Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft
File:                     BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft (raw, json)
Hash identifier:          MDkUTHhEoivCHlCscFSXH1mAwbUcy5CWpOLz1PHE+Ng=
Subject key identifier:   47:B4:BE:E1:61:9A:B1:8A:B3:AF:A1:BC:2B:4C:1B:2B:EA:4E:42:6D
Authority key identifier: BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B
Certificate issuer:       /CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B
Certificate serial:       31AFB747F9C6D2DF51A6975FA7643B99366D1C03
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 01:51:34 +0000
Manifest this update:     Fri 24 Jul 2026 01:46:34 +0000
Manifest next update:     Sat 25 Jul 2026 03:59:34 +0000
Files and hashes:         1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: vB3DIDOP6XaDT6CdgqU/+W3bKEm4+0cWx6zG+evFV/o=)
                          2: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl (hash: w632R9cIdCqMSkSRwRqw/zusGv4psJV19n1UfTBiT9o=)
                          3: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: AEf/X0jl+J5qRkbIOztsgP/hb8T9iNj2UH5fWBvBTds=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl
                          rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:af:b7:47:f9:c6:d2:df:51:a6:97:5f:a7:64:3b:99:36:6d:1c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B
        Validity
            Not Before: Jul 24 01:46:34 2026 GMT
            Not After : Jul 25 03:59:34 2026 GMT
        Subject: CN=47B4BEE1619AB18AB3AFA1BC2B4C1B2BEA4E426D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4e:5a:d9:05:e3:1c:ee:d9:cd:be:08:90:b7:
                    48:27:45:7e:23:6f:f1:98:5f:5e:f3:95:f4:ff:ed:
                    2b:05:84:ed:84:b1:ab:a0:58:a2:eb:35:9a:16:eb:
                    8a:fe:e6:53:e0:35:a7:a1:80:40:9e:a2:0e:8c:93:
                    c6:5d:d2:0c:63:98:64:96:3f:42:34:7c:c7:cb:65:
                    33:7a:cb:0e:34:2f:99:cd:fc:75:51:c0:d6:e4:f6:
                    7f:4d:98:b0:fc:2a:d3:ec:1a:4e:26:49:fb:2d:ef:
                    1d:4d:6f:b7:fc:6b:54:b2:59:90:39:32:c5:fd:24:
                    88:37:e6:87:c0:85:01:c5:bd:79:fb:5b:c5:7b:e5:
                    6e:57:12:4d:55:47:9f:c6:b2:d4:60:1d:2d:ef:a4:
                    f5:5c:2e:c6:9f:a5:1f:1a:94:c8:c7:1a:6f:80:7e:
                    4b:13:ac:b7:05:ae:4b:35:c8:f8:2d:c0:fe:a7:1d:
                    41:17:22:1c:fd:aa:0e:21:67:52:81:02:c5:cc:02:
                    1f:b7:ac:02:3d:6c:34:e1:45:eb:e7:85:f4:c9:50:
                    f3:24:b6:f3:c3:56:e9:11:e8:e2:a4:db:0c:8e:ad:
                    b3:45:bd:3a:dd:bb:28:3c:d1:c4:c4:94:f3:b1:42:
                    f9:0d:e3:af:2d:16:f8:01:73:4c:83:86:4a:81:37:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B4:BE:E1:61:9A:B1:8A:B3:AF:A1:BC:2B:4C:1B:2B:EA:4E:42:6D
