Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
File:                     B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft (raw, json)
Hash identifier:          Iyohj/sf6f3XLYWV8gbyuLRqcoDLk9O3Z8trEEYNnpA=
Subject key identifier:   B4:0C:75:C5:DE:70:E0:3F:17:AD:EA:CC:01:8F:1E:FD:9E:09:F8:F6
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       04F6B38A7A7CB473A64663EC4E8D90E8A6D06034
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 18:13:23 +0000
Manifest this update:     Tue 12 May 2026 18:08:23 +0000
Manifest next update:     Wed 13 May 2026 21:32:23 +0000
Files and hashes:         1: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (hash: xLR88IyMVCA8vdgyK8OQ+LkpI8JImP1CEA8k4aA9Syk=)
                          2: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8=)
                          3: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: ofLAcZqnlKOmXqsmeIfCr72lWZy9ZeTWZkof0/9RVb8=)
                          4: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=)
                          5: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl (hash: DeoPJaEFALWsPfpnCPmPHsWN399NcHfCajWVMYaIPSk=)
                          6: 3130332e31362e3133392e302f32342d3234203d3e20313338303737.roa (hash: fb0u8nL2mSZSjhRNXrQKe5m4wVsqo96iE9FDTVCkkuc=)
                          7: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=)
                          8: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=)
                          9: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: sbLJ41IDFdN5IJsomNQRipWLxXGCHRyqteaWEwRsz7Q=)
                          10: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: Xej95JrdMsifVKYujoAl0DIGRkayLR1TXbEVcv1ObYw=)
                          11: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=)
                          12: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=)
                          13: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: rQv5s8+gPpGYB/vGkK0E1KzGoHeIzauVQLPwV+zcAQU=)
                          14: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=)
                          15: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: tjiI+qv5K6jVgsJD0bWk0XAJK3Ch0HFCGyxU2fDhIKk=)
                          16: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: IexADjY/vH+ci1AK/jeAttZdrOIQ48kpykD2boWk1lE=)
                          17: 3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (hash: gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=)
                          18: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f6:b3:8a:7a:7c:b4:73:a6:46:63:ec:4e:8d:90:e8:a6:d0:60:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: May 12 18:08:23 2026 GMT
            Not After : May 13 21:32:23 2026 GMT
        Subject: CN=B40C75C5DE70E03F17ADEACC018F1EFD9E09F8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:87:ab:d1:91:30:04:9a:d5:6c:f2:c2:1e:
                    92:46:0d:c2:c2:4e:92:a5:9c:10:0a:de:6e:2a:dd:
                    d9:b4:13:6f:9f:1f:f2:82:c8:12:b8:15:c5:f1:e0:
                    c1:57:4d:81:1c:54:3d:d2:89:fd:7b:14:65:07:56:
                    33:52:51:af:4d:f5:7b:19:ea:18:98:55:67:6d:29:
                    1f:d0:6e:19:ab:d2:02:16:41:e6:9d:17:5c:05:5f:
                    56:3d:70:c3:67:6e:35:29:1b:5f:41:ba:3c:c2:fa:
                    aa:28:29:5b:7c:a7:1b:46:09:c0:23:b7:9b:5f:36:
