Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
File:                     B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft (raw, json)
Hash identifier:          Ia3JFBhAR0PeMKMt4ySJYFCMswyqSDrAwGBACcO2IEs=
Subject key identifier:   0B:B3:F5:EF:38:E8:35:80:B1:9C:6A:82:A7:D2:AB:32:D7:8B:8D:7C
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       6D00FB0EBFC604129FB1CD63906111E969395A1F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
Manifest number:          6F
Signing time:             Thu 23 Jul 2026 19:59:32 +0000
Manifest this update:     Thu 23 Jul 2026 19:54:32 +0000
Manifest next update:     Fri 24 Jul 2026 20:57:32 +0000
Files and hashes:         1: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=)
                          2: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (hash: xLR88IyMVCA8vdgyK8OQ+LkpI8JImP1CEA8k4aA9Syk=)
                          3: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: tjiI+qv5K6jVgsJD0bWk0XAJK3Ch0HFCGyxU2fDhIKk=)
                          4: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=)
                          5: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: rQv5s8+gPpGYB/vGkK0E1KzGoHeIzauVQLPwV+zcAQU=)
                          6: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: Xej95JrdMsifVKYujoAl0DIGRkayLR1TXbEVcv1ObYw=)
                          7: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl (hash: PBUx2bIEY7YO2f1tGPDcFfBFIAXN988tZLgPSLVQ6Zc=)
                          8: 3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (hash: gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=)
                          9: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg=)
                          10: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8=)
                          11: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=)
                          12: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: sbLJ41IDFdN5IJsomNQRipWLxXGCHRyqteaWEwRsz7Q=)
                          13: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=)
                          14: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=)
                          15: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: IexADjY/vH+ci1AK/jeAttZdrOIQ48kpykD2boWk1lE=)
                          16: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: ofLAcZqnlKOmXqsmeIfCr72lWZy9ZeTWZkof0/9RVb8=)
                          17: 3130332e31362e3133392e302f32342d3234203d3e20313338303737.roa (hash: fb0u8nL2mSZSjhRNXrQKe5m4wVsqo96iE9FDTVCkkuc=)
                          18: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:00:fb:0e:bf:c6:04:12:9f:b1:cd:63:90:61:11:e9:69:39:5a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: Jul 23 19:54:32 2026 GMT
            Not After : Jul 24 20:57:32 2026 GMT
        Subject: CN=0BB3F5EF38E83580B19C6A82A7D2AB32D78B8D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:c9:ef:ec:55:ff:f3:44:82:9d:33:93:18:
                    3d:b0:39:9e:1d:f0:7a:7a:78:47:26:7f:0a:4a:b9:
                    a4:aa:79:ba:78:18:25:11:67:c5:51:af:37:2f:63:
                    aa:f7:8d:2c:a3:60:ef:d7:10:ca:18:c4:b9:73:33:
                    5e:09:e7:e0:a6:70:4a:ac:7d:b9:bf:bc:5e:91:be:
                    5b:98:88:35:b1:53:bc:35:eb:a1:2b:c2:19:25:4c:
                    c0:2f:e7:d8:eb:c2:c4:08:fc:49:7a:e5:4b:61:0e:
                    c3:42:8f:a2:01:aa:11:3b:63:06:f3:c7:7c:2c:b3:
                    e4:d7:e1:1f:4a:f6:8e:53:57:78:b8:3c:2d:58:e5:
                    81:3d:60:3b:6e:4c:e3:9f:3c:a0:b8:23:00:1d:10:
                    cb:17:3d:20:97:19:25:47:36:54:03:ea:ef:fc:6d:
                    79:46:81:6e:e0:fb:cc:46:cb:64:4b:ba:c7:a8:47:
                    09:fc:1d:85:4a:73:c5:45:91:b0:09:b6:3e:d4:a8:
                    72:1b:f7:2c:cf:34:29:95:35:36:5c:9f:53:4c:e2:
                    99:20:0b:b8:7d:62:74:76:92:ec:9b:79:27:3c:42:
                    f7:5c:13:5b:ba:ba:a6:6f:38:32:fe:1c:f9:b2:b0:
                    63:77:e5:3b:45:41:53:22:27:7a:01:26:f9:b7:e4:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B3:F5:EF:38:E8:35:80:B1:9C:6A:82:A7:D2:AB:32:D7:8B:8D:7C
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4c:d9:54:10:bc:c8:35:32:68:b4:11:68:9b:eb:14:0e:dc:
         d9:d4:1f:d4:cd:5f:b0:4d:69:d0:2d:e4:e3:c4:09:8f:68:fa:
         b6:f5:f2:f8:4c:2e:32:89:a4:84:d6:fd:90:cd:65:91:e9:dc:
         65:55:f1:2b:5b:dd:fb:64:0c:2b:f2:cf:bf:9a:a5:9e:31:9a:
         c7:ef:51:83:84:4a:53:5c:34:64:80:2e:b3:96:c5:f0:82:2d:
         e1:6f:6f:30:b7:b0:ec:d8:c1:44:2c:b2:db:16:2e:8d:32:5c:
         b8:e3:7f:11:95:cc:02:0f:74:e9:7b:89:7c:6a:87:13:24:ff:
         76:76:ca:7c:42:04:b6:13:b7:f1:8f:00:90:f4:7a:18:80:5d:
         ad:2f:13:30:50:7d:c7:7b:de:1b:48:5b:3c:06:69:bc:46:31:
         aa:bf:76:7a:b8:44:30:de:06:f5:e2:0c:71:64:53:19:96:db:
         43:38:ff:69:6d:6a:fd:ca:b3:53:d7:d0:d6:7f:f7:91:08:c2:
         12:54:5f:7c:ea:36:b4:28:f6:44:46:9e:7e:4c:71:ca:0d:dc:
         eb:b2:bb:44:81:75:17:73:de:5d:48:94:92:61:c6:c3:53:38:
         14:91:91:40:f2:0b:c9:cc:f3:d5:82:7a:b9:a4:54:f9:9a:34:
         02:39:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:25 2026 by rpki-client