Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
File:                     5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft (raw, json)
Hash identifier:          PAUH4Jrr0yU5j+CGzlHWGaSqVE4AuLO9pxnNZgJmeZY=
Subject key identifier:   87:CE:F8:77:7E:ED:18:B8:75:B7:D5:5C:30:90:BA:BE:61:8D:71:59
Authority key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C
Certificate issuer:       /CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
Certificate serial:       2929324F45A05274EA7C2112C5C3E133BDF6E30B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 16:39:39 +0000
Manifest this update:     Sat 13 Jun 2026 16:34:39 +0000
Manifest next update:     Sun 14 Jun 2026 20:33:39 +0000
Files and hashes:         1: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: /gmLM+AlvVZmZ1aC4xTqncyP3CJDlsdR9nXHmByTkCU=)
                          2: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: djEgtSTkE/m5IayWnkoTKB0EhOrsppytUQzWTVEnG/A=)
                          3: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: k71wAWLK9lWSB9of2XNi/2f+HUpw7qh91wC52CYzZ9I=)
                          4: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: mjGJxH6ziPyBnTtwEJk9cCU5dFx1hVDJJz3eyJDrtfU=)
                          5: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 0ARU4umpFLyMta2vB6qYPPj5Ig4hYBGPCu9MzyUF/8A=)
                          6: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: hSK8N/vC2/9gXsGi7sFYityEE3YHIpxX/5Nfow0h5pI=)
                          7: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: dxfdhNXh202P44oHhJYRmZOKu5Lqt6H/PJxnBPCKWdo=)
                          8: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: zhBd5a5gGTbtet5YBbXE5S+qo1B6mGLmWLRBGJ6q7+o=)
                          9: 5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl (hash: 0Viaken9ir9rORujR7o7p/lfjcyQ0FvtHIivr62i/pU=)
                          10: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: T2qYaU04VQzWeYCnQwxqbKhnW+Yc8luFZj24cheJV1Y=)
                          11: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0qSPCAZrOfi5Y9XILy5crgt/ktdpcPhlsL8t7vKQnzI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl
                          rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:29:32:4f:45:a0:52:74:ea:7c:21:12:c5:c3:e1:33:bd:f6:e3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C
        Validity
            Not Before: Jun 13 16:34:39 2026 GMT
            Not After : Jun 14 20:33:39 2026 GMT
        Subject: CN=87CEF8777EED18B875B7D55C3090BABE618D7159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:6d:73:b7:58:5c:f7:60:10:c0:72:d1:07:
                    0b:38:02:e7:97:c3:8f:d0:59:40:ea:a6:ae:e8:c8:
                    66:f5:01:74:ec:90:49:58:fe:ed:06:81:14:af:57:
                    3c:6f:5f:24:0b:4e:4f:a5:ef:51:60:f9:3b:4b:83:
                    10:c0:1b:69:6a:09:b9:27:24:58:bb:19:b1:e2:9f:
                    46:59:fa:8b:af:03:d0:12:a2:57:d7:90:3b:6f:35:
                    0b:49:b5:dc:19:62:dd:e0:a5:22:5d:7e:e9:77:72:
                    39:95:e4:8d:ee:db:c9:f3:29:0b:91:a1:ff:bc:bb:
                    35:74:22:ee:8d:46:fd:04:c1:45:60:26:51:c2:6d:
                    18:b1:7a:19:68:23:32:89:3b:63:e1:c2:0f:20:ae:
                    1d:e3:81:99:d0:0c:b1:e6:82:54:f5:c4:50:fc:a5:
                    60:b5:18:d3:0e:5b:59:04:88:d1:76:32:bc:a7:f4:
                    d4:d5:4a:df:00:be:eb:1e:fb:e6:1e:42:1a:8e:01:
                    3b:6a:67:dc:6e:32:7d:3b:33:a9:ba:86:ae:aa:d5:
                    47:27:ec:11:55:a6:4b:86:fb:ee:7e:88:b3:aa:7d:
                    0b:18:59:5e:e5:76:e8:f0:8a:60:9d:dc:97:d9:21:
                    0b:0f:ee:ee:cc:fe:a5:76:f4:19:f0:12:14:f7:d1:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CE:F8:77:7E:ED:18:B8:75:B7:D5:5C:30:90:BA:BE:61:8D:71:59
            X509v3 Authority Key Identifier:
                keyid:5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b8:c4:d8:6c:0f:93:4e:cc:6b:f3:1b:ab:6f:50:54:68:bd:
         fd:30:58:60:3a:37:9e:46:73:5a:07:82:c2:8b:59:cf:66:73:
         d4:bb:3d:f1:41:31:2d:ff:ae:18:ac:df:f0:a7:98:14:0d:ed:
         8c:6d:37:16:ec:ee:f7:57:ff:10:e3:6d:0d:41:42:fc:90:b7:
         93:bf:f3:e6:0b:ea:e9:41:96:5f:26:65:68:8f:93:a1:9f:8f:
         c1:cd:3b:95:6c:d1:73:b6:30:d4:9a:b0:1b:e0:31:ca:7e:19:
         7b:9a:68:26:f5:58:4f:79:63:61:e5:35:9f:99:95:1e:e1:13:
         01:9a:86:a6:07:05:ef:6a:17:6b:cc:d0:6a:09:6c:db:f1:01:
         7c:98:0e:cb:89:a4:38:fb:e9:c5:c7:57:34:2d:42:15:c6:72:
         d1:a7:ef:24:b7:5e:35:e4:1d:db:d6:c9:ad:fc:0c:8e:41:10:
         ea:eb:36:26:a2:65:81:f9:e3:81:8c:a3:55:84:18:22:24:21:
         ee:43:4a:27:a8:de:c3:60:e7:01:9b:52:fc:6f:f3:80:23:80:
         99:25:21:2d:c2:a2:22:db:23:0c:b8:ca:67:dd:77:b8:4b:74:
         37:3d:ef:65:1a:aa:56:1b:28:ea:f6:fa:5d:6d:1f:39:de:d4:
         12:4f:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:07:56 2026 by rpki-client