Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
File:                     FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft (raw, json)
Hash identifier:          t8k5bHW6tiSbfy0RkqISI2moyn74RgM2U9PkwXH7euM=
Subject key identifier:   47:CA:17:05:30:14:F1:9F:A3:6A:8A:87:25:78:78:73:17:51:9D:5A
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Certificate issuer:       /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial:       353A68531B576A2E03158E1631A2378136A93B83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:05:14 +0000
Manifest this update:     Tue 12 May 2026 22:00:14 +0000
Manifest next update:     Thu 14 May 2026 01:33:14 +0000
Files and hashes:         1: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: scVRC0xmxqQdUfIKHLUXCSR/PlHSL7MJsFmhftXQ12o=)
                          2: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 2buPsuKzxfp1+Z0b6pwCmXQGtunH/ULHNFjkRXke1WI=)
                          3: FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl (hash: Y6PmjyOH7XxmkdES/hHAT2C5X5RUPyG8uZHsoenu14E=)
                          4: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: N6pzwLsiBlR6wqRJD6D9fkvMPk3uOH5gFPON6WGlnyk=)
                          5: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: NVWT14ucQ7dIq22SiHPSunVZu4zoTEVcOwCIXRvC+w4=)
                          6: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: yTgPRgQVzVx38fMyxtuZ61ES4EUBA+qjN64rJdc/fj0=)
                          7: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: vL84NHT9sBntLdBIflCRLCGX23FgkMfHfpfueFsiLrg=)
                          8: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: xrvvTuKeO8SacVcwiQahe3cKGxd7wl87Mxfi5VJfmZk=)
                          9: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: OEfd+CS8IY4J+a4u9rVfClWlOVRIWkchPzHhfbtOYRo=)
                          10: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: EAjmUlvem7M4oK9zM5l2C5sj8QgctjDf21f5Jtu6r6c=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
                          rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3a:68:53:1b:57:6a:2e:03:15:8e:16:31:a2:37:81:36:a9:3b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
        Validity
            Not Before: May 12 22:00:14 2026 GMT
            Not After : May 14 01:33:14 2026 GMT
        Subject: CN=47CA17053014F19FA36A8A872578787317519D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:61:76:56:9f:8c:d1:92:b5:9e:77:6d:61:
                    94:11:8f:9c:5c:8f:32:f8:85:b5:33:40:08:6f:ac:
                    9e:55:4b:7b:30:ef:16:61:18:e8:dc:83:ef:a0:f6:
                    ad:5c:74:d2:b3:e3:5a:09:23:79:1c:65:25:b9:ee:
                    ad:4d:e2:53:58:ec:ec:a9:18:d8:5b:1f:2b:13:db:
                    d2:92:f2:13:32:29:43:22:1c:32:fe:8e:b0:bd:22:
                    dc:c1:06:e9:ac:e4:81:29:7d:f4:5c:2e:17:e8:64:
                    3f:e9:1a:39:1b:a2:20:9c:d2:66:9a:6d:54:b4:41:
                    f5:10:af:1d:ba:ce:4b:fb:04:a9:c8:95:9e:d3:6f:
                    87:1f:1a:41:66:91:a5:89:e6:83:61:e3:b6:70:28:
                    e5:81:fe:93:bd:dd:46:ba:bf:49:e2:c1:1d:38:e7:
                    48:54:a2:0d:a2:3f:fe:13:59:3c:a1:e4:d9:82:e8:
                    39:f1:6e:aa:ac:15:c7:c7:84:a4:d7:3c:ba:82:1e:
                    82:57:f6:ff:f8:6e:d0:7b:1b:3c:f0:51:3c:6c:7a:
                    35:73:c6:84:2a:ff:58:39:ee:5b:39:5c:0c:bd:0c:
                    f0:eb:01:af:85:71:76:15:8e:97:36:16:7f:47:c1:
                    7c:ab:e7:4d:ea:85:5d:6c:b8:2f:de:13:df:d7:23:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CA:17:05:30:14:F1:9F:A3:6A:8A:87:25:78:78:73:17:51:9D:5A
            X509v3 Authority Key Identifier:
                keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:77:11:e4:d3:3b:95:8e:5b:8b:cf:a8:59:e4:49:31:23:
         65:d8:66:95:9d:b9:c8:81:e0:86:47:ce:b4:33:34:2e:f3:6e:
         0b:27:e3:c0:50:7c:21:26:b1:5d:fc:f2:e2:61:1f:e3:9f:2f:
         c9:00:04:4c:25:0b:69:ab:44:83:28:3c:8b:5a:93:8f:44:74:
         3a:59:a4:ca:9c:6d:6f:6b:79:1e:1f:1f:50:39:91:bf:87:a9:
         15:b2:1a:9d:be:d9:a3:29:f3:a3:75:f5:27:8b:f5:0d:cc:1d:
         d6:4c:2f:39:6a:2b:02:e8:17:31:2a:bf:3d:7b:31:6d:8f:05:
         88:b6:f4:9b:c3:d8:94:c2:dd:b5:fb:a1:ca:3f:96:a3:6b:92:
         59:90:53:4c:bd:db:2e:ab:5d:71:1d:9e:5b:82:bd:37:4b:84:
         3b:03:56:19:b5:14:be:ff:5b:e0:d3:29:67:20:90:f3:88:2b:
         d7:ba:de:5d:61:2d:24:8b:da:8a:7c:60:6b:c1:ae:52:67:08:
         e5:a7:43:8f:ee:ed:93:f9:fa:ee:24:a1:64:d1:ce:8e:84:be:
         38:d8:31:c6:89:13:f3:53:43:5b:91:a8:51:76:aa:b0:b5:d0:
         5e:4a:90:e7:1e:ff:b3:fa:6d:0a:ea:62:a4:ac:ed:fb:63:09:
         86:e6:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:33 2026 by rpki-client