Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
File:                     5935015AB8D2AA07565ACB7B918A50D49090AA26.mft (raw, json)
Hash identifier:          7MWcjrh6SY1/JQ7HSeIEuxkuIDKScCzbILRFfKVSdFo=
Subject key identifier:   BB:69:D4:8A:83:46:AE:79:0C:2D:22:12:FD:48:92:5A:D0:FE:4F:67
Authority key identifier: 59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26
Certificate issuer:       /CN=5935015AB8D2AA07565ACB7B918A50D49090AA26
Certificate serial:       72FDEB7EA91922B5B2F89718364FCC89BACB01D6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 16:15:52 +0000
Manifest this update:     Tue 12 May 2026 16:10:52 +0000
Manifest next update:     Wed 13 May 2026 16:15:52 +0000
Files and hashes:         1: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: YukTsqh5CPIPhkM3TqJo0K1IkyqlUpFEdp2Xtp+n8JI=)
                          2: 5935015AB8D2AA07565ACB7B918A50D49090AA26.crl (hash: pwTd8F/a+NH8j/LcOw3WHDq9lt1xrNifJmoRY14BAmM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl
                          rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fd:eb:7e:a9:19:22:b5:b2:f8:97:18:36:4f:cc:89:ba:cb:01:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5935015AB8D2AA07565ACB7B918A50D49090AA26
        Validity
            Not Before: May 12 16:10:52 2026 GMT
            Not After : May 13 16:15:52 2026 GMT
        Subject: CN=BB69D48A8346AE790C2D2212FD48925AD0FE4F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:8b:e7:47:6e:15:eb:03:4b:8b:f2:8d:a6:
                    e4:8e:09:81:cd:0a:54:89:78:fd:f9:a1:2f:71:78:
                    5b:e5:89:39:cd:e7:c8:e5:0e:9b:f1:7b:83:90:c1:
                    6f:8d:59:25:04:7e:99:7c:64:53:b8:7f:b3:08:3d:
                    41:b2:91:7c:65:21:df:7d:d6:68:3d:c7:7e:c2:b5:
                    9a:cd:94:d3:f0:2d:da:04:8c:91:93:e2:cc:5e:52:
                    6b:18:f0:43:49:d1:a9:b8:a9:52:5f:d8:aa:39:1b:
                    bd:19:e5:9b:6b:27:3e:b1:a0:4c:fc:03:1b:6f:6f:
                    43:db:81:4f:09:a3:45:b6:22:c1:38:7f:d1:b7:7f:
                    d1:50:97:11:86:88:4d:28:1d:aa:40:0e:7d:27:4a:
                    86:1d:cc:b3:60:30:86:56:d0:f5:3e:5b:22:30:23:
                    ce:c1:2e:25:ce:84:5c:5c:87:77:f1:d4:20:aa:16:
                    c4:1f:40:14:e0:c4:28:9a:b3:7e:c8:68:bc:4c:4f:
                    90:74:5d:ab:fd:03:e1:f9:b5:4c:65:27:9e:5f:c1:
                    93:46:c7:91:f5:74:84:d3:42:08:95:9c:fc:29:3f:
                    53:7a:c2:e3:64:cd:a2:a1:c3:93:b5:fd:d3:fc:9a:
                    56:3a:31:ac:07:b8:fa:fa:57:1d:c7:07:91:97:bc:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:69:D4:8A:83:46:AE:79:0C:2D:22:12:FD:48:92:5A:D0:FE:4F:67
            X509v3 Authority Key Identifier:
                keyid:59:35:01:5A:B8:D2:AA:07:56:5A:CB:7B:91:8A:50:D4:90:90:AA:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5935015AB8D2AA07565ACB7B918A50D49090AA26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/5935015AB8D2AA07565ACB7B918A50D49090AA26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:3c:66:13:4d:36:b9:dc:95:7e:33:78:db:01:95:17:0b:
         f3:11:6b:48:3d:a6:0f:07:8c:32:d1:72:8d:02:4d:72:db:39:
         73:cc:13:aa:d3:60:c3:b2:57:7d:6c:d4:8e:80:a9:b9:2d:aa:
         f2:81:bd:af:f2:a3:c8:59:b8:f0:7b:81:d7:67:14:c9:0b:99:
         dd:3b:ee:85:b0:cd:b7:63:d0:fa:40:56:13:1a:54:58:c1:b6:
         64:4b:3c:59:51:b6:79:d4:ec:9b:ef:2a:8c:d4:58:a6:15:e5:
         73:bc:d9:ae:b9:fa:4d:64:4e:18:4b:28:7e:00:8b:65:27:ed:
         9c:9a:79:a5:ae:09:7c:2d:1d:1f:14:65:6c:74:da:fc:7b:57:
         cc:8a:05:bd:18:af:dd:24:df:80:ef:f4:af:ae:5b:5f:60:f2:
         dc:75:87:4c:df:e5:3a:3a:83:94:d4:94:c4:e0:d8:0d:ff:1e:
         f3:59:36:9c:bb:8e:36:93:54:76:b3:13:3e:9d:05:07:d7:b0:
         6f:c5:40:84:cd:64:88:06:b9:1a:31:9e:3e:ea:18:bf:15:73:
         69:5e:75:76:74:e0:7c:1d:90:55:ac:9b:0f:d5:84:cf:a9:cb:
         c6:d1:53:d6:00:f0:81:e9:b2:76:e8:01:c1:c8:ed:ab:76:b4:
         4b:43:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:48 2026 by rpki-client