Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft
File:                     FF5F881DC07CC4A9A985D594360658D202A551B7.mft (raw, json)
Hash identifier:          dzdst05vttEFdeWog90j4pcFfVlA0HAZFhP8IwigM/8=
Subject key identifier:   04:59:31:34:BD:BF:EB:E4:3A:CD:DF:2A:A4:A8:5B:32:3A:23:24:64
Authority key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7
Certificate issuer:       /CN=FF5F881DC07CC4A9A985D594360658D202A551B7
Certificate serial:       745298E138EBAB7CA49D4853CBE7B0DB2725F26D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:32:23 +0000
Manifest this update:     Tue 12 May 2026 17:27:23 +0000
Manifest next update:     Wed 13 May 2026 20:03:23 +0000
Files and hashes:         1: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: GNQ9BAndW/dbBDXxGBCrP2cWFnFb/Uhl5zGAhjYFfBA=)
                          2: FF5F881DC07CC4A9A985D594360658D202A551B7.crl (hash: Ffgrq7ZdUUUeCyl3GQw2E2W/Lo5V2TqyNY54gOer0rg=)
                          3: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: j3wy4rBOt9KLpaD5LH0BwgRkujp7xgPfgUer0oRRcO4=)
                          4: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Da+BSi/QmlOV/X3TjGzgwu4l3eK1o4UhYD/OBNK4cHQ=)
                          5: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 8XrnQ5SnhyZDHtT2jqiiu3w//jV9DlxlWcB7qtbppcE=)
                          6: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: zXGSnPmEp4F0jfkLMTMvDaGHFb1hgkrGA8TNoljlC2g=)
                          7: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: 9MCsmuGnmFDoeSG3rIPrfccOXghMBGlEEz5Onpmf8wY=)
                          8: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: oD9IDDMfDt326HwXRIsMWXvISYJSKNyW+NeKDvpDxLY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl
                          rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:52:98:e1:38:eb:ab:7c:a4:9d:48:53:cb:e7:b0:db:27:25:f2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5F881DC07CC4A9A985D594360658D202A551B7
        Validity
            Not Before: May 12 17:27:23 2026 GMT
            Not After : May 13 20:03:23 2026 GMT
        Subject: CN=04593134BDBFEBE43ACDDF2AA4A85B323A232464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:d2:53:e5:a1:82:17:08:74:28:6c:33:51:
                    8f:1d:eb:33:c2:6a:05:d9:62:80:4f:31:14:9a:26:
                    21:86:40:31:a2:16:31:c5:0f:b6:14:fd:4d:87:a0:
                    1d:05:86:2d:f3:bc:c4:8e:8f:db:a2:53:dc:c4:81:
                    a0:05:f4:b0:74:04:31:39:f1:b3:48:ff:ca:6d:e2:
                    3b:c7:93:86:ba:7c:8c:02:7f:a4:82:c1:62:e0:65:
                    99:1c:3c:21:20:db:6a:e1:cc:39:43:66:7e:d2:8c:
                    44:0b:d9:45:5c:5f:cf:d1:d7:a8:d7:26:a2:81:b7:
                    ad:e0:ea:00:91:a1:dd:f0:09:27:0d:8c:27:35:d8:
                    e1:27:a6:d5:71:6a:17:29:82:a5:09:28:11:6c:e3:
                    d6:f7:31:3f:65:64:54:8a:ca:1a:97:2b:df:ce:05:
                    14:93:66:18:c1:bd:7c:7e:cc:72:00:36:95:5c:12:
                    1e:cb:86:55:f7:85:c3:36:5b:13:61:6e:d2:9e:a1:
                    f9:04:7e:8f:99:31:a9:67:31:74:6c:9c:32:95:8e:
                    3d:75:04:25:ce:6e:15:86:b4:e3:69:6a:f0:25:ab:
                    3a:b4:67:3d:13:18:a1:6e:ae:89:47:98:09:ac:f3:
                    cf:7b:8b:18:8e:57:9e:1a:92:73:12:df:ee:1a:f9:
                    89:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:59:31:34:BD:BF:EB:E4:3A:CD:DF:2A:A4:A8:5B:32:3A:23:24:64
            X509v3 Authority Key Identifier:
                keyid:FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:b7:80:8d:5b:c9:67:8b:d2:a6:d5:a8:be:88:b3:70:c3:
         6d:87:7a:db:ad:3e:59:52:54:e2:ba:3a:28:9c:64:60:2e:44:
         03:33:fc:f1:bf:77:85:d2:dc:91:08:ca:7f:c8:32:91:e3:ee:
         3c:2f:78:f1:ee:85:e7:5d:9b:4c:f0:86:b5:6b:43:2c:df:49:
         f1:63:3b:cb:83:fd:62:db:e0:16:1b:6d:cd:dd:34:65:c4:01:
         8b:ee:25:bb:6b:7a:15:f4:2d:e3:28:90:8b:32:7e:07:4b:fb:
         ff:4c:db:22:19:2a:f4:9a:e7:d9:61:94:44:c0:28:bd:6a:eb:
         9a:03:92:7d:76:33:6b:62:08:31:24:41:b2:36:44:b2:e9:f2:
         c6:a6:5d:96:30:d8:44:c7:79:47:b3:cd:6d:5e:fa:a4:67:0b:
         85:2b:66:9c:db:3e:e8:5a:65:02:fa:9b:ac:d2:dc:b6:94:4e:
         3f:86:c9:a4:02:fb:f5:95:14:08:d7:e7:85:cb:ce:8b:ac:47:
         26:1c:ac:cb:09:4b:27:9d:84:df:07:2a:13:f3:ab:ee:78:99:
         a3:ee:44:9b:2e:e9:0c:3b:2c:50:30:97:4c:09:4d:f8:a1:2d:
         03:14:dd:90:5c:98:7b:9e:07:77:a1:07:41:33:5d:87:2d:ed:
         97:bd:53:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:06 2026 by rpki-client