Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
File:                     F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft (raw, json)
Hash identifier:          tm2P/4Mms1GDVQja21oqXcneKQ3lSS4vAmz2f9vXQIg=
Subject key identifier:   C4:91:38:44:A1:80:33:14:40:5C:A8:D5:BC:87:6A:E3:97:5A:69:F6
Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
Certificate issuer:       /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Certificate serial:       5FDCD7C0537E2DF6C0BBBE9A09D1A0DF264E9A59
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 18:03:04 +0000
Manifest this update:     Tue 12 May 2026 17:58:04 +0000
Manifest next update:     Wed 13 May 2026 20:06:04 +0000
Files and hashes:         1: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl (hash: xS/Bf7R34VSJdfnA6O+ARsiha7XS9HCFePw7B2D/fBI=)
                          2: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: DQ6rpEJu+zPKG4c6tffclYxCxiCj2KQBdnnwehsPRoM=)
                          3: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: PHP1IFXfqbi+BOlMH5y7xyleYHrhQYI+Lt+NZxh64LQ=)
                          4: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: 64HGWL2CzebN7GmYL8lPadZ2nwJ3zX055oQRPQondo0=)
                          5: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: c0E9xb18G6dDWSOYbp1L8pfGiJXjXDV9gaUGsFzHbYc=)
                          6: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: C2/pGzPkMt5Vzcyvrqnbj1Bb56h29NNTc3/kAwJYyFk=)
                          7: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: 5CWw2ztPAElFuqMvrZ+eExbk4B2mKb785wpbROO/cwI=)
                          8: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: rEzu4P6oExwIZaANS5DV2R8BJmVkjCXI7g7sPguv5ho=)
                          9: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: JVzJjBAyxQLaPhKhqz1LXrJdrQUjLBthYVZyc/xVxg0=)
                          10: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: RCVkQO3x+P4RF48TeYaUmpS+R/Zp+Q7sEuYMIANrgmM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
                          rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dc:d7:c0:53:7e:2d:f6:c0:bb:be:9a:09:d1:a0:df:26:4e:9a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
        Validity
            Not Before: May 12 17:58:04 2026 GMT
            Not After : May 13 20:06:04 2026 GMT
        Subject: CN=C4913844A1803314405CA8D5BC876AE3975A69F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:95:50:b5:5e:95:e3:c0:fe:dd:5a:66:0d:
                    37:02:5e:f2:4c:65:23:ed:57:ea:b7:d7:46:92:72:
                    a7:a6:13:be:79:56:f3:d2:72:e2:f6:c7:90:a1:14:
                    bb:c2:6b:72:f8:d1:c6:d1:c2:ec:35:60:11:bf:92:
                    63:4b:dc:c9:d8:e0:91:2c:63:fa:ed:8c:7b:b6:f9:
                    04:6f:5e:f3:c0:65:f8:0e:c4:99:b3:3f:ec:9e:97:
                    a5:32:97:ed:6f:93:ee:18:0b:bb:fa:35:2a:1e:f4:
                    1b:f8:c5:c0:4e:25:03:67:ba:0f:b3:1e:8f:87:92:
                    d4:51:71:87:38:5d:eb:14:52:19:77:9f:68:f7:6a:
                    fe:ee:c3:91:76:d4:78:e9:98:04:63:d7:f4:19:29:
                    8e:31:fc:9a:2c:a5:90:8f:2e:20:d4:df:59:16:92:
                    b4:d2:12:9d:19:74:b0:c4:39:3f:ff:5f:e5:62:99:
                    a9:9b:ba:fa:8f:a8:15:53:7b:90:9c:6e:8e:6e:d4:
                    35:b7:83:e7:67:cb:1b:d8:48:7c:5e:6c:49:cc:37:
                    1a:04:04:9c:0d:c5:2d:ea:37:fd:2c:af:c9:fa:cc:
                    35:16:48:d1:4a:d9:c5:86:67:f3:f3:b7:c5:1d:84:
                    85:2a:95:d1:c1:b7:0a:5d:0b:12:2e:72:50:7c:ff:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:91:38:44:A1:80:33:14:40:5C:A8:D5:BC:87:6A:E3:97:5A:69:F6
            X509v3 Authority Key Identifier:
                keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:2a:bc:a0:5c:d8:ed:2f:81:7a:e0:06:c6:0d:4e:f3:d5:
         7b:36:1d:ae:cb:8c:c7:43:75:16:79:a5:fe:31:70:d0:26:05:
         39:7d:84:c5:97:67:07:9f:d5:c4:ed:2f:47:e9:a7:c0:9a:c7:
         f7:28:a6:f4:12:32:10:31:3e:33:f4:08:d0:b0:f5:d3:1a:f5:
         e1:9d:8f:a0:e3:8f:e9:bf:12:ec:84:34:87:1d:a7:75:01:ec:
         fa:90:69:d2:f0:76:ed:7e:11:b7:f5:92:50:c2:ec:2a:66:56:
         40:e7:aa:9a:d8:25:6d:f4:1b:1f:a4:4b:88:24:76:53:91:13:
         7f:e1:c4:0e:68:e1:8d:47:3b:27:6f:8d:aa:cc:b5:82:f6:46:
         61:9d:d1:b4:c9:b5:80:d0:94:ee:fa:d9:25:74:f6:8d:9a:4f:
         d5:7f:97:18:c3:9d:9a:c9:0a:9f:42:de:fd:fb:fd:72:b5:4b:
         63:1c:8b:df:0d:cc:31:0a:53:9f:4c:56:78:6f:ec:9e:e0:1e:
         a6:28:21:f7:81:a7:61:d0:f5:49:30:6b:8a:25:92:42:72:a9:
         7c:38:ba:94:67:6e:72:f4:ef:6d:61:b0:f4:51:e8:f8:94:1e:
         10:f0:4b:df:7b:94:6d:96:0f:6e:71:51:20:3a:7e:22:8e:80:
         f8:7e:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:19 2026 by rpki-client