Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
File:                     B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json)
Hash identifier:          NkkYOHw9A15Xus8qXcSqhkwClNobCuQ+3nw0DENXL/g=
Subject key identifier:   BF:E2:A4:9C:3B:76:8C:4F:F9:FF:1C:89:43:AC:24:41:E1:F4:48:99
Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
Certificate issuer:       /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Certificate serial:       3C04801078051928F53737C596F3A7D99BC8B9D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
Manifest number:          76
Signing time:             Tue 28 Jul 2026 23:45:52 +0000
Manifest this update:     Tue 28 Jul 2026 23:40:52 +0000
Manifest next update:     Thu 30 Jul 2026 01:40:52 +0000
Files and hashes:         1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=)
                          2: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: 9JX8DiQiYsL1QIKKnlpmbucbG0hAcj4zJPRPO3PR+lo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
                          rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:04:80:10:78:05:19:28:f5:37:37:c5:96:f3:a7:d9:9b:c8:b9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
        Validity
            Not Before: Jul 28 23:40:52 2026 GMT
            Not After : Jul 30 01:40:52 2026 GMT
        Subject: CN=BFE2A49C3B768C4FF9FF1C8943AC2441E1F44899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:e4:1d:f9:17:65:bc:f9:02:64:54:cc:ea:
                    1f:f3:23:d8:ce:d1:b2:64:27:a9:3f:55:b3:e9:21:
                    60:c8:82:58:e6:4a:a2:1c:07:fa:a8:4c:52:9a:67:
                    44:59:a6:79:bd:f4:72:1e:4a:c6:52:d7:88:b2:66:
                    54:24:6c:ff:98:53:cc:c7:5a:bf:7d:ce:44:88:1f:
                    9e:31:ad:3b:cf:f1:c7:47:75:4d:57:62:b8:57:1b:
                    7a:ad:e4:0d:d2:48:89:a4:26:d5:77:76:e7:ed:bd:
                    1e:3c:de:3d:aa:cd:03:bf:43:61:2e:06:a0:b1:ed:
                    3c:b5:9b:4d:23:a3:45:e4:e9:5b:14:48:64:10:f6:
                    9c:37:64:fc:4b:9c:b4:0b:c0:c2:6b:c0:08:68:86:
                    50:6f:71:a1:22:b9:e2:76:bf:d9:ef:54:60:24:74:
                    dd:8f:35:c4:66:b2:38:4c:17:7e:52:9d:26:0c:8b:
                    11:52:c6:51:3a:b8:e4:24:59:22:75:d6:1d:2b:62:
                    c2:a1:37:a5:80:a2:9f:86:15:34:0b:b9:17:51:e0:
                    82:53:4a:f4:f8:9e:68:7a:c2:54:bd:f4:b1:08:73:
                    ce:23:87:e9:96:c9:cc:23:09:b6:d9:0c:41:21:42:
                    0d:f1:a1:69:2c:4d:4d:50:ca:cd:1f:06:b9:89:17:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E2:A4:9C:3B:76:8C:4F:F9:FF:1C:89:43:AC:24:41:E1:F4:48:99
            X509v3 Authority Key Identifier:
                keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:74:79:27:73:3d:33:c8:e6:de:40:88:00:0d:66:e2:4e:19:
         3b:ac:c6:2e:27:50:96:93:a9:56:3f:7b:20:7e:ec:24:7f:7c:
         db:36:6b:4b:84:24:fa:17:e5:cb:14:f5:8d:46:f5:4a:a4:24:
         d3:b6:e7:11:80:ad:5f:ca:6e:43:68:3f:05:2e:a5:35:55:ad:
         e3:2a:20:61:4d:f1:03:52:97:a0:50:f7:b4:fa:05:2e:61:c2:
         2d:a7:33:ef:78:e5:b7:fd:fe:44:d3:bf:ee:58:26:80:d2:c6:
         bf:86:0b:c0:ff:cd:41:ad:3a:33:82:c3:a3:e8:aa:f5:ec:b0:
         3b:6a:1a:b7:60:09:7e:b1:48:c5:6f:e3:9c:52:14:b4:20:f5:
         00:cd:59:47:ff:b2:f5:52:32:3b:bb:d2:8c:4e:67:28:c9:69:
         5e:d4:a5:2f:ac:b8:40:be:71:ff:9d:42:23:db:20:96:99:f8:
         82:c2:04:28:a2:db:91:82:74:f6:7e:b4:9a:85:ed:10:6e:bc:
         c0:26:c8:90:96:d3:d7:e4:d8:fb:6f:35:da:81:65:06:d8:62:
         80:ee:7f:66:07:cb:73:ed:74:10:d9:b9:b2:88:30:e2:f4:d2:
         d2:d2:d1:b9:f3:ff:e5:9b:cc:ef:e4:32:ed:75:62:3b:4f:34:
         56:c9:8e:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPASAEHgFGSj1NzfFlvOn2ZvIudIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3
NERDMkEwNTAeFw0yNjA3MjgyMzQwNTJaFw0yNjA3MzAwMTQwNTJaMDMxMTAvBgNV
BAMTKEJGRTJBNDlDM0I3NjhDNEZGOUZGMUM4OTQzQUMyNDQxRTFGNDQ4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEveQd+RdlvPkCZFTM6h/zI9jO
0bJkJ6k/VbPpIWDIgljmSqIcB/qoTFKaZ0RZpnm99HIeSsZS14iyZlQkbP+YU8zH
Wr99zkSIH54xrTvP8cdHdU1XYrhXG3qt5A3SSImkJtV3duftvR483j2qzQO/Q2Eu
BqCx7Ty1m00jo0Xk6VsUSGQQ9pw3ZPxLnLQLwMJrwAhohlBvcaEiueJ2v9nvVGAk
dN2PNcRmsjhMF35SnSYMixFSxlE6uOQkWSJ11h0rYsKhN6WAop+GFTQLuRdR4IJT
SvT4nmh6wlS99LEIc84jh+mWycwjCbbZDEEhQg3xoWksTU1Qys0fBrmJF93TAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUv+KknDt2jE/5/xyJQ6wkQeH0SJkwHwYDVR0j
BBgwFoAUtAzVSW50ZMOYMXf2WtFPiXTcKgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2Y2ZWEyMjEtNzdiNy00NzkxLWE4YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2
RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3NERDMkEwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNDBDRDU0OTZFNzQ2NEMzOTgzMTc3RjY1QUQxNEY4OTc0REMy
QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4
YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRG
ODk3NERDMkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJd0eSdzPTPI5t5AiAANZuJOGTusxi4nUJaT
qVY/eyB+7CR/fNs2a0uEJPoX5csU9Y1G9UqkJNO25xGArV/KbkNoPwUupTVVreMq
IGFN8QNSl6BQ97T6BS5hwi2nM+945bf9/kTTv+5YJoDSxr+GC8D/zUGtOjOCw6Po
qvXssDtqGrdgCX6xSMVv45xSFLQg9QDNWUf/svVSMju70oxOZyjJaV7UpS+suEC+
cf+dQiPbIJaZ+ILCBCii25GCdPZ+tJqF7RBuvMAmyJCW09fk2PtvNdqBZQbYYoDu
f2YHy3PtdBDZubKIMOL00tLS0bnz/+WbzO/kMu11YjtPNFbJji0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:11:35 2026 by rpki-client