            X509v3 Authority Key Identifier:
                keyid:BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:a0:55:e5:a5:a1:52:74:d9:a2:ab:5d:87:de:f6:ce:95:
         c6:8b:d2:36:fa:e3:9c:c5:80:c5:1d:da:38:e1:d6:fb:9e:6f:
         f2:9c:cd:57:3f:7e:ad:43:eb:c5:ea:e0:90:ca:35:cd:ce:49:
         b8:83:3b:05:30:59:ba:3d:46:50:4a:38:48:51:61:c0:0b:4a:
         ff:65:0e:6b:ee:32:e7:f1:fa:58:87:a3:3f:39:df:b4:9e:6b:
         b3:de:3f:72:d8:89:3a:37:cf:74:21:14:f0:82:23:3e:0f:1d:
         70:dc:39:3c:6a:61:8b:65:5b:21:52:a4:5a:d5:32:42:a6:54:
         30:86:ae:27:96:37:e5:89:a0:56:67:16:ff:35:d6:ad:4c:5b:
         98:7d:1b:0a:17:b5:52:59:a2:d4:9e:86:bc:f4:45:cc:45:4b:
         d8:c4:f2:28:35:29:7d:c3:ff:b6:41:79:b9:80:40:bf:c8:81:
         31:55:c1:33:a2:13:11:9a:93:77:f2:9c:4b:70:6b:95:e4:84:
         ed:7f:d7:d5:7d:87:1f:32:3e:17:80:ee:0e:f7:ad:2f:c7:db:
         c0:32:a5:c4:cf:58:db:e4:ac:32:7b:20:de:26:98:81:58:c2:
         68:c3:92:f3:57:dc:44:9f:c9:5f:b5:29:57:93:95:51:cb:3e:
         1a:ec:1e:b7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMa+3R/nG0t9Rppdfp2Q7mTZtHAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlE
M0EzQ0MyQjAeFw0yNjA3MjQwMTQ2MzRaFw0yNjA3MjUwMzU5MzRaMDMxMTAvBgNV
BAMTKDQ3QjRCRUUxNjE5QUIxOEFCM0FGQTFCQzJCNEMxQjJCRUE0RTQyNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsTlrZBeMc7tnNvgiQt0gnRX4j
b/GYX17zlfT/7SsFhO2EsaugWKLrNZoW64r+5lPgNaehgECeog6Mk8Zd0gxjmGSW
P0I0fMfLZTN6yw40L5nN/HVRwNbk9n9NmLD8KtPsGk4mSfst7x1Nb7f8a1SyWZA5
MsX9JIg35ofAhQHFvXn7W8V75W5XEk1VR5/GstRgHS3vpPVcLsafpR8alMjHGm+A
fksTrLcFrks1yPgtwP6nHUEXIhz9qg4hZ1KBAsXMAh+3rAI9bDThRevnhfTJUPMk
tvPDVukR6OKk2wyOrbNFvTrduyg80cTElPOxQvkN468tFvgBc0yDhkqBN4mpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUR7S+4WGasYqzr6G8K0wbK+pOQm0wHwYDVR0j
BBgwFoAUv2upsPI/j2modyjWdpxyadOjzCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGQ4Y2RmNWEtYjlhNy00NDY5LWE2NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBG
MjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlEM0EzQ0MyQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CRjZCQTlCMEYyM0Y4RjY5QTg3NzI4RDY3NjlDNzI2OUQzQTND
QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2
NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5Qzcy
NjlEM0EzQ0MyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABsYoFXlpaFSdNmiq12H3vbOlcaL0jb645zF
gMUd2jjh1vueb/KczVc/fq1D68Xq4JDKNc3OSbiDOwUwWbo9RlBKOEhRYcALSv9l
DmvuMufx+liHoz8537Sea7PeP3LYiTo3z3QhFPCCIz4PHXDcOTxqYYtlWyFSpFrV
MkKmVDCGrieWN+WJoFZnFv811q1MW5h9GwoXtVJZotSehrz0RcxFS9jE8ig1KX3D
/7ZBebmAQL/IgTFVwTOiExGak3fynEtwa5XkhO1/19V9hx8yPheA7g73rS/H28Ay
pcTPWNvkrDJ7IN4mmIFYwmjDkvNX3ESfyV+1KVeTlVHLPhrsHrc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:43 2026 by rpki-client