       27F7CE14375FEC48919D07DDE78AD3B68D825C2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 03:22:28 +0000
Manifest this update:     Tue 12 May 2026 03:17:28 +0000
Manifest next update:     Wed 13 May 2026 06:22:28 +0000
Files and hashes:         1: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: zkpoPaCvym1nePddds0Q6RkGOhVKM8mr34gyM4UC8cI=)
                          2: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: Pn0Z404yzeHHtXmdQ9DEjG8okFo36OY3UkZiEWBYoXE=)
                          3: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: LXNYT1nV1xGIxdVsRECQ3Cj/A4MmgkuRi4tC78/lvhM=)
                          4: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: CrDosYMbaMymGSuAwPQv1AxOjr/T7uHU3jsk81GEu9s=)
                          5: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: kKeNFgEWYpxJdEVxaw5r/j+gOBdLDAvajOzNPHKCcoc=)
                          6: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: I7UPuFvym8p8pJP6diQSrrFx2chmGGAd+K6o7fzpvv0=)
                          7: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: 89cfsFLBXkB3WFs7rNpw78ZZSzujq+PLIJTF9YsulHg=)
                          8: E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl (hash: 9/VOOaB0p+gj7T322CXARW+T2lZR9zg3tEZz0+iWHnc=)
                          9: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: Jc9uidaalUxZZcIN6U2HF/YTypqnkC1z9uB0RypRbr8=)
                          10: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: PwwIV0M1bktSo20UeNkcLhDf5y3VQGfSd2Gx4evwdcY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
                          rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 06:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f7:ce:14:37:5f:ec:48:91:9d:07:dd:e7:8a:d3:b6:8d:82:5c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
        Validity
            Not Before: May 12 03:17:28 2026 GMT
            Not After : May 13 06:22:28 2026 GMT
        Subject: CN=BC238729233A264CC920A1EDDEC1EF39C022AF4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:ae:49:00:3a:28:97:e7:92:62:e3:28:98:
                    ca:d7:29:4c:5c:4c:24:fa:9b:5b:56:ab:7f:70:c6:
                    53:01:f5:ed:7d:e3:17:44:ac:3c:8e:5d:91:56:7d:
                    ea:b2:3b:8a:85:95:f4:c0:a7:6b:99:b0:44:36:95:
                    21:b9:7e:f6:87:33:6f:91:8c:ab:93:30:8b:3a:7a:
                    a2:6b:c9:80:50:c2:01:4a:ea:9e:bd:be:83:8e:f0:
                    6e:28:79:03:cb:da:0f:b5:18:3c:8a:43:d2:ca:ff:
                    54:fd:ba:32:a2:4f:36:4f:d1:48:5b:ed:3a:55:66:
                    3c:e5:d8:19:17:90:ae:4c:68:40:69:3b:5a:14:b9:
                    53:27:25:31:51:82:dd:e5:8a:b7:35:79:aa:21:34:
                    ff:c6:6a:51:e4:20:d0:96:83:54:37:a4:84:67:8b:
                    1e:bc:ed:45:08:af:17:af:f5:87:17:4a:5f:b8:14:
                    7c:04:96:d4:df:f9:59:02:b8:89:33:d5:84:06:4f:
                    46:3e:93:95:48:d2:88:a7:43:c3:e5:26:d9:ee:fc:
                    17:67:5b:1c:59:17:80:61:2a:25:0a:f4:3a:01:8a:
                    4f:de:8d:5f:3b:e7:bb:f1:2c:d2:ac:74:7f:03:05:
                    08:95:42:52:d8:01:95:72:e3:5b:e2:74:ed:c5:86:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:23:87:29:23:3A:26:4C:C9:20:A1:ED:DE:C1:EF:39:C0:22:AF:4C
            X509v3 Authority Key Identifier:
                keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cc:bd:51:4a:50:91:0d:53:51:b2:e9:e9:4b:05:64:e3:83:
         98:46:2c:15:e6:ab:78:ec:96:96:7f:7e:25:90:6a:d9:86:a8:
         f9:f7:7e:d4:a2:d2:87:64:28:13:12:ca:f2:e7:d5:e9:31:17:
         58:d5:f4:91:98:f1:fa:04:9c:21:a6:63:48:3e:41:f8:6e:2c:
         c2:b0:98:81:a1:bc:61:85:93:49:1c:ee:12:f3:30:2e:84:42:
         ee:51:ad:c1:54:26:b1:7c:f0:a8:2a:9d:3c:ff:cd:4c:12:0d:
         c3:0a:2f:8c:ee:3d:40:7f:15:6d:5e:a8:38:dd:2a:be:9e:4b:
         ba:2c:f3:cf:5f:29:af:34:a4:d3:32:aa:f7:87:aa:21:6d:d0:
         d2:93:5f:f4:ee:6e:0c:f4:04:d3:a3:1e:06:36:bb:7b:ed:8c:
         a8:8d:8f:c7:86:10:58:46:54:fa:f2:72:22:35:f7:9e:0e:9b:
         aa:eb:65:6c:3d:4e:89:d4:99:a3:46:da:73:0a:fd:35:e3:80:
         34:e1:76:e1:b6:01:59:d9:a3:81:9b:b6:40:62:8e:ce:e9:f6:
         0a:c4:65:7f:66:4b:d3:63:a1:6d:93:f8:35:dd:8d:61:38:64:
         70:f8:88:79:52:59:73:ae:07:df:86:08:e8:d3:cf:7a:7b:a2:
         fb:d8:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:21 2026 by rpki-client