Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft
File:                     B7A0E7998A9F266F3882F19118691CB225356F5D.mft (raw, json)
Hash identifier:          yimJ0xPCK3Emdcu2BoTLhT6x10KkxkpNJouJ17FGH6Q=
Subject key identifier:   40:AB:29:69:22:1C:E7:15:FF:1D:66:10:20:44:3F:57:CB:9C:90:A2
Authority key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D
Certificate issuer:       /CN=B7A0E7998A9F266F3882F19118691CB225356F5D
Certificate serial:       7CE639275765C822A5E8FEC4A8E4F7C26B395C44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft
Manifest number:          3E
Signing time:             Tue 16 Jun 2026 23:47:53 +0000
Manifest this update:     Tue 16 Jun 2026 23:42:53 +0000
Manifest next update:     Thu 18 Jun 2026 02:28:53 +0000
Files and hashes:         1: B7A0E7998A9F266F3882F19118691CB225356F5D.crl (hash: OfF9pfVUj/+qezpJdz9W5koaR3wu5FacPI4Xk9CHmmo=)
                          2: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: bqleVr/CtV0kID5GQzDKQocY8p72teKu2kr0m36+c90=)
                          3: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: i7xKoh7QIZf/wi1EOh2BtN5rz2lc5CUAErnYSBr7+OA=)
                          4: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: zUqTI/Bo3fTJZJzitShFowGX98l0p/JLTSiXxFVwOj4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl
                          rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e6:39:27:57:65:c8:22:a5:e8:fe:c4:a8:e4:f7:c2:6b:39:5c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A0E7998A9F266F3882F19118691CB225356F5D
        Validity
            Not Before: Jun 16 23:42:53 2026 GMT
            Not After : Jun 18 02:28:53 2026 GMT
        Subject: CN=40AB2969221CE715FF1D661020443F57CB9C90A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:01:b9:e0:1f:a0:64:f5:5e:b5:c8:a5:f8:
                    c9:46:a6:2d:19:86:b0:7d:35:55:16:5a:7f:34:03:
                    50:5e:24:77:74:e5:71:c8:9a:4b:5a:73:d3:c1:3b:
                    d8:45:73:52:76:c6:ef:98:a1:a8:90:de:e6:21:5e:
                    23:60:74:04:21:55:f7:06:82:47:9d:86:7e:d2:92:
                    8b:56:aa:3c:41:8c:e3:68:ad:f1:81:77:bd:07:22:
                    63:43:9c:3d:03:ce:23:46:b5:52:94:39:87:88:dc:
                    8c:34:e8:56:6b:9b:b7:db:45:45:06:d3:ce:36:2d:
                    6d:3f:b8:a6:65:28:9f:f0:32:6a:27:53:97:a9:10:
                    6b:d6:60:b4:79:8a:07:09:39:ef:40:3f:62:67:84:
                    f0:9c:b3:2c:02:10:83:91:e9:19:b6:fa:df:2f:91:
                    57:17:f3:1e:f4:17:3b:6c:7d:d7:5b:d4:f9:4a:e3:
                    08:55:f8:61:40:7a:86:1a:c1:b4:17:99:9f:e5:12:
                    a7:73:4e:a9:e0:06:f5:ab:15:fe:a3:d0:ae:08:a6:
                    53:6b:0c:e4:c2:3a:05:71:65:6a:3c:f3:b5:19:1a:
                    d9:5e:b0:28:93:d3:5c:41:3e:1c:f2:c9:9c:08:e5:
