Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
File:                     B8A1A7850FE4606645CDB993613F0326921CB0E7.mft (raw, json)
Hash identifier:          m5Y+88CoTB/dDohuib6ILkNWlIPuJKNgi9Ex6p+9kbY=
Subject key identifier:   38:C1:01:28:B7:7A:8A:4A:52:B0:0D:D7:85:CB:DC:B0:5E:1E:3D:17
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       51987A713C4820C717FFD0FAF4CDD70B604D775A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
Manifest number:          76
Signing time:             Tue 28 Jul 2026 23:05:19 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 01:53:19 +0000
Files and hashes:         1: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=)
                          2: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=)
                          3: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: yPQoyk2IWcVDeL52Wegfblo5RoA0TlgF1Qqwyri7gis=)
                          4: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: IL+cf5Jp1UTXtxNmsZx0/FmjnEqHri/lduufwa4pgNw=)
                          5: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: JkqcF39siQEpLVJW2gQ2ytUcN1jCjiFbN20NnLblPt0=)
                          6: B8A1A7850FE4606645CDB993613F0326921CB0E7.crl (hash: D7mRdUK/exCuSgMtrLvmUv3e88JB47JGpl4W3gB1bcE=)
                          7: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=)
                          8: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: TpopNA8dhMYp5nMtSS2yNBcol8TPklO5YRMrK3mUgQk=)
                          9: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=)
                          10: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: TmgfY35J3ejv4aaplxSsjZ2AmeTrspanURzc+GyKlb0=)
                          11: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: OL7tge3S2rADVt1ySDrlxO2bvMqBatfPuoG5qc2eXPc=)
                          12: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: zaokcuHNDzcmimcaKDVhoGvkO70knqdLhKxQi56iB3c=)
                          13: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: Z1LJzpos2TJA/rbCpeFoVSV3AuCvaZXzL6M2aKFZMOk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:98:7a:71:3c:48:20:c7:17:ff:d0:fa:f4:cd:d7:0b:60:4d:77:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: Jul 28 23:00:19 2026 GMT
            Not After : Jul 30 01:53:19 2026 GMT
        Subject: CN=38C10128B77A8A4A52B00DD785CBDCB05E1E3D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:61:55:b3:f9:50:44:45:91:e9:28:e0:b8:
                    1c:ab:a2:5e:df:79:9a:73:04:d8:3d:c1:3e:98:0a:
                    37:30:3b:4a:e1:ef:6d:3d:cc:be:46:71:67:64:92:
                    19:1d:89:c5:f4:df:b0:5c:fb:f1:c1:89:33:72:27:
                    f6:7b:06:58:80:14:8d:0e:8e:c8:9f:15:78:3c:31:
                    17:d8:c7:2d:ab:dc:fc:9b:3f:d4:86:98:ed:20:a8:
                    3b:21:ea:fd:14:22:80:66:d6:32:85:f1:4b:84:62:
                    91:f3:6c:b8:5a:8b:25:25:7d:4e:92:f9:91:62:5e:
                    a4:a4:c9:33:40:4d:fd:98:54:e8:e4:6a:86:f6:09:
                    b3:8c:3c:2d:94:74:7f:e4:be:a3:38:b9:3d:bc:ce:
                    c8:b1:93:70:84:f7:15:73:84:3e:e5:5f:9c:fb:99:
                    d3:01:eb:f4:d0:59:0d:37:3c:20:9b:f6:b3:bc:db:
                    67:72:64:8b:6a:46:16:66:10:aa:fa:51:1f:c7:4b:
                    9f:05:b8:36:db:2d:4c:83:95:2c:34:d9:b8:50:22:
                    e7:de:1c:39:e8:6e:5a:cf:97:f4:d9:53:aa:4a:c4:
                    7b:3e:78:7f:4f:00:3d:31:db:f4:71:be:8e:84:d3:
                    33:54:7d:33:7a:77:f6:aa:58:bd:3a:fb:98:54:76:
                    9a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C1:01:28:B7:7A:8A:4A:52:B0:0D:D7:85:CB:DC:B0:5E:1E:3D:17
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5b:ec:ad:61:3e:2d:0e:00:cf:54:51:87:5d:e1:e7:1a:2f:
         da:e2:41:5d:66:0f:c1:58:f8:67:ad:28:8d:3f:62:b5:a2:24:
         02:da:53:a1:cb:f5:d2:cd:e5:35:ff:87:3b:7b:85:83:55:89:
         b7:bb:b5:04:5d:b9:4b:46:84:bd:29:b0:da:67:66:8a:23:97:
         47:74:98:17:fc:e8:1a:9e:f8:ce:42:fc:75:9c:26:50:78:45:
         98:5a:03:aa:dc:25:11:93:94:a6:29:c3:4c:34:3b:25:2c:b3:
         c2:dc:f9:f7:c7:74:70:de:83:5c:40:a5:3d:77:77:91:a6:61:
         78:fc:fa:01:e6:84:da:6c:55:7f:a5:c7:51:3a:94:07:5f:e9:
         77:3d:ac:5f:aa:35:41:2f:ce:f9:30:44:d1:ea:09:1e:47:d5:
         ef:9d:39:07:f2:63:88:74:9b:37:7f:43:6d:28:fa:67:9e:06:
         94:46:0a:7f:bc:0a:9d:7c:2d:49:43:42:41:df:42:7e:93:56:
         c4:f4:ca:fc:ee:c7:0a:c0:2b:f7:4e:9c:53:b3:7e:26:4f:d4:
         6c:03:fa:a4:93:6b:f7:f7:a2:25:c0:0b:ff:d5:cc:7e:e7:3c:
         82:ef:f6:07:13:b0:13:e8:54:dc:20:da:34:8d:66:c2:ea:d0:
         60:e3:7a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:09 2026 by rpki-client