Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
File:                     BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft (raw, json)
Hash identifier:          pI2/GT7Gwof0bkjFzA0e0PbVZukBYJYgLQjGuhIpAiM=
Subject key identifier:   2F:DB:95:90:87:13:FB:4C:9D:E6:39:66:AC:85:24:BF:EC:41:E1:4C
Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6
Certificate issuer:       /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
Certificate serial:       24738234C6A86B31669E1BD1668146A783A1C137
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 11:08:02 +0000
Manifest this update:     Sat 13 Jun 2026 11:03:02 +0000
Manifest next update:     Sun 14 Jun 2026 12:22:02 +0000
Files and hashes:         1: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl (hash: c3LGnLnx6Ispqk8LONeAoGhpg+wvaTwz7Q3XRPlzRTk=)
                          2: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=)
                          3: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: QGfwj5bqNP4jOjjdpeGZhiTRodQ0EdpPB4bLvU+Pufs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl
                          rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:73:82:34:c6:a8:6b:31:66:9e:1b:d1:66:81:46:a7:83:a1:c1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6
        Validity
            Not Before: Jun 13 11:03:02 2026 GMT
            Not After : Jun 14 12:22:02 2026 GMT
        Subject: CN=2FDB95908713FB4C9DE63966AC8524BFEC41E14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:5a:e9:99:e4:25:0a:e3:5f:10:4b:4c:ba:
                    77:b3:f6:f5:64:2a:c6:0a:19:2c:15:d0:af:41:47:
                    df:13:90:c5:47:98:b8:91:27:05:b3:df:3b:56:94:
                    9e:6d:a5:f9:0f:e5:7e:cc:98:5d:61:71:d2:6a:d4:
                    18:ef:e0:0e:bd:b6:eb:b2:2e:a3:b8:20:cc:8c:29:
                    b1:64:4a:2a:1a:ff:12:a7:21:dc:89:2a:3d:72:d2:
                    15:ae:ca:3e:3c:97:1d:14:53:12:86:bb:06:eb:62:
                    2e:bd:67:6c:70:e8:51:4a:cd:3c:a7:57:17:d7:11:
                    11:83:35:1b:d2:a8:04:10:27:19:fb:87:dd:33:55:
                    00:cc:05:18:35:c8:2b:42:8a:69:0c:ab:da:36:c8:
                    0d:78:66:a7:aa:fd:96:08:03:85:8f:3c:90:26:51:
                    c2:7b:83:b6:09:c1:e3:5a:2b:f6:be:e1:bf:13:fe:
                    53:8b:15:78:07:4b:5d:7b:26:3c:5d:7d:14:8f:57:
                    5d:09:15:19:67:fa:0a:5b:dc:93:3d:d7:c0:37:37:
                    a0:d0:96:83:8f:bc:51:70:ef:ae:ee:a5:31:cb:a2:
                    21:4c:e1:59:59:e9:d7:f0:43:bd:4c:57:63:43:1c:
                    12:97:22:65:a3:1f:3d:53:02:ca:af:25:aa:c9:d6:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DB:95:90:87:13:FB:4C:9D:E6:39:66:AC:85:24:BF:EC:41:E1:4C
            X509v3 Authority Key Identifier:
                keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ae:0c:69:f4:8b:af:36:02:20:e2:9c:fb:fb:15:3d:ab:69:
         0c:d1:01:0c:5e:b4:7b:36:8e:e9:96:53:3f:24:38:8e:ee:30:
         da:99:37:f7:1e:b1:bc:1c:b8:ed:9e:b3:12:5e:8c:fa:43:27:
         b9:be:d9:73:ab:d2:d2:25:d7:cf:d3:87:cc:38:64:78:35:00:
         c3:50:6f:7e:cf:db:3f:7c:9b:ff:46:87:71:cd:33:e3:fd:fe:
         09:40:2e:ae:aa:8d:6f:6a:82:d9:0d:b2:51:32:3b:32:59:18:
         ec:25:17:c2:4d:28:c1:04:c2:d5:5d:e7:15:ff:24:31:75:04:
         14:7a:cc:4e:ae:7b:98:ee:eb:03:ff:99:e9:c7:4e:9b:23:76:
         7a:55:b7:d8:f1:83:ab:a9:00:c2:cb:6f:17:5f:26:ca:eb:36:
         4b:99:4f:8e:ca:0d:13:0a:4f:ca:e1:17:83:f4:87:27:bd:44:
         06:39:38:72:1e:54:36:e5:bd:99:7f:27:73:78:1a:0c:13:f8:
         c3:b0:6f:d0:5a:be:f3:d6:27:1d:44:0f:d7:c7:d3:ed:4e:b4:
         12:ad:4c:5f:89:fa:af:97:09:6a:c5:7a:58:1e:0b:86:93:04:
         39:09:cb:63:d8:6f:f5:e5:3e:1c:b8:76:dc:da:33:c7:3e:ab:
         62:30:64:53
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJHOCNMaoazFmnhvRZoFGp4OhwTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1
MDdGNTVENjAeFw0yNjA2MTMxMTAzMDJaFw0yNjA2MTQxMjIyMDJaMDMxMTAvBgNV
BAMTKDJGREI5NTkwODcxM0ZCNEM5REU2Mzk2NkFDODUyNEJGRUM0MUUxNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSEVrpmeQlCuNfEEtMunez9vVk
KsYKGSwV0K9BR98TkMVHmLiRJwWz3ztWlJ5tpfkP5X7MmF1hcdJq1Bjv4A69tuuy
LqO4IMyMKbFkSioa/xKnIdyJKj1y0hWuyj48lx0UUxKGuwbrYi69Z2xw6FFKzTyn
VxfXERGDNRvSqAQQJxn7h90zVQDMBRg1yCtCimkMq9o2yA14Zqeq/ZYIA4WPPJAm
UcJ7g7YJweNaK/a+4b8T/lOLFXgHS117JjxdfRSPV10JFRln+gpb3JM918A3N6DQ
loOPvFFw767upTHLoiFM4VlZ6dfwQ71MV2NDHBKXImWjHz1TAsqvJarJ1j5RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUL9uVkIcT+0yd5jlmrIUkv+xB4UwwHwYDVR0j
BBgwFoAUvI8Pn3EFkHPt4jucrZfZr1B/VdYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTQ2NGNiZWUtYzUxMy00NmM2LWExZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3
MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1MDdGNTVENi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQzhGMEY5RjcxMDU5MDczRURFMjNCOUNBRDk3RDlBRjUwN0Y1
NUQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx
ZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5
QUY1MDdGNTVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKmuDGn0i682AiDinPv7FT2raQzRAQxetHs2
jumWUz8kOI7uMNqZN/cesbwcuO2esxJejPpDJ7m+2XOr0tIl18/Th8w4ZHg1AMNQ
b37P2z98m/9Gh3HNM+P9/glALq6qjW9qgtkNslEyOzJZGOwlF8JNKMEEwtVd5xX/
JDF1BBR6zE6ue5ju6wP/menHTpsjdnpVt9jxg6upAMLLbxdfJsrrNkuZT47KDRMK
T8rhF4P0hye9RAY5OHIeVDblvZl/J3N4GgwT+MOwb9BavvPWJx1ED9fH0+1OtBKt
TF+J+q+XCWrFelgeC4aTBDkJy2PYb/XlPhy4dtzaM8c+q2IwZFM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:30 2026 by rpki-client