Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
File:                     95C0FEDF4348635C616CCD76866299FFF41521C1.mft (raw, json)
Hash identifier:          xBKWx8K0mrLPUnWVDVbstShFTcFHjqRLjiLddGavigQ=
Subject key identifier:   90:22:DE:A2:F6:DF:38:0A:47:2E:F0:3B:C5:83:51:11:E4:F8:3E:3B
Authority key identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1
Certificate issuer:       /CN=95C0FEDF4348635C616CCD76866299FFF41521C1
Certificate serial:       2FAA546939E7DD28F5E658FA360ABAA8C2CD0E3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 20:27:23 +0000
Manifest this update:     Tue 12 May 2026 20:22:23 +0000
Manifest next update:     Wed 13 May 2026 21:08:23 +0000
Files and hashes:         1: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: nctWeqdG+C+yzM3us3hfFDeGU29WHbKA/XQo+aeaR/w=)
                          2: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: h+0fD6qzNLY/87deDA6R1jRhs0ceFeWyvO6Ew7fmyvY=)
                          3: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: O1v/bS1Rz6LYE4uphPLJ6skO/weLSpE9O9uIKbdx440=)
                          4: 95C0FEDF4348635C616CCD76866299FFF41521C1.crl (hash: T9rQ2YW29za09e+9fQda5A5KTlLBdQLA6b1N7FxsvUQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl
                          rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:54:69:39:e7:dd:28:f5:e6:58:fa:36:0a:ba:a8:c2:cd:0e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C0FEDF4348635C616CCD76866299FFF41521C1
        Validity
            Not Before: May 12 20:22:23 2026 GMT
            Not After : May 13 21:08:23 2026 GMT
        Subject: CN=9022DEA2F6DF380A472EF03BC5835111E4F83E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:43:b2:42:07:90:69:99:86:3d:37:66:33:
                    ea:3b:ad:d0:38:f8:f8:4a:14:f4:41:6e:3c:de:85:
                    bf:5b:5d:8f:cc:34:02:1b:7c:50:33:86:c9:a1:b7:
                    f7:78:13:85:22:5f:b0:73:2f:22:a7:31:d1:eb:f5:
                    80:87:ac:05:f5:27:95:7e:0f:96:29:e5:03:82:83:
                    85:cd:b2:f9:a5:3a:e6:f2:9c:93:bb:70:04:d8:15:
                    83:c9:e5:03:31:d6:3b:35:53:96:d9:b0:c3:4e:36:
                    80:8f:73:de:d6:fc:a6:fe:60:65:ac:1f:6b:c8:f4:
                    72:44:03:77:f3:2c:14:e1:fb:18:04:29:0f:6c:8d:
                    cf:40:12:d0:16:87:b8:72:bf:ba:99:bc:09:13:6f:
                    92:74:5a:25:d3:61:8e:73:95:6b:e3:db:82:6d:2e:
                    34:b7:5f:a0:ba:55:37:f9:2d:f3:cf:14:67:68:d7:
                    9e:03:6f:22:a3:2f:a2:d6:46:4e:0d:66:e3:82:36:
                    df:d3:40:e6:f2:ea:39:98:1b:2a:ae:f2:4d:be:42:
                    a8:7e:72:a8:88:00:bd:33:18:6e:f5:f0:d9:b9:9f:
                    32:50:97:43:41:30:ab:75:db:71:a5:ed:ef:e3:87:
                    3b:c7:09:9a:a9:55:18:bf:53:f5:c9:2d:29:a0:3f:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:22:DE:A2:F6:DF:38:0A:47:2E:F0:3B:C5:83:51:11:E4:F8:3E:3B
            X509v3 Authority Key Identifier:
                keyid:95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:55:a3:16:b2:78:ac:c0:58:b7:35:c1:3c:48:a5:2e:82:d2:
         76:c5:cb:07:a3:01:bf:18:c2:17:ae:f2:f0:dc:50:eb:31:8f:
         40:26:aa:ff:70:75:b5:da:07:fe:0b:b7:31:6f:18:e5:7a:ed:
         dc:cb:09:41:76:6c:db:7a:f4:1c:3c:82:dd:e3:1c:63:01:ef:
         d1:bd:78:0b:23:5c:46:d2:55:1c:f4:02:7b:c6:b2:9a:fd:d6:
         27:33:4d:17:94:e5:00:bc:1d:da:6d:76:58:8d:bc:ab:ec:31:
         56:de:a7:10:8b:ce:9a:fa:c3:78:6a:5c:69:2c:5e:49:3f:a1:
         f9:7d:2d:ef:be:c1:99:af:83:d3:60:29:2e:99:67:39:da:84:
         30:5f:2c:bc:62:bc:c6:5e:ef:4b:95:a6:51:c7:04:fb:69:c5:
         74:96:f7:bd:1b:5b:05:32:80:34:f0:7c:d4:b7:a0:78:18:e3:
         d8:1f:df:e7:51:f0:2c:44:13:2d:a7:3e:e6:4f:0b:39:1c:76:
         ac:b7:c2:59:78:dc:0e:a0:2e:a3:8a:28:f4:76:51:70:e3:18:
         7a:a3:27:be:9b:6b:b7:74:dd:31:1a:40:fb:5e:0c:a9:56:da:
         42:23:1e:d7:37:cd:f3:c0:c0:e1:67:85:13:4b:ef:ce:ac:55:
         56:bf:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:30 2026 by rpki-client