Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft
File:                     B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft (raw, json)
Hash identifier:          69Bt41FpYCiRHByzueGRRB2SCEZP84viY9TxCOTpF0s=
Subject key identifier:   41:45:2E:7C:BD:E4:A1:4E:4B:6D:2A:AC:5F:5B:03:EA:C5:FB:0A:A1
Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1
Certificate issuer:       /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1
Certificate serial:       51F082CF5C735272FD49EA61AA6C5CA2CED5E6CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 06:52:59 +0000
Manifest this update:     Tue 12 May 2026 06:47:59 +0000
Manifest next update:     Wed 13 May 2026 09:35:59 +0000
Files and hashes:         1: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: A8Rj4cqXdcnsq+FLejpEUcmUwRFqYq1jFxwy+Q4EccA=)
                          2: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: xat5QRgiDjEvf5+MHrIJqdczPQXPNnHqQPKuqIFalY0=)
                          3: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 0HclTm8jPdJ9pdLkBcx2iHTadXENhk0okUOb438P1GQ=)
                          4: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: O5O2bHjSgz5EaoYBjPQFvScfNgW4n1HG3kEQcg119Ng=)
                          5: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: CjrhC79NpfmyHbjUbEINIlY/W8SS5iUE5Mpe2yHqTCk=)
                          6: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: uuKla2urFiVoLa1tj8NM3bGyRcKks2/aX+x/1D+sD6M=)
                          7: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: 0XQ1YZo4kGL7Y3CIQczOPIPj1y3PxpdocpKouQW/EdQ=)
                          8: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl (hash: 6Z2zM5eBkBQkABm+zYM4jo43OCxW1lTUK0rNCy8Ijs0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl
                          rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f0:82:cf:5c:73:52:72:fd:49:ea:61:aa:6c:5c:a2:ce:d5:e6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1
        Validity
            Not Before: May 12 06:47:59 2026 GMT
            Not After : May 13 09:35:59 2026 GMT
        Subject: CN=41452E7CBDE4A14E4B6D2AAC5F5B03EAC5FB0AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f5:d4:be:bf:41:4d:ba:a1:c1:e1:e7:d1:e1:
                    26:25:80:4d:42:27:47:7c:51:50:d1:3d:f1:b2:d1:
                    d1:63:49:5e:b4:0c:cc:8b:0b:17:d5:5a:40:a7:7c:
                    d0:37:7b:f1:cd:42:b7:a3:45:7e:f5:41:f3:12:8e:
                    8b:b4:56:38:f1:74:45:58:4d:45:a0:42:b3:1e:60:
                    43:c5:42:48:fd:8a:a9:de:ac:fb:28:96:85:69:0a:
                    e0:3a:b9:62:ad:e5:71:58:33:f3:e2:f8:27:13:11:
                    99:87:f4:a4:cc:7f:2c:de:a5:d1:0a:f4:26:52:64:
                    93:a3:5c:25:c1:8e:4f:bf:ab:4c:5c:14:b9:3d:13:
                    ba:01:47:80:2c:15:4f:b5:a6:32:c9:f5:0a:e6:7f:
                    04:f3:dd:80:53:72:6d:28:9b:10:79:b3:02:be:84:
                    8f:aa:66:e6:2c:e6:f3:03:a7:6f:5b:23:f7:a4:fc:
                    01:f0:03:1f:8b:29:e2:c0:a5:11:95:df:ea:ab:dc:
                    52:b4:0f:6a:f0:4d:dd:0b:9a:46:e0:92:ea:10:13:
                    de:2c:7c:1c:70:bb:16:76:72:d1:e2:81:06:c2:ca:
                    ac:38:03:21:8c:12:ef:f1:83:08:8c:58:09:55:a1:
                    05:8b:2a:dc:84:f7:2a:14:45:2c:2e:67:c9:44:29:
                    36:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:45:2E:7C:BD:E4:A1:4E:4B:6D:2A:AC:5F:5B:03:EA:C5:FB:0A:A1
            X509v3 Authority Key Identifier:
                keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:eb:62:a6:27:36:d8:29:2f:48:f9:02:5c:5f:ae:c9:2e:
         4a:1a:aa:72:9d:24:6b:70:7a:f3:61:16:42:3e:b5:d0:38:d3:
         4e:8c:83:57:a6:5c:b5:2c:e8:63:9f:b1:6d:40:94:3d:b1:9e:
         36:8c:7b:91:bb:b0:2f:fb:c6:af:f9:f5:04:47:fa:ba:cf:93:
         0a:02:6e:5b:7e:a8:80:65:22:10:63:a9:a7:29:3f:8a:4b:a6:
         26:36:f7:ad:ac:f8:e3:b6:e1:62:20:c0:48:5f:33:57:68:f4:
         c5:fa:99:b0:e6:a4:e2:28:df:d9:80:63:70:58:4f:7e:03:2a:
         2d:8c:15:a4:72:ec:75:32:46:de:e8:84:3f:c4:ec:43:ab:ff:
         69:ed:24:86:31:25:13:1e:8b:19:76:d9:8d:97:f9:3a:95:5a:
         1d:bd:60:43:cb:04:91:68:c3:bb:01:c3:1b:75:13:79:38:82:
         45:56:28:96:2d:0d:bc:37:97:ed:52:02:e1:cc:af:2a:fe:14:
         47:54:db:f8:09:09:73:ce:33:f3:0c:b8:99:a2:51:67:86:0f:
         26:09:a5:a1:75:6c:e6:17:35:99:d2:e7:cb:40:b7:12:b8:99:
         8c:dd:1d:4a:63:41:cc:a1:38:e3:f9:68:1d:60:4e:13:5d:0b:
         ee:e4:7a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:14 2026 by rpki-client