Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
File:                     BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft (raw, json)
Hash identifier:          iAEUTbuAEn6ONnUqGH9Bx4WFcpnMTIRd1G2gDURI8yE=
Subject key identifier:   9D:41:1B:F6:A3:B1:4D:F1:46:51:3B:AC:BA:25:09:E7:71:98:91:01
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       161987823FE29CCD7E59FC024DDB04F0B7650728
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 09:00:26 +0000
Manifest this update:     Tue 12 May 2026 08:55:26 +0000
Manifest next update:     Wed 13 May 2026 09:44:26 +0000
Files and hashes:         1: 3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (hash: GF5sw5TIyMg/HEZpyvFvO1rBAEJgs3CpQYQY8RN9uRY=)
                          2: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (hash: W4Y/Jl2Uo2TA6PRaW+Lr7qZLcsDrqBIfU1uczmpPuG4=)
                          3: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (hash: 3tV7ePWEh+EaJKm0cDZuNy9PmGNGDZkDyBgahcmdLds=)
                          4: 323430323a656538303a643a3a2f34382d3438203d3e20313332363437.roa (hash: Sm4mr8PZqNPV9oAJvZYba4Nbo01h5qyGSwF7hDwYhaE=)
                          5: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (hash: Q3RsZBk5q9tyrBDMlbDRl2T3DfnBOVkpF/7xiffBucI=)
                          6: 3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (hash: H4QyDpAYJgb2cSZHnPV/4PL7jlc0wOLp4dMIreHw0fQ=)
                          7: 323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (hash: d2p1pz6iSVKmhRvc7KcXU5ZyLMfCL4gLganI40S2YnI=)
                          8: 323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (hash: PfU7mv6IN/K07oNWG+0wCm4fLi1KFnoKFqJbJk9QcX4=)
                          9: 34352e3132362e35382e302f32342d3234203d3e20313332363437.roa (hash: 22qOI7kA6d3/l7AQiyRyGMcKna9TfZu2inXLqY/VILw=)
                          10: 323430323a656538303a35383a3a2f34382d3438203d3e20313332363437.roa (hash: e+Gw3YTY2+X+FfuH6e/RIS9HElWcKHLwAE2PQqgXfvw=)
                          11: 3130332e31392e3137362e302f32322d3234203d3e20313332363437.roa (hash: u6hQoPKoHiVtYDbwuT9Uz8f5A+6L4NtjJ2yTHSMpD0s=)
                          12: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (hash: atskKnHk5T0oqegQKA+HINuV5pfMQiIduF8R7Q4ZG+c=)
                          13: 34352e3132362e35362e302f32342d3234203d3e20313332363437.roa (hash: 51eavTWPFrNxa8bjSHcdJ8vtzC1mzLQPZlm9M3COLDU=)
                          14: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (hash: 8tz20JsrCmWJ12URHbvfs5cYxrQj1byexdS6hWPseS4=)
                          15: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (hash: fBsZSMatjucO+T7+pnQaQszpCsK34WTaNL1x8+auaVA=)
                          16: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (hash: elFR1hwQeXN8BTtaNU77MnFeZSQYNz4QlrPnRy3FSWk=)
                          17: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (hash: /o29HECkwJutgVmG0I5lSxBVN20fSE9q8Dt9mr1Ct3U=)
                          18: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (hash: qArl8RBpNQGv7NW/pHMi5u7s8FPFuQtE+K0tYbKrjHU=)
                          19: 34352e3132362e35362e302f32332d3234203d3e20313332363437.roa (hash: BC4anIQ+a9WUEuTcYN68YGrrV6yunSX3tOj+gke3HOM=)
