Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft
File:                     FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft (raw, json)
Hash identifier:          2gZWbgHWG8wEUV5jLt2wGHyqm9SxNAnKcxkdGPqx2Ac=
Subject key identifier:   62:F4:33:1A:68:77:EE:47:88:89:35:02:6F:EA:A7:18:BE:44:34:F1
Authority key identifier: FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6
Certificate issuer:       /CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6
Certificate serial:       70C02392D8FD8319E1007F3543BB9E1D45793C1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 21:08:35 +0000
Manifest this update:     Tue 12 May 2026 21:03:35 +0000
Manifest next update:     Thu 14 May 2026 00:37:35 +0000
Files and hashes:         1: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: e5rLZ+uiB21yOgfSRe83jWI/e3SG0saFimxCgcV74b8=)
                          2: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl (hash: WjfIRo63PQ0sgzgJZmAIsjhlLO1DH/3kjCepzwGbFA8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl
                          rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c0:23:92:d8:fd:83:19:e1:00:7f:35:43:bb:9e:1d:45:79:3c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6
        Validity
            Not Before: May 12 21:03:35 2026 GMT
            Not After : May 14 00:37:35 2026 GMT
        Subject: CN=62F4331A6877EE47888935026FEAA718BE4434F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:40:6e:83:2e:89:28:97:d3:c3:28:71:2e:
                    f8:7b:3d:fd:e2:03:2e:0d:42:8c:53:86:ff:7e:74:
                    6a:b6:23:10:62:73:2a:5a:e5:8f:26:71:20:d8:61:
                    73:06:d0:e5:a2:ef:6e:9d:dd:93:25:02:37:2d:68:
                    03:ac:30:23:ae:d5:8b:05:31:a3:3b:af:c9:4f:36:
                    e9:8c:9b:a2:e2:81:3a:ba:9d:62:af:10:88:1a:e5:
                    77:9c:a0:ad:2b:34:c1:c0:c9:15:a5:f8:e5:2c:82:
                    a6:74:5d:07:b3:d9:96:ab:f4:cb:1b:91:8d:be:10:
                    e8:43:a6:88:79:f1:1a:af:d9:e4:92:95:3b:07:e4:
                    a3:4f:43:b0:03:2f:ea:bc:d4:86:48:8a:0c:79:cb:
                    e1:c0:0b:4a:26:9f:54:60:44:71:cb:23:fe:c2:2f:
                    09:f2:6b:c9:1d:85:12:f2:42:a9:26:56:fc:9d:21:
                    1d:88:20:1b:a4:b9:a5:48:a2:72:21:a4:b6:e4:02:
                    48:56:39:8b:4b:89:a9:2b:dd:fd:20:a7:83:2f:88:
                    a9:60:ed:48:04:38:60:b4:90:9f:82:28:5d:71:02:
                    2c:af:bc:c4:1b:ca:54:3a:03:c2:ba:14:17:b2:5d:
                    de:df:d7:db:db:35:a9:d7:eb:74:7a:79:89:d0:c0:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:33:1A:68:77:EE:47:88:89:35:02:6F:EA:A7:18:BE:44:34:F1
            X509v3 Authority Key Identifier:
                keyid:FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:ef:ed:8f:fd:55:a1:ad:2e:83:ed:bc:c5:6c:72:55:aa:
         8f:27:8c:a2:61:ac:ad:30:36:23:fe:f4:35:6d:5d:f7:20:e5:
         d4:42:e7:21:f7:65:3d:42:2b:90:5d:44:55:50:99:d7:b5:a3:
         59:15:aa:a7:04:5d:b9:c6:e6:59:c2:28:55:d9:34:62:d8:d0:
         af:b1:a8:98:99:83:ab:5e:65:65:d1:42:c2:44:53:8a:ac:d6:
         9b:1c:ee:93:c8:8b:eb:cf:6f:97:a8:a1:4f:40:d4:2e:8a:54:
         d9:a3:47:28:81:cb:69:a1:d7:8e:2e:d4:b2:3d:96:5d:c4:2a:
         eb:17:59:77:ee:65:e2:3c:6b:bb:40:88:04:9a:d3:77:30:80:
         92:03:86:c4:d1:ce:d3:32:08:25:f1:01:95:f5:fd:80:9c:60:
         9b:d3:ec:e2:c6:b0:1e:d6:78:90:21:c3:41:78:f4:00:a5:d3:
         45:a0:04:d5:9b:60:e2:84:80:d8:8b:87:2b:1d:51:a1:e9:fb:
         85:8f:b7:4f:4f:dc:04:e0:e0:67:99:21:9f:05:e9:af:d4:80:
         ce:b1:8e:55:a0:1f:8f:82:a8:d6:f3:68:8e:59:01:1e:43:04:
         a5:79:4a:96:5b:5a:7d:0a:6f:9f:48:e7:24:7f:c3:f6:c1:41:
         2a:98:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:48 2026 by rpki-client