Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
File:                     AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft (raw, json)
Hash identifier:          kFSPhDVw7iZjgt9yYgp7IaeSBnp93glv62qQPYayhuQ=
Subject key identifier:   25:45:7C:B9:B1:F3:37:FF:D4:19:1A:2D:A7:2B:3C:3E:68:C7:D5:B1
Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB
Certificate issuer:       /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
Certificate serial:       79965F7831CD5D8ADF8434BC18DCBAADBC0D2BC2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:44:41 +0000
Manifest this update:     Tue 12 May 2026 04:39:41 +0000
Manifest next update:     Wed 13 May 2026 08:22:41 +0000
Files and hashes:         1: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: q33gUCSA+x8ZeBcPhedwaAdIwEj0Ce99+sYJUQuSC9s=)
                          2: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl (hash: pdRHeB8Dq2O0Hz6sE3wX6bdu63OISWdzcmehNOYEldE=)
                          3: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: Ee7WWGSltwyaFMHxIIgEvgkLf4dnjnHrFVC5UDqWks8=)
                          4: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: S3aT7VcLJ0ssRGTP1ygDwW7+AIQVYKqNTkFjIYTg3fg=)
                          5: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: od92otk1ZBfK/DphT8D9p9Tw3yqgeInTJA8T3zh0m9Y=)
                          6: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: fZTmTy6g2R28mCtJrpoBFkv/RRFL2DWAt0Cexpbh3bM=)
                          7: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: dHemt/X+4p/vn34sn9wPgB+Rsu5EmHnVv8RmTO5DvKE=)
                          8: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: yyYOlJ0fwzxGoTlSm81JuoIInjVRI/GeCaxTrgVohIA=)
                          9: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: l6rGkO8MgVJkambdkAclMvjE+aQSvltuGia3hhd605M=)
                          10: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: 7CW/WrucWkwMy6n5L6l1Fl9wsuT6MqzAnA/bZ5ATe84=)
                          11: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: aXgaQBkXNr3WgkNnT1bbV4Z/rSlPnLbxkffq9PBogAU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl
                          rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:96:5f:78:31:cd:5d:8a:df:84:34:bc:18:dc:ba:ad:bc:0d:2b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
        Validity
            Not Before: May 12 04:39:41 2026 GMT
            Not After : May 13 08:22:41 2026 GMT
        Subject: CN=25457CB9B1F337FFD4191A2DA72B3C3E68C7D5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:04:bf:cc:3c:e9:49:2d:a1:29:83:68:03:
                    a8:b2:0c:47:2e:05:80:65:26:06:23:9b:73:c0:01:
                    d1:21:9b:17:d8:72:94:89:df:3e:0c:ad:7c:b2:ac:
                    7b:e0:72:2d:67:51:ec:2d:94:48:9e:da:23:36:56:
                    a8:62:88:38:f0:c4:2c:4d:1a:9a:c7:a5:35:ec:ac:
                    00:3a:1e:f8:43:79:5f:01:d7:4b:f6:9e:4f:7e:d6:
                    2d:90:57:bb:8d:c0:6a:4e:75:7c:eb:b3:7a:04:de:
                    a2:15:ca:25:ed:80:26:cc:8c:76:58:88:03:4f:cb:
                    af:f4:f2:c6:61:04:12:0e:3d:1d:54:ed:fe:4b:4e:
                    21:9b:23:7f:77:e2:99:cf:88:37:46:62:75:bb:e4:
                    dd:66:eb:64:71:d1:59:de:d3:6e:bb:81:d7:80:ec:
                    57:13:ae:aa:3a:5e:bb:24:a4:8d:0d:19:6c:df:b0:
                    cc:f0:33:05:60:fe:30:d9:69:94:00:43:c5:8e:bb:
                    ce:f8:35:1d:22:49:a7:60:e6:7c:a8:ac:2f:be:81:
                    f3:43:83:1a:48:ba:70:02:21:17:e1:bd:6a:8a:06:
                    df:12:ea:96:91:38:23:e9:b1:29:51:95:64:e4:7d:
                    68:53:91:f7:ee:d0:a2:11:d4:05:5c:7d:c8:56:44:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:45:7C:B9:B1:F3:37:FF:D4:19:1A:2D:A7:2B:3C:3E:68:C7:D5:B1
            X509v3 Authority Key Identifier:
                keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:70:8f:b8:7e:38:79:d0:47:cd:b6:f2:62:85:fd:ab:b5:13:
         c3:3c:22:56:1a:1a:73:e2:3e:8f:73:e1:1c:b8:9b:27:86:95:
         64:19:50:d9:87:2c:e0:a6:65:a5:ff:09:f6:8d:a0:91:bc:36:
         0f:e2:ee:43:a7:50:d2:de:30:88:7a:8d:f2:dc:e2:74:e0:2f:
         7f:85:c9:09:80:25:a1:57:07:7c:b7:74:7c:db:24:7d:6a:3a:
         62:e6:2d:d1:13:bc:65:86:cc:9c:f0:03:6a:cd:34:22:46:76:
         bd:33:6b:6d:df:6e:ff:5e:65:ce:50:9e:cf:39:f2:5d:ac:5d:
         82:d6:99:96:83:23:a8:b7:9d:2c:04:15:2d:e8:5f:e8:5a:2d:
         a7:f3:f1:0d:3a:bb:cc:a2:2b:67:08:2a:b5:ab:46:d5:61:0a:
         f7:45:b8:cb:58:e7:c8:b3:50:d0:21:b6:9a:13:df:5c:47:67:
         35:c3:a0:19:9f:5d:cc:30:3d:fc:58:82:79:e2:93:87:1d:4d:
         51:8c:b8:ef:38:f0:cc:75:d1:be:7c:1d:b1:ac:53:36:e5:d6:
         f3:29:5e:0c:b2:85:12:1a:2f:e2:6f:bb:a5:95:73:56:90:44:
         45:00:83:1d:75:a6:e6:f6:cc:62:f7:f2:db:3c:71:19:08:67:
         52:6b:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:46 2026 by rpki-client