Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
File:                     7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft (raw, json)
Hash identifier:          lOyuECoLRZ0cTsgrIPVxnIRMlJ7djFA/On/WpbRXrdo=
Subject key identifier:   BD:9E:B2:AF:FF:31:CA:9B:93:3C:FA:4C:A9:09:45:EE:E7:0A:68:9B
Authority key identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96
Certificate issuer:       /CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296
Certificate serial:       1361DC9B4550C3E1AFD3252EA64B433968B45D32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
Manifest number:          0F
Signing time:             Wed 13 May 2026 00:49:37 +0000
Manifest this update:     Wed 13 May 2026 00:44:37 +0000
Manifest next update:     Thu 14 May 2026 04:23:37 +0000
Files and hashes:         1: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl (hash: rIz34yj+x8JihX9uO7F5krRwyGuSc4X2Ot1Mwtiitu4=)
                          2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: OI2+L8kOyx+uXkdHVQ3bQvjHZ5kkvK0ATomJcIp9VW0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl
                          rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:61:dc:9b:45:50:c3:e1:af:d3:25:2e:a6:4b:43:39:68:b4:5d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296
        Validity
            Not Before: May 13 00:44:37 2026 GMT
            Not After : May 14 04:23:37 2026 GMT
        Subject: CN=BD9EB2AFFF31CA9B933CFA4CA90945EEE70A689B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f8:05:4d:03:22:c3:de:ed:b5:e8:e6:55:2a:
                    88:a3:f5:13:94:90:40:c2:25:4e:9f:74:93:b4:fb:
                    a0:03:73:8c:f5:aa:a0:21:3f:a5:f7:eb:e5:24:68:
                    d8:fc:89:74:aa:49:76:d4:76:73:ce:de:75:66:45:
                    ce:29:97:c6:ab:78:1b:8d:86:ce:97:3b:4c:be:28:
                    f8:1b:5d:37:4b:6e:03:ba:01:9c:4b:44:0d:3d:79:
                    61:f9:c5:3c:18:ef:29:cf:8c:a7:45:81:32:8e:e9:
                    d8:73:c3:22:08:3e:a3:4f:02:b2:d2:25:ec:b1:32:
                    40:82:d5:a5:0f:b2:bb:27:f9:00:41:2e:2d:f9:92:
                    d6:eb:0a:f8:fc:1f:ea:47:53:74:32:48:65:c0:cf:
                    8a:3c:3a:cb:6e:87:aa:a5:5d:b8:b7:0c:49:a3:93:
                    74:6b:76:8f:f0:4b:ff:ca:36:e7:fa:f5:50:7a:cc:
                    ef:86:b5:c7:db:29:c9:4b:28:8d:44:6c:0d:47:f6:
                    02:a6:4a:40:6a:cd:01:f6:ed:da:b1:7e:dc:db:65:
                    6f:4f:66:99:d0:2e:7f:b8:82:d1:a8:8a:42:da:6a:
                    4d:87:80:1a:3d:0d:41:84:d7:e8:16:7f:8c:ad:64:
                    91:58:86:4e:2b:76:75:1e:52:0c:6e:d9:49:c2:92:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9E:B2:AF:FF:31:CA:9B:93:3C:FA:4C:A9:09:45:EE:E7:0A:68:9B
            X509v3 Authority Key Identifier:
                keyid:7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fd:6c:e8:4a:4e:fa:51:dc:40:8f:36:ea:27:58:d8:c8:fa:
         b2:0b:ac:ce:30:74:aa:e4:9e:bf:ac:4b:fb:e6:2e:ed:7c:7a:
         51:58:61:6e:5c:c0:ca:2d:b3:02:ce:7d:e6:9f:d1:c5:2c:6b:
         ae:08:91:d5:97:90:06:ad:5e:ba:5c:92:3b:19:46:c7:0c:19:
         e8:71:68:0d:dc:64:00:5b:ed:56:44:cc:b5:bd:4d:d5:32:bd:
         b0:ed:5b:77:90:49:e0:10:4e:d2:91:a7:c6:7e:07:d9:0e:69:
         aa:8c:72:9b:b0:24:a4:e2:f9:12:1a:c7:22:8f:54:03:11:06:
         87:a3:3d:6f:c3:d4:0b:1f:da:84:9c:e6:5a:1e:0c:26:9d:7a:
         a6:cc:1f:7a:8d:49:07:f4:2c:02:bf:0d:ba:ca:35:92:44:87:
         91:0d:3e:2d:51:bd:39:74:55:e2:49:3c:77:98:6b:52:11:3e:
         18:b3:a3:d1:29:70:ab:7d:cd:8b:da:36:94:60:cf:99:a7:b6:
         72:18:d9:a7:f2:2f:d8:44:89:2c:5e:3b:fd:5e:92:e0:e7:7c:
         8f:9a:75:66:d2:69:b6:56:d0:fb:84:20:31:0c:14:90:d3:9a:
         43:69:88:2d:c5:ac:ab:77:9d:4f:1b:fd:b4:95:89:82:a4:77:
         41:5a:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:09 2026 by rpki-client