                    22:1a:ab:6a:4b:1c:65:6e:1c:84:2d:a4:44:f8:60:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:29:69:22:1C:E7:15:FF:1D:66:10:20:44:3F:57:CB:9C:90:A2
            X509v3 Authority Key Identifier:
                keyid:B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:9d:59:64:f9:d1:81:ea:e3:be:fd:b2:2e:e3:10:f6:07:
         89:aa:42:8d:ec:de:f7:ee:72:f0:54:91:40:df:6b:c1:33:04:
         5d:ac:bc:20:a1:7e:8b:fe:7f:11:9d:c7:fa:d6:2a:d5:6e:c1:
         bf:68:aa:8f:e0:00:42:cd:87:6c:a4:16:5f:09:70:1c:39:b5:
         7a:ea:0c:4b:1f:79:27:9d:90:3a:c3:2e:66:2a:98:31:aa:3c:
         ea:47:a7:3e:4c:f7:f4:6a:ed:e2:ea:50:0a:ec:bc:4f:46:54:
         db:b6:4c:2a:3a:d1:92:1e:09:b4:97:db:3f:67:de:19:67:aa:
         4c:21:0f:05:03:32:53:89:29:af:91:d8:0d:43:75:24:8c:51:
         04:cd:32:75:be:42:6a:21:29:5b:19:58:9b:93:5c:e7:5b:67:
         a2:45:41:a9:8f:9c:98:f5:47:3a:61:18:06:70:fb:43:ce:cd:
         ac:78:72:10:68:e4:a5:41:70:1b:59:b5:01:31:fb:6f:64:a9:
         ac:97:32:99:19:0e:3b:79:30:59:f7:24:ce:5c:6c:c1:01:ad:
         b3:24:a8:b2:0d:3c:b2:a1:ff:a0:f6:41:fb:df:3f:2e:19:3a:
         f9:b3:11:92:8b:92:2c:91:89:a9:bd:81:43:ed:b3:09:52:e6:
         1d:e0:a9:c3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfOY5J1dlyCKl6P7EqOT3wms5XEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIy
NTM1NkY1RDAeFw0yNjA2MTYyMzQyNTNaFw0yNjA2MTgwMjI4NTNaMDMxMTAvBgNV
BAMTKDQwQUIyOTY5MjIxQ0U3MTVGRjFENjYxMDIwNDQzRjU3Q0I5QzkwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHwG54B+gZPVetcil+MlGpi0Z
hrB9NVUWWn80A1BeJHd05XHImktac9PBO9hFc1J2xu+YoaiQ3uYhXiNgdAQhVfcG
gkedhn7SkotWqjxBjONorfGBd70HImNDnD0DziNGtVKUOYeI3Iw06FZrm7fbRUUG
0842LW0/uKZlKJ/wMmonU5epEGvWYLR5igcJOe9AP2JnhPCcsywCEIOR6Rm2+t8v
kVcX8x70Fztsfddb1PlK4whV+GFAeoYawbQXmZ/lEqdzTqngBvWrFf6j0K4IplNr
DOTCOgVxZWo887UZGtlesCiT01xBPhzyyZwI5SIaq2pLHGVuHIQtpET4YJx/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQKspaSIc5xX/HWYQIEQ/V8uckKIwHwYDVR0j
BBgwFoAUt6DnmYqfJm84gvGRGGkcsiU1b10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjVhNzJlYjktOGU1My00NDcyLWEzNWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4
QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIyNTM1NkY1RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CN0EwRTc5OThBOUYyNjZGMzg4MkYxOTExODY5MUNCMjI1MzU2
RjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz
NWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFD
QjIyNTM1NkY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHvLnVlk+dGB6uO+/bIu4xD2B4mqQo3s3vfu
cvBUkUDfa8EzBF2svCChfov+fxGdx/rWKtVuwb9oqo/gAELNh2ykFl8JcBw5tXrq
DEsfeSedkDrDLmYqmDGqPOpHpz5M9/Rq7eLqUArsvE9GVNu2TCo60ZIeCbSX2z9n
3hlnqkwhDwUDMlOJKa+R2A1DdSSMUQTNMnW+QmohKVsZWJuTXOdbZ6JFQamPnJj1
RzphGAZw+0POzax4chBo5KVBcBtZtQEx+29kqayXMpkZDjt5MFn3JM5cbMEBrbMk
qLINPLKh/6D2QfvfPy4ZOvmzEZKLkiyRiam9gUPtswlS5h3gqcM=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:46 2026 by rpki-client