Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
File:                     ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft (raw, json)
Hash identifier:          P6pXHsfITj77AtVBM6vj2XKwoU8BdQ5FcwO16XL3neY=
Subject key identifier:   9F:9B:69:D8:38:15:51:92:85:AF:EB:BD:85:91:5B:80:62:BB:EF:D0
Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
Certificate issuer:       /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Certificate serial:       7A5FDEE9F68A8AED681C80809D1EED74235B170C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:15:31 +0000
Manifest this update:     Tue 12 May 2026 22:10:31 +0000
Manifest next update:     Wed 13 May 2026 22:18:31 +0000
Files and hashes:         1: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg=)
                          2: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0=)
                          3: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: 12cGaGOgBCZ2rP3AvRmGNqqU8d1JvTtobCIZ/qRPUPE=)
                          4: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: CVFptYCjc0BlHCccW2Xncqnkcsz2aSryEWVdhnNHxQY=)
                          5: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl (hash: whRXgNAmtCGEH4H1d4K2qY5H2Cj33UAVkuUhvo1UZrw=)
                          6: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: MI6jQTtOVHvsuWHm0uvBE0TFhtVi+xCMKjXMCSCBFDY=)
                          7: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
                          rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5f:de:e9:f6:8a:8a:ed:68:1c:80:80:9d:1e:ed:74:23:5b:17:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
        Validity
            Not Before: May 12 22:10:31 2026 GMT
            Not After : May 13 22:18:31 2026 GMT
        Subject: CN=9F9B69D83815519285AFEBBD85915B8062BBEFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:2c:25:e5:74:40:d8:b7:ed:f7:f8:f9:37:
                    12:49:4b:9f:43:a7:32:5f:80:53:d9:dd:18:55:9f:
                    32:97:7b:4c:1b:aa:92:9a:e4:2c:98:1c:30:3a:4d:
                    d6:a0:f7:3b:e4:70:46:0a:41:d9:d0:33:a4:c3:70:
                    95:7f:f6:42:72:bb:a4:27:2c:1f:e9:ab:90:d0:ff:
                    81:20:93:2e:f8:df:f8:23:15:b9:e0:25:a9:6a:ce:
                    e2:cd:52:9b:d5:7a:49:cf:76:8a:ca:9f:d8:ed:eb:
                    d6:58:02:b6:57:68:39:09:71:64:03:8d:9c:68:f3:
                    30:b7:ee:b2:66:b9:22:5f:a0:b5:62:68:84:cc:de:
                    d5:38:b9:df:b1:e2:59:82:7e:e5:c6:af:f0:4f:b0:
                    d9:2e:46:a7:6c:d5:1f:71:40:99:17:0c:93:4c:07:
                    f6:e7:1c:55:bd:ae:6a:94:d0:45:0e:85:5c:18:bd:
                    0f:02:db:23:8a:a0:e1:95:15:4a:c8:42:3d:a2:ce:
                    8e:c0:f6:9f:87:44:22:5f:c1:ea:b3:41:31:7d:8b:
                    1e:4f:6e:73:e5:c7:4a:18:5f:74:a2:a8:ba:73:c3:
                    9c:e6:10:c1:2c:ea:82:4d:dd:17:59:d6:d7:1e:c5:
                    8d:b8:c2:23:2e:f4:67:05:64:fd:51:3f:6a:8e:a4:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:69:D8:38:15:51:92:85:AF:EB:BD:85:91:5B:80:62:BB:EF:D0
            X509v3 Authority Key Identifier:
                keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:01:4f:67:07:7e:d3:46:c0:4e:03:6a:0b:5f:5f:bc:bd:
         ff:dd:f2:74:05:b8:e5:2d:cb:47:76:e3:d6:ff:69:74:75:b5:
         58:36:3f:0e:89:cd:f1:a8:3b:06:3d:40:7b:94:6e:75:3b:26:
         f3:9e:d0:be:70:59:cd:4f:1f:23:cc:09:cb:0d:42:50:86:0f:
         14:91:c4:e2:e6:02:1c:18:a7:a6:21:3c:58:9a:84:54:ab:bf:
         a5:38:7e:ba:71:8f:66:4b:12:d4:c8:fa:62:b3:ff:52:e1:33:
         d5:ae:c2:ea:14:c8:1b:31:15:6c:bc:fe:e0:9d:b1:86:f1:76:
         a5:91:7b:0e:3c:d8:a1:16:4f:a7:1e:b7:ea:c7:26:02:a6:cd:
         21:15:8f:26:f2:78:9d:80:b2:29:1d:82:11:ff:9f:cc:03:d0:
         66:db:cc:0f:d5:10:9d:fa:63:11:cd:87:4c:f0:da:fd:ae:1c:
         fb:a6:d4:15:d1:41:e1:1d:10:65:83:d2:b8:50:9a:d8:19:51:
         36:e0:2f:a7:c6:f8:5a:58:05:96:18:9c:c5:d6:d1:aa:90:2c:
         12:a1:1d:28:fe:0e:af:f9:d1:87:1a:b5:0c:92:a2:f6:6f:3c:
         f2:96:a4:31:d0:28:99:22:8b:b6:fe:3a:24:53:85:13:cc:ef:
         d7:16:e6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:51 2026 by rpki-client