Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
File:                     163FCF7902CF93C079C25A5BB950177736E3A53E.mft (raw, json)
Hash identifier:          bxre7kygC+4qVESHRzMmPrGeUdS/XpqIno3V7Iv8tnY=
Subject key identifier:   82:17:46:6D:80:FB:09:C1:52:50:A2:8D:2C:DC:6B:82:A9:7C:E2:18
Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
Certificate issuer:       /CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Certificate serial:       40680BCA2E734B03DD62194C4C0CA576010BC993
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 17:27:17 +0000
Manifest this update:     Tue 12 May 2026 17:22:17 +0000
Manifest next update:     Wed 13 May 2026 20:28:17 +0000
Files and hashes:         1: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: 6RKcmzfjeDH4g7wyr++N6VgeRBt/pDFie/Fnes4qIjU=)
                          2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=)
                          3: 163FCF7902CF93C079C25A5BB950177736E3A53E.crl (hash: I++QCCFqMWVgrx5Bb2uCnWxUmCVqw0V3+dA+diAb1HM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
                          rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:68:0b:ca:2e:73:4b:03:dd:62:19:4c:4c:0c:a5:76:01:0b:c9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E
        Validity
            Not Before: May 12 17:22:17 2026 GMT
            Not After : May 13 20:28:17 2026 GMT
        Subject: CN=8217466D80FB09C15250A28D2CDC6B82A97CE218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:49:30:12:4a:3b:20:00:90:b5:9a:d3:01:46:
                    18:6b:3f:e8:b2:2f:01:a7:cf:2a:7a:3a:db:63:97:
                    6a:87:13:15:5a:86:f5:7a:b8:cf:36:a0:23:2a:af:
                    7b:62:5a:ea:8b:20:25:77:17:84:cd:d8:f5:6f:24:
                    e1:49:a4:92:39:27:33:d9:58:06:3b:0e:21:16:49:
                    ec:76:cd:43:dd:a2:26:b4:d4:79:1c:c9:91:c4:b8:
                    da:16:25:12:53:fe:12:a7:98:6c:98:0b:a6:27:7f:
                    66:a8:56:53:ef:4f:f1:04:37:2a:83:3f:31:38:50:
                    e2:09:70:83:0e:ae:7c:04:ee:7f:76:ca:47:a1:21:
                    75:95:70:d8:76:ac:b8:50:4c:e2:4f:f5:56:99:b2:
                    f5:be:a5:a3:ae:55:d6:97:12:69:de:cd:9c:04:64:
                    9b:6e:96:24:ab:0c:b4:be:15:f1:6f:ce:6b:9c:1c:
                    ef:45:36:cc:9d:cd:15:fc:37:c2:bd:5f:49:1a:3c:
                    b4:9f:56:bc:ae:e8:dc:82:78:a9:02:63:ab:55:61:
                    71:10:e0:d9:ee:69:d8:43:65:32:ff:41:03:b6:33:
                    a4:8e:59:65:a4:ac:b7:98:52:6f:40:33:f1:20:e7:
                    d0:7a:a7:3b:39:38:91:e6:0d:47:49:31:d3:1d:62:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:17:46:6D:80:FB:09:C1:52:50:A2:8D:2C:DC:6B:82:A9:7C:E2:18
            X509v3 Authority Key Identifier:
                keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3b:24:8e:68:1a:30:04:da:ff:c2:2a:b0:d6:24:1e:7d:e1:
         64:2f:7b:85:13:40:44:7d:4b:6e:0c:17:1e:3e:3c:85:bf:b7:
         c2:bb:69:b7:f1:48:a8:1d:54:27:c9:e0:b4:1c:ef:e1:9f:fe:
         be:59:f4:57:d1:2c:43:b8:c1:7a:11:49:f0:91:c0:50:4e:f8:
         cf:a9:04:82:fc:4a:ec:4d:cb:c7:b9:c3:8c:0a:c2:b7:9c:74:
         05:5d:e8:d9:64:f7:39:00:ab:f3:63:08:84:45:10:c3:52:d5:
         bc:c4:44:d1:fe:5e:1c:8d:19:66:03:51:7a:8f:e2:6d:2f:d1:
         fa:d7:be:ae:11:d6:81:50:ac:2d:5c:e9:53:40:05:47:7f:78:
         ae:95:b1:35:98:c4:97:cb:e6:80:ff:34:53:1f:76:77:54:5e:
         f1:a2:1c:4e:8d:3c:9f:99:1c:cb:69:e6:10:53:a0:b7:31:b1:
         1e:63:e0:dc:25:6a:cb:0c:52:c4:d6:66:bc:aa:77:e4:c0:aa:
         81:06:7e:33:ef:bc:ba:16:51:9b:df:92:1a:66:dd:bf:bb:e6:
         56:06:47:5a:49:c7:fd:d0:28:b2:15:b4:33:4a:fd:82:72:38:
         1e:f2:c3:41:59:52:36:77:31:8f:65:16:4f:13:b1:17:d5:48:
         ac:48:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:45 2026 by rpki-client