Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft
File:                     16DCF707B920485289157A95351565941B6A8930.mft (raw, json)
Hash identifier:          NhYEx69+mtDww0Cl3K1I7FzNUKbMIB9d46Z+oWkUt8E=
Subject key identifier:   84:3C:7B:95:A8:59:7C:1F:1E:BB:E5:55:42:F4:E0:85:13:09:35:EA
Authority key identifier: 16:DC:F7:07:B9:20:48:52:89:15:7A:95:35:15:65:94:1B:6A:89:30
Certificate issuer:       /CN=16DCF707B920485289157A95351565941B6A8930
Certificate serial:       770080C3FC805FC8743C432C907B19ECB70B017B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:56:35 +0000
Manifest this update:     Tue 12 May 2026 22:51:35 +0000
Manifest next update:     Thu 14 May 2026 00:29:35 +0000
Files and hashes:         1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: RtiNL89mZIuYDEcSArtPnCGvIgkScdacFIZTXeu2tc4=)
                          2: 16DCF707B920485289157A95351565941B6A8930.crl (hash: uAHHGqwvZrLR4n8r+2EWmGh9wCt5Vj+d08HlMmatOV0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.crl
                          rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:00:80:c3:fc:80:5f:c8:74:3c:43:2c:90:7b:19:ec:b7:0b:01:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DCF707B920485289157A95351565941B6A8930
        Validity
            Not Before: May 12 22:51:35 2026 GMT
            Not After : May 14 00:29:35 2026 GMT
        Subject: CN=843C7B95A8597C1F1EBBE55542F4E085130935EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ce:8e:91:16:9f:6e:14:e4:f3:96:a4:dd:78:
                    00:ef:b2:be:d9:af:8a:ee:65:24:2f:f9:d3:12:1e:
                    87:80:c2:88:e9:75:07:6d:d9:14:19:6d:20:23:4d:
                    18:2e:a4:27:b1:8b:02:c2:fb:5a:2f:de:00:19:5b:
                    46:f2:fd:84:5e:ce:67:37:26:e5:96:aa:69:c7:b8:
                    74:4c:ea:d6:4c:62:01:55:92:11:69:e8:e8:d2:db:
                    6c:f1:e5:64:12:4a:e8:96:94:d3:ac:2f:16:f7:56:
                    51:98:04:93:b7:f7:fa:1b:48:a6:09:64:a0:a6:d0:
                    9b:1c:a5:6c:1b:8f:d0:3f:15:88:2b:bb:92:b0:06:
                    6c:c1:61:b4:7b:b0:5f:7d:49:d3:e1:0f:96:f6:b0:
                    e2:72:97:d6:a0:b2:8b:1d:ac:ca:c0:68:47:72:e3:
                    be:24:09:49:59:36:9a:4e:64:99:7c:bc:b7:fc:f1:
                    c9:85:98:62:f6:aa:f3:ac:fc:97:7a:44:81:81:d5:
                    62:b9:2a:47:12:ab:00:66:0c:f2:05:80:01:d5:4b:
                    ca:cc:c7:ad:1e:ca:9e:83:43:d6:6b:84:f9:6b:3c:
                    43:50:de:19:20:a8:c1:3b:5e:2e:62:64:01:88:07:
                    e9:06:41:ff:2f:4b:e9:43:58:01:e1:d0:1f:99:60:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3C:7B:95:A8:59:7C:1F:1E:BB:E5:55:42:F4:E0:85:13:09:35:EA
            X509v3 Authority Key Identifier:
                keyid:16:DC:F7:07:B9:20:48:52:89:15:7A:95:35:15:65:94:1B:6A:89:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:94:34:63:99:3e:0f:16:9a:37:4c:94:bb:26:3d:10:38:17:
         3c:8b:d4:b4:65:25:a1:04:70:8b:25:97:4e:0c:18:66:90:63:
         f0:55:ae:df:5b:d9:ef:52:58:aa:94:ca:f8:4b:a6:23:65:d9:
         b3:f4:1e:30:43:57:d3:a3:e0:38:35:b1:b1:31:58:0a:bf:0d:
         c5:66:48:33:ec:b7:b8:ea:eb:bb:1c:d8:98:4f:3b:87:b0:18:
         d5:00:57:dd:c9:98:31:d1:55:43:07:c0:f5:e5:e6:6a:2f:e4:
         2c:49:39:72:3a:40:ef:33:97:24:58:75:39:d9:cc:c0:15:d4:
         ee:46:14:a3:09:8d:65:c1:2d:cd:e3:53:d8:51:70:ff:b8:74:
         f1:54:8a:df:14:a1:73:ab:b8:44:90:ca:0c:6e:59:49:a7:00:
         6a:66:d4:5f:bf:b9:36:54:9c:b6:ee:bf:ef:14:99:a5:4a:e4:
         82:c3:d1:88:ba:1c:de:57:22:6f:a9:ce:84:84:aa:ed:59:f2:
         c6:d9:7a:aa:f0:9d:88:bf:1f:96:26:a7:68:aa:3b:fb:0a:31:
         87:ec:1e:6f:71:56:27:8a:74:59:56:30:cd:f7:80:c8:4e:23:
         93:98:de:b9:c2:fd:88:aa:30:19:7a:3d:69:87:24:ca:44:6e:
         3a:39:a3:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdwCAw/yAX8h0PEMskHsZ7LcLAXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZEQ0Y3MDdCOTIwNDg1Mjg5MTU3QTk1MzUxNTY1OTQx
QjZBODkzMDAeFw0yNjA1MTIyMjUxMzVaFw0yNjA1MTQwMDI5MzVaMDMxMTAvBgNV
BAMTKDg0M0M3Qjk1QTg1OTdDMUYxRUJCRTU1NTQyRjRFMDg1MTMwOTM1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqzo6RFp9uFOTzlqTdeADvsr7Z
r4ruZSQv+dMSHoeAwojpdQdt2RQZbSAjTRgupCexiwLC+1ov3gAZW0by/YRezmc3
JuWWqmnHuHRM6tZMYgFVkhFp6OjS22zx5WQSSuiWlNOsLxb3VlGYBJO39/obSKYJ
ZKCm0JscpWwbj9A/FYgru5KwBmzBYbR7sF99SdPhD5b2sOJyl9agsosdrMrAaEdy
474kCUlZNppOZJl8vLf88cmFmGL2qvOs/Jd6RIGB1WK5KkcSqwBmDPIFgAHVS8rM
x60eyp6DQ9ZrhPlrPENQ3hkgqME7Xi5iZAGIB+kGQf8vS+lDWAHh0B+ZYCO5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhDx7lahZfB8eu+VVQvTghRMJNeowHwYDVR0j
BBgwFoAUFtz3B7kgSFKJFXqVNRVllBtqiTAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTdkOWY3NDUtZmFhNC00OGNlLTgzYjEtMGJkZTMzYzI0NDdmLzAvMTZEQ0Y3MDdC
OTIwNDg1Mjg5MTU3QTk1MzUxNTY1OTQxQjZBODkzMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNkRDRjcwN0I5MjA0ODUyODkxNTdBOTUzNTE1NjU5NDFCNkE4
OTMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz
YjEtMGJkZTMzYzI0NDdmLzAvMTZEQ0Y3MDdCOTIwNDg1Mjg5MTU3QTk1MzUxNTY1
OTQxQjZBODkzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKeUNGOZPg8WmjdMlLsmPRA4FzyL1LRlJaEE
cIsll04MGGaQY/BVrt9b2e9SWKqUyvhLpiNl2bP0HjBDV9Oj4Dg1sbExWAq/DcVm
SDPst7jq67sc2JhPO4ewGNUAV93JmDHRVUMHwPXl5mov5CxJOXI6QO8zlyRYdTnZ
zMAV1O5GFKMJjWXBLc3jU9hRcP+4dPFUit8UoXOruESQygxuWUmnAGpm1F+/uTZU
nLbuv+8UmaVK5ILD0Yi6HN5XIm+pzoSEqu1Z8sbZeqrwnYi/H5Ymp2iqO/sKMYfs
Hm9xVieKdFlWMM33gMhOI5OY3rnC/YiqMBl6PWmHJMpEbjo5o94=
-----END CERTIFICATE-----
Generated at Wed May 13 12:14:05 2026 by rpki-client