                    05:e7:54:dd:52:9b:e9:18:11:1c:8e:fb:56:e1:f4:
                    29:82:3b:73:7a:df:ed:25:af:97:98:24:a7:71:ec:
                    40:97:b2:1b:31:fd:44:df:67:9d:d5:6f:14:b5:88:
                    54:85:0d:7a:0f:25:a9:56:ad:07:c5:71:13:02:51:
                    8f:df:9b:37:07:4a:03:85:a0:07:e9:9e:4a:02:2d:
                    cd:50:bc:88:f9:97:9c:0b:91:f0:d3:cd:09:2b:4c:
                    dc:7e:0f:2d:b9:80:d0:bb:41:f7:5c:b4:e6:c0:0b:
                    3e:00:f9:72:65:57:82:7b:2f:bf:7e:b6:3b:4f:ab:
                    ce:ff:ea:d3:86:d1:67:be:21:2f:cb:14:9b:df:7d:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0C:75:C5:DE:70:E0:3F:17:AD:EA:CC:01:8F:1E:FD:9E:09:F8:F6
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:38:56:0f:be:cc:c7:63:1c:74:96:b3:8c:72:b5:39:ea:0f:
         98:c8:cf:b7:d4:8a:47:5c:33:37:09:b5:f5:7b:e2:c1:2c:bd:
         ff:f5:0a:d4:3d:d1:b1:db:47:76:0f:63:b7:cc:3a:e1:85:af:
         e2:27:d2:39:47:8d:d2:0c:02:1f:b2:99:11:6e:07:2b:9a:34:
         d0:3d:a5:d6:82:ea:f8:7f:f2:45:c5:7f:9a:92:11:ce:e6:cc:
         00:1c:6d:54:05:49:6d:cb:c9:e6:b6:9e:a4:40:bb:eb:ba:90:
         32:32:2f:b5:6c:23:80:cc:fa:fa:9d:e6:14:fe:c4:fa:4b:40:
         cc:17:51:26:70:e3:14:11:f0:bf:7a:79:e8:7f:b2:7a:85:68:
         8c:7a:fc:3e:b7:d4:e6:83:45:6f:7b:8c:ce:e5:72:31:e5:6c:
         bf:38:a4:11:ef:3c:17:f9:9d:94:dc:15:a7:0d:87:72:fd:d4:
         78:f9:84:0d:67:e4:26:62:5b:4f:19:af:ef:b7:c8:93:8c:67:
         5e:ac:58:f3:75:23:02:d5:79:71:ef:4e:84:39:72:64:ac:ae:
         47:00:f6:c8:96:0f:2d:32:30:f0:a1:81:5e:46:80:3c:f6:99:
         2b:7d:df:8d:00:95:cf:5e:7c:b5:fe:6c:18:2d:a9:3f:05:85:
         9f:c7:3c:85
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBPazinp8tHOmRmPsTo2Q6KbQYDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg3QUM1QzEwNEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMz
NkM3NkUzMjAeFw0yNjA1MTIxODA4MjNaFw0yNjA1MTMyMTMyMjNaMDMxMTAvBgNV
BAMTKEI0MEM3NUM1REU3MEUwM0YxN0FERUFDQzAxOEYxRUZEOUUwOUY4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxl4er0ZEwBJrVbPLCHpJGDcLC
TpKlnBAK3m4q3dm0E2+fH/KCyBK4FcXx4MFXTYEcVD3Sif17FGUHVjNSUa9N9XsZ
6hiYVWdtKR/Qbhmr0gIWQeadF1wFX1Y9cMNnbjUpG19BujzC+qooKVt8pxtGCcAj
t5tfNgXnVN1Sm+kYERyO+1bh9CmCO3N63+0lr5eYJKdx7ECXshsx/UTfZ53VbxS1
iFSFDXoPJalWrQfFcRMCUY/fmzcHSgOFoAfpnkoCLc1QvIj5l5wLkfDTzQkrTNx+
Dy25gNC7QfdctObACz4A+XJlV4J7L79+tjtPq87/6tOG0We+IS/LFJvffUzxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtAx1xd5w4D8XrerMAY8e/Z4J+PYwHwYDVR0j
BBgwFoAUuHrFwQTVGhbR/taqukDV8zbHbjIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmQ1YzQ3MTUtMjgyZS00NTdmLWI4OWUtMDQxYmY5MTEwYWY4LzAvQjg3QUM1QzEw
NEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMzNkM3NkUzMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CODdBQzVDMTA0RDUxQTE2RDFGRUQ2QUFCQTQwRDVGMzM2Qzc2
RTMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ1YzQ3MTUtMjgyZS00NTdmLWI4
OWUtMDQxYmY5MTEwYWY4LzAvQjg3QUM1QzEwNEQ1MUExNkQxRkVENkFBQkE0MEQ1
RjMzNkM3NkUzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEQ4Vg++zMdjHHSWs4xytTnqD5jIz7fUikdc
MzcJtfV74sEsvf/1CtQ90bHbR3YPY7fMOuGFr+In0jlHjdIMAh+ymRFuByuaNNA9
pdaC6vh/8kXFf5qSEc7mzAAcbVQFSW3Lyea2nqRAu+u6kDIyL7VsI4DM+vqd5hT+
xPpLQMwXUSZw4xQR8L96eeh/snqFaIx6/D631OaDRW97jM7lcjHlbL84pBHvPBf5
nZTcFacNh3L91Hj5hA1n5CZiW08Zr++3yJOMZ16sWPN1IwLVeXHvToQ5cmSsrkcA
9siWDy0yMPChgV5GgDz2mSt9340Alc9efLX+bBgtqT8FhZ/HPIU=
-----END CERTIFICATE-----
Generated at Wed May 13 05:47:22 2026 by rpki-client