Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
File:                     F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft (raw, json)
Hash identifier:          KTW144/JVbYLJrS7GPpsV2qCVaIDHhSetetVIkWxm1E=
Subject key identifier:   53:DF:4D:D4:47:40:45:37:9A:C8:EB:44:EB:76:30:0C:62:DE:95:27
Authority key identifier: F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C
Certificate issuer:       /CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C
Certificate serial:       2F845B1C2B23BC8766645A7A9CA1257BAA2067BF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 19:56:25 +0000
Manifest this update:     Tue 12 May 2026 19:51:25 +0000
Manifest next update:     Wed 13 May 2026 21:13:25 +0000
Files and hashes:         1: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: X3tra53AFKAkL1Puu4ERpsixqEIRbM+P2BtQPxdqKUw=)
                          2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: rJ/og/iKUK3xac6RdgdlO70UvsZ6axJQZfH2pg1L5Gs=)
                          3: F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl (hash: gb6rspESM+qy6vUeuVdeDWK7sKRclJMMtbHnsMv/FoY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl
                          rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:84:5b:1c:2b:23:bc:87:66:64:5a:7a:9c:a1:25:7b:aa:20:67:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C
        Validity
            Not Before: May 12 19:51:25 2026 GMT
            Not After : May 13 21:13:25 2026 GMT
        Subject: CN=53DF4DD4474045379AC8EB44EB76300C62DE9527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:17:d1:00:06:9f:8e:ea:78:99:fb:7a:61:
                    4d:fb:cb:2c:7a:ff:a0:c2:22:0a:78:b9:0d:60:49:
                    f1:04:15:8b:9a:75:7c:5d:06:05:e9:ee:54:60:66:
                    9e:12:5e:1f:64:c3:05:50:be:0d:25:67:f8:41:18:
                    e6:8a:ee:37:99:ee:de:de:db:00:a5:7c:22:0a:d8:
                    80:79:14:25:46:1c:ca:b9:56:1d:de:88:98:a0:c9:
                    2d:02:6b:5d:a0:0b:37:c6:a0:16:ef:67:34:f1:2a:
                    d2:98:9c:53:17:23:b2:5f:f5:9c:bd:24:c6:77:1c:
                    3e:7e:75:a3:32:0a:74:7e:f3:be:b3:53:9a:80:fc:
                    ae:2b:e9:e2:58:56:eb:01:09:e4:b5:96:9a:a3:34:
                    01:89:7e:b7:00:34:38:3b:ad:35:27:21:ef:95:f1:
                    95:b3:45:1e:6a:79:ac:1a:a7:72:b1:10:f7:39:ec:
                    69:1b:6b:a0:dd:af:b4:0d:a0:95:86:ee:7d:68:84:
                    fd:c8:0d:d2:6e:67:38:12:75:cb:3c:52:78:ef:d9:
                    c3:cd:0a:32:7e:ae:ee:e7:a1:48:a5:d5:e5:3b:51:
                    eb:ec:e4:46:7a:62:2f:bf:a0:30:35:bc:7f:43:af:
                    f7:2a:6b:bc:30:33:27:c1:6b:fc:2e:98:da:fb:f8:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DF:4D:D4:47:40:45:37:9A:C8:EB:44:EB:76:30:0C:62:DE:95:27
            X509v3 Authority Key Identifier:
                keyid:F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:bb:bc:bd:01:31:c1:7c:9a:e7:df:74:dc:2a:c3:04:91:0c:
         f7:3a:43:3d:bc:d9:34:97:1e:bd:d2:85:26:bb:37:68:b6:a5:
         f5:3d:39:b8:7a:91:3c:c6:4f:89:81:f3:06:65:4b:5a:2e:b3:
         2e:f9:aa:98:7b:df:f9:6d:f9:84:3f:09:36:2e:38:0a:bb:91:
         bd:1a:b3:a1:48:d2:dc:a2:89:34:ba:30:f6:e7:d8:fd:95:f5:
         da:c2:6d:9a:ff:32:ea:8f:9d:52:c6:03:03:42:63:9a:f3:3b:
         0e:17:2d:40:d7:a2:60:fe:06:5b:27:86:b0:a8:29:76:e9:79:
         3a:ba:2f:51:4d:74:5f:cd:97:af:d5:32:78:66:43:28:f0:d1:
         00:21:7e:c0:ab:a8:77:9a:78:24:c6:ae:93:98:81:37:be:ab:
         7b:1a:95:ad:8d:31:14:2b:c9:03:d2:6f:0f:12:43:45:fd:90:
         7e:5c:f7:42:09:aa:b6:83:9e:d7:1a:d2:b8:7d:95:82:19:55:
         5b:c5:29:94:ac:46:d0:62:8e:94:e0:e8:51:bb:10:72:c4:73:
         eb:07:dd:85:e0:78:1c:da:b1:4d:79:15:be:ea:2c:0a:bc:3a:
         22:1b:71:7a:20:10:76:26:6e:85:d5:d6:8f:77:e3:f4:07:06:
         80:58:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:25 2026 by rpki-client