Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
File:                     F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft (raw, json)
Hash identifier:          1r08ZeP1Qv6zvlQ0zugKbtSRZfG3PYRG5dpYi8i3uAQ=
Subject key identifier:   20:9F:A3:D6:B2:53:19:4B:87:5C:AF:8C:19:0D:96:E5:6B:FB:1E:B0
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       53EF3E8CEFDC1672CC332D639DA3415E83BEC03E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 21:29:13 +0000
Manifest this update:     Tue 12 May 2026 21:24:13 +0000
Manifest next update:     Wed 13 May 2026 23:04:13 +0000
Files and hashes:         1: 3130332e34392e32382e302f32322d3232203d3e203633383632.roa (hash: iI74X3sladmzau4MBHsjwwPESmiR9DW2VEnZxuUovw4=)
                          2: 3130332e34392e33312e302f32342d3234203d3e203633383632.roa (hash: qdY1qEnMzrOMN6qPgYkSjiZrgYyzVV6DpcwDNKx+tzM=)
                          3: 323430313a663938303a653030303a3a2f33362d3336203d3e203633383632.roa (hash: 188nUZpWLjC5I5E2PwrEZNz+ZoqJ97KrIMhNsQpTeds=)
                          4: F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl (hash: M1Wv8QX61bkTt6ig9oVkW0AculFXsekT1udwxIu9pi0=)
                          5: 323430313a663938303a343030303a3a2f33362d3336203d3e203633383632.roa (hash: FmE6EgtaiTdvHmSv4NYOkhmIVErFQ56Arw5rq6qu5sc=)
                          6: 323430313a663938303a363030303a3a2f33362d3336203d3e203633383632.roa (hash: FG4YqxC2Q73IfOAJ8VlqlbH+o++S2tHH9i7KG5m04js=)
                          7: 3130332e34392e32382e302f32342d3234203d3e203633383632.roa (hash: 3YXWMM41Pq4tpTkJcAa/g/i/xwLMU1IDNTLSp+AdGWk=)
                          8: 323430313a663938303a3a2f33322d3332203d3e203633383632.roa (hash: DBKvW9NxqaLL8RHuYyc+b3LPNUUrC7Hwp8Qyq6M4iN0=)
                          9: 323430313a663938303a633030303a3a2f33362d3336203d3e203633383632.roa (hash: 9owZN+SGixSRv5paln4ebqIe0QfV06FiQxst/eJe3DU=)
                          10: 323430313a663938303a323030303a3a2f33362d3336203d3e203633383632.roa (hash: m4R9NZih4vbFiWk/oapYLtzrrHyjwTP8TnZiW2TIsYQ=)
                          11: 3130332e34392e33302e302f32342d3234203d3e203633383632.roa (hash: +pjc1foIJ9rbBMQG2IfKQY7Dn9Qqy0Sm/AbZle88apI=)
                          12: 323430313a663938303a353030303a3a2f33362d3336203d3e203633383632.roa (hash: gx4l1RClNVMIicd/OFhkIDB2zi0aLeUfQl4uYWjAKfI=)
                          13: 323430313a663938303a613030303a3a2f33362d3336203d3e203633383632.roa (hash: zHdIBVS0XR/c8iQ3ecyXV97YNC4K/MzxZJeB0bWu9pM=)
                          14: 3130332e34392e32392e302f32342d3234203d3e203633383632.roa (hash: jymQxIodNK96y3uCKc9HAkpGHF4gay+EOqO/ZQMQfCc=)
                          15: 3130332e34392e33302e302f32332d3233203d3e203633383632.roa (hash: XTYnRt9z2ZfmnVz7ZmT7O89jA08YspVmr19Q3ReJvHk=)
                          16: 323430313a663938303a333030303a3a2f33362d3336203d3e203633383632.roa (hash: ImkuzGgdshM6qrGvNWPcvXA2U/OhWZTyq0kx6i7Y0vo=)
                          17: 3130332e34392e32382e302f32332d3233203d3e203633383632.roa (hash: 00W7ni+GkGcQM0VVSCT1HddEcXw1sIY406K+a7D7bz4=)
                          18: 323430313a663938303a313030303a3a2f33362d3336203d3e203633383632.roa (hash: FyYMB40kDwpjCvWN+TSVBf46H3DhYilIANCtvHDsagI=)
                          19: 323430313a663938303a663030303a3a2f33362d3336203d3e203633383632.roa (hash: e4DmCvjrwHyT7r3+k79q2aF3Szs2g3FJzTfH2C7ERr0=)