                          20: 3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (hash: Tm/UNBU0RZeScJfXS8SuxK9KL1FxgoN/n8Ti+/I4iaM=)
                          21: 3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (hash: AWDTDU1uK2yBZAsT7txzvxIXXk3Q8Vz2Xvi0KaFLsOk=)
                          22: 3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (hash: SrggenrhOddxkHmFx2q+pbw4/0dGiORptPNzRQuuHtg=)
                          23: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (hash: c/+B9i/CScu7h8jGuv1JRMe6ArsSJVjID5tIfBJTEZE=)
                          24: BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl (hash: ASsusrsUwWTyv4oVNKsbdkLWw6GfsEZvsMN2RyGyCys=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:19:87:82:3f:e2:9c:cd:7e:59:fc:02:4d:db:04:f0:b7:65:07:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: May 12 08:55:26 2026 GMT
            Not After : May 13 09:44:26 2026 GMT
        Subject: CN=9D411BF6A3B14DF146513BACBA2509E771989101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b9:79:fe:64:56:e9:72:a7:4b:fd:19:ac:17:
                    77:78:15:12:48:db:b1:56:72:ab:46:a8:fe:ea:0d:
                    24:98:ac:b4:5f:2f:fa:1a:54:e2:15:02:fc:97:36:
                    74:c2:94:52:5b:19:de:e8:45:8e:72:6d:2a:4c:50:
                    43:86:89:b5:d1:0c:1b:0e:c2:28:72:74:9c:27:74:
                    9a:ef:2d:cb:73:96:df:ef:cb:02:b2:a7:f4:94:68:
                    57:fa:80:c1:e4:ae:a7:b4:54:a8:99:99:61:ae:69:
                    09:d7:78:a8:7e:66:18:12:11:97:eb:35:76:49:ea:
                    05:f1:9d:77:4f:e9:ab:37:85:37:e4:bb:cb:65:d7:
                    46:72:b3:b1:ad:9f:be:cf:9a:0b:57:20:cf:ed:93:
                    28:28:9d:fc:b3:c6:39:35:6a:39:12:1b:07:7d:eb:
                    1c:8f:6a:ab:68:de:f2:60:02:bf:03:b7:6f:55:c9:
                    7a:de:bb:b5:b8:d2:7a:8a:9b:11:e3:76:02:52:38:
                    36:9d:e7:c4:94:63:58:d1:92:cd:2d:7b:2a:12:36:
                    da:3e:a5:8a:b2:75:1a:cd:74:ec:61:9b:5c:63:52:
                    d5:6c:71:f4:aa:68:44:b0:b7:ba:64:7f:b1:3c:35:
                    b4:d6:5b:d7:c4:13:f1:8a:60:6b:83:9f:ee:12:db:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:41:1B:F6:A3:B1:4D:F1:46:51:3B:AC:BA:25:09:E7:71:98:91:01
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:f5:76:43:be:ee:75:a2:41:ec:63:7d:1e:44:e0:52:f7:
         ab:cb:36:fc:4b:96:58:f9:70:0d:fe:25:d6:f9:33:6a:cc:f7:
         ed:ad:5f:bf:60:9b:1a:55:01:4d:91:21:cd:52:fc:33:79:6b:
         42:ad:7f:5c:c8:e7:b4:85:76:1a:a3:7f:6e:7b:08:0e:16:c0:
         54:00:40:2f:e4:03:8c:dc:51:19:cc:c3:e6:bd:c8:8a:d8:de:
         0d:7c:1a:d8:4c:1b:75:7d:09:b4:00:27:d2:01:30:3a:02:fa:
         f3:1b:34:c1:8b:72:71:ef:21:d0:79:b5:6d:77:ed:5a:b9:c1:
         73:22:8a:df:32:4e:c3:45:2c:59:c2:66:fc:3b:5c:b7:15:70:
         aa:05:89:ee:39:c5:61:cc:27:44:1e:ba:67:3f:b0:c5:4b:2e:
         18:95:29:dc:a8:90:39:aa:18:3b:9b:93:fe:be:53:4b:f5:5e:
         f7:07:64:41:fd:1c:d9:af:96:79:2f:83:b7:51:cb:07:76:5c:
         c6:b5:c6:bd:03:10:76:f4:af:56:38:13:2b:f7:5b:7f:dd:93:
         ed:7f:99:16:da:05:07:dd:7f:06:8e:45:8c:b4:8e:58:4e:f7:
         15:9c:b0:7e:a1:92:b7:c2:85:50:5d:2d:64:b0:35:95:7e:7e:
         b1:a8:85:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:19 2026 by rpki-client