Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
File:                     BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft (raw, json)
Hash identifier:          wZgbg67aZCRFCRmyDLs5FCrpD/MxrRXYa4mGVSj4wQY=
Subject key identifier:   2C:35:26:DC:B8:1C:89:C9:94:99:15:BB:BD:5F:75:C4:A2:13:5B:E8
Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
Certificate issuer:       /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Certificate serial:       4025DE50A0B8BABB4DD00CB434BAC7856359E15D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 16:26:01 +0000
Manifest this update:     Tue 12 May 2026 16:21:01 +0000
Manifest next update:     Wed 13 May 2026 19:00:01 +0000
Files and hashes:         1: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: U2ap+e12vTMaTWTUslebQCqX7KlurU+JCU+tN10AEBc=)
                          2: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: aMwliF8f+KJHeJLDBVlDQIRW+UpwyCDnVCmgvmDSPBs=)
                          3: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: EYkI0p4+CgnYpKny2uHcSev4QPkQmeLLChTvoH2DvhI=)
                          4: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: Lwb/Sd018a/wGqBSdGChZ8920giGhrUJnYfpSOUiZ7E=)
                          5: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: NpWQoJWkTFRWtu5IgmdpgROmr0Z1lBzNGKqs6X4eLkI=)
                          6: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl (hash: NdLbg90ZaTtPiGyTtYI8gMSbpL+HZamz8SRPESnXiu8=)
                          7: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: zUL5UQNXnc8QhEgTnOt/ZHUWtyhWWgBBUQzy5H70VK4=)
                          8: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: ixvcysOVf6dGfQ7OL/zmp0yRPmCnK8SCHSDkoKzywSg=)
                          9: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: la/MT35l4XmEKRTivxkgUTpV+veAFTIlPEFkPiSAUT8=)
                          10: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: UGmub+zvmz38VUHBdFrEohUoj9JI2gk3RmJ2b1SMZ/E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
                          rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:25:de:50:a0:b8:ba:bb:4d:d0:0c:b4:34:ba:c7:85:63:59:e1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
        Validity
            Not Before: May 12 16:21:01 2026 GMT
            Not After : May 13 19:00:01 2026 GMT
        Subject: CN=2C3526DCB81C89C9949915BBBD5F75C4A2135BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:80:18:5c:d0:15:b9:51:60:58:db:be:3c:65:
                    27:0a:a7:1d:b9:b8:49:03:c8:c2:ab:db:4c:78:6b:
                    b9:75:ea:1a:f5:68:82:10:5c:ea:dc:7f:57:a3:e4:
                    04:a1:9e:4d:13:c5:47:bf:84:fc:01:b5:63:77:ad:
                    3b:4f:7b:5f:ae:c4:91:9d:eb:70:68:63:d5:1e:70:
                    df:01:9f:93:5e:6a:67:ef:be:b2:f5:5f:85:dd:83:
                    63:02:c4:e1:32:d5:fe:33:5a:a9:3b:11:b0:88:36:
                    f2:2d:10:d6:3c:62:7e:42:72:3d:55:ff:ab:16:f0:
                    79:ad:60:38:7e:88:60:0b:bd:1c:e4:8f:c6:f9:77:
                    f8:a5:e7:72:61:9b:dd:a3:23:fb:a8:26:1f:1d:f1:
                    19:d3:7a:42:70:03:fd:08:ec:ff:56:2f:34:51:20:
                    03:e4:21:b5:4c:0d:4a:fd:3d:89:13:2e:03:69:eb:
                    f6:01:12:b7:12:d1:54:ed:2b:03:b0:cb:b6:67:f0:
                    ac:bd:fe:7a:4d:8c:34:d0:ff:e8:fd:37:ce:23:7f:
                    3c:9c:89:53:c7:39:63:0b:60:fe:7e:89:d0:1f:c7:
                    11:bc:70:03:c9:36:df:ea:99:ab:e1:a0:ff:8f:56:
                    c5:70:ff:e3:9e:e8:d7:df:93:b0:16:a9:e3:88:be:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:26:DC:B8:1C:89:C9:94:99:15:BB:BD:5F:75:C4:A2:13:5B:E8
            X509v3 Authority Key Identifier:
                keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d3:9b:80:49:35:e4:61:1e:b3:94:32:e0:96:d6:f3:1c:35:
         8e:e9:c8:99:48:db:7e:ff:f9:b8:ad:bd:fe:16:0b:48:28:31:
         b5:38:0e:26:6a:28:a8:5c:94:52:5a:90:f8:0c:4e:73:43:5f:
         aa:ee:9d:22:b2:da:15:13:14:df:6e:9b:1e:c9:ee:41:0e:d7:
         df:a0:fd:c4:9a:d4:43:f5:20:0e:f8:be:60:fe:65:77:71:96:
         69:f0:d5:c8:ab:94:dc:41:fe:ec:96:0c:25:f0:8e:c3:4d:8d:
         d2:c9:94:f4:ad:f0:bd:2f:50:ff:fd:06:be:50:52:99:89:e2:
         4f:c5:99:ce:f0:47:af:dd:e3:fe:9f:8c:9b:00:c9:58:cb:29:
         db:72:2a:43:ad:d5:46:e6:12:65:79:5d:c0:33:63:12:94:90:
         18:b6:b9:3e:50:71:df:8d:2d:13:f1:cb:54:c0:87:52:dc:89:
         b1:55:55:27:a1:da:a4:25:c1:60:bb:a7:4b:44:d5:7b:4c:b5:
         1f:21:f6:c9:95:55:32:8a:59:21:cd:ce:70:5d:c1:d0:4f:f3:
         9c:84:00:f2:d5:70:cb:38:63:29:ba:d9:7e:bb:2e:6f:20:45:
         43:b2:9b:95:09:c9:d1:8a:49:6a:98:99:ad:ac:1e:a4:65:3e:
         3f:50:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:23 2026 by rpki-client