                          20: 323430313a663938303a393030303a3a2f33362d3336203d3e203633383632.roa (hash: u5GTISKareluIOuRlJCcyd5lT161QC2aLw11DfKTlGQ=)
                          21: 323430313a663938303a623030303a3a2f33362d3336203d3e203633383632.roa (hash: bPcyFOp3Vx7C20HhMoZKMLWt5nkpzrt8bNAH4/4hnmA=)
                          22: 323430313a663938303a643030303a3a2f33362d3336203d3e203633383632.roa (hash: dQ0LTq0QuS8FxqZD/SqB4MlcMzsUyUSMHylX8gcVxQI=)
                          23: 323430313a663938303a383030303a3a2f33362d3336203d3e203633383632.roa (hash: xBuVDFknIKocW5PCReZ6kwYrsbAP9yAUXV608PwI7kc=)
                          24: 323430313a663938303a3a2f33362d3336203d3e203633383632.roa (hash: Yio/Y/6sVq/GkVsFsKOZtlUHd35vO5YLp03zhopVfiI=)
                          25: 323430313a663938303a373030303a3a2f33362d3336203d3e203633383632.roa (hash: rU/VCfOcmioGmVK72orlaC2seYco9bFHexowAk81BN4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ef:3e:8c:ef:dc:16:72:cc:33:2d:63:9d:a3:41:5e:83:be:c0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May 12 21:24:13 2026 GMT
            Not After : May 13 23:04:13 2026 GMT
        Subject: CN=209FA3D6B253194B875CAF8C190D96E56BFB1EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:8f:d7:fb:15:42:53:12:73:b2:e4:01:cd:
                    b8:ad:1b:06:b6:fe:94:de:1e:c7:a5:e7:c4:37:ac:
                    51:0c:7c:4d:f3:19:79:82:f2:82:05:ef:ce:b7:d4:
                    41:8e:90:eb:8d:61:79:40:39:20:42:48:f4:20:74:
                    8a:c8:95:14:b9:cc:41:28:c6:6b:65:e8:ad:2b:d4:
                    06:c3:99:0f:8a:40:e4:59:9b:93:6f:80:28:80:5d:
                    6c:50:13:8f:f2:86:56:a3:bb:9b:36:4b:1c:d7:26:
                    02:7b:49:bf:f9:f8:c8:1a:01:05:e1:08:4c:3b:e0:
                    a3:91:3c:c5:0b:de:8a:ac:ef:cf:67:e4:7f:eb:7d:
                    95:9b:5e:74:bd:a7:83:e7:e7:e1:f9:3c:e1:e4:9c:
                    04:1d:93:3b:e1:23:15:1b:ce:a7:cb:cc:b4:c3:5f:
                    78:e4:f4:a1:3a:b9:60:cc:26:0f:c0:44:62:01:ab:
                    04:cb:85:56:c8:a6:33:25:57:4a:e5:c2:31:1b:84:
                    72:79:60:4a:5c:03:14:ea:c1:84:d9:df:dc:4f:2c:
                    8b:f6:ac:db:ce:28:e4:08:17:84:2c:c4:69:3a:e6:
                    ab:69:65:21:cd:30:cd:c5:b1:ca:a4:9a:da:a1:32:
                    d2:51:4c:87:a6:8a:95:93:6b:c2:9e:b2:0b:7b:d8:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9F:A3:D6:B2:53:19:4B:87:5C:AF:8C:19:0D:96:E5:6B:FB:1E:B0
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3e:2a:88:ff:3d:48:87:e2:4d:9a:55:3f:cd:a8:a2:ca:63:
         27:fd:28:a3:7c:f1:94:8f:44:74:f4:12:80:9f:3a:ee:f8:43:
         2b:97:ac:12:41:a5:b7:32:11:3f:94:e4:33:7f:b1:e8:3f:47:
         9b:86:0f:69:5f:0c:6e:35:35:e8:8c:6c:65:25:af:05:73:51:
         6b:d6:c7:f2:6d:15:7d:fc:21:f5:1c:a5:84:a6:70:15:95:fe:
         76:44:65:19:44:d7:ec:58:12:8d:61:6c:2a:4b:fa:01:77:1b:
         20:3a:ce:ca:f4:09:85:fc:b2:a2:ff:ef:e7:87:a4:9e:ec:c7:
         5a:72:dc:8c:68:76:52:3a:85:5c:3c:e6:9f:a5:a4:2f:8c:73:
         b7:9b:be:5d:37:36:60:4f:2e:d7:b4:da:5f:e0:ce:40:33:e4:
         7e:c2:93:83:dc:46:df:1a:6f:f9:f5:85:aa:06:1c:c3:9c:f9:
         68:2b:b1:c8:7b:38:07:c9:1e:b1:45:dd:89:fc:58:54:29:7b:
         0c:09:2a:a9:16:f1:fd:50:7b:87:e0:fe:b4:0a:52:e8:7d:eb:
         bb:e6:cc:96:1e:e6:81:89:85:1b:a7:5e:11:cb:9d:6f:e2:fc:
         0a:49:49:87:5f:d6:82:4c:06:58:75:22:68:26:0e:94:f0:e4:
         87:e7:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:41 2026 by rpki-client