Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
File:                     B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft (raw, json)
Hash identifier:          QdoMRK8NT2kyqsa4Wc3tf/K+eO/CAJJngEoOXalnZPw=
Subject key identifier:   02:16:F8:EE:06:1F:CB:A7:77:31:06:B5:F2:57:3A:6F:D9:EB:B2:1C
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       475E3517A3C5DD7942568721F2F4DC44D731931D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
Manifest number:          76
Signing time:             Tue 28 Jul 2026 22:14:11 +0000
Manifest this update:     Tue 28 Jul 2026 22:09:11 +0000
Manifest next update:     Wed 29 Jul 2026 23:31:11 +0000
Files and hashes:         1: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg=)
                          2: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl (hash: aXFrj5HjhqSbh1DweoUnWzsMlSO19ZOZFQ1C6hQtF5w=)
                          3: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: tjiI+qv5K6jVgsJD0bWk0XAJK3Ch0HFCGyxU2fDhIKk=)
                          4: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=)
                          5: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=)
                          6: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=)
                          7: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=)
                          8: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8=)
                          9: 3130332e31362e3133392e302f32342d3234203d3e20313338303737.roa (hash: fb0u8nL2mSZSjhRNXrQKe5m4wVsqo96iE9FDTVCkkuc=)
                          10: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (hash: xLR88IyMVCA8vdgyK8OQ+LkpI8JImP1CEA8k4aA9Syk=)
                          11: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=)
                          12: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: Xej95JrdMsifVKYujoAl0DIGRkayLR1TXbEVcv1ObYw=)
                          13: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: IexADjY/vH+ci1AK/jeAttZdrOIQ48kpykD2boWk1lE=)
                          14: 3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (hash: gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=)
                          15: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: sbLJ41IDFdN5IJsomNQRipWLxXGCHRyqteaWEwRsz7Q=)
                          16: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=)
                          17: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: ofLAcZqnlKOmXqsmeIfCr72lWZy9ZeTWZkof0/9RVb8=)
                          18: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: rQv5s8+gPpGYB/vGkK0E1KzGoHeIzauVQLPwV+zcAQU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5e:35:17:a3:c5:dd:79:42:56:87:21:f2:f4:dc:44:d7:31:93:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: Jul 28 22:09:11 2026 GMT
            Not After : Jul 29 23:31:11 2026 GMT
        Subject: CN=0216F8EE061FCBA7773106B5F2573A6FD9EBB21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:39:b0:f3:b8:24:3c:05:92:24:c4:a4:c1:
                    07:b7:9d:9f:6f:a0:91:b9:5b:99:aa:63:43:f2:f2:
                    87:03:65:db:4c:90:9d:99:56:37:8b:5e:b1:af:93:
                    20:c6:7c:9c:d6:b4:2e:ce:0e:92:9b:cd:7a:91:2a:
                    b1:1a:d7:c3:cc:67:52:55:9e:a8:ba:ba:5d:b5:11:
                    68:94:c8:97:1a:95:47:4f:b1:94:21:28:1f:7d:8d:
                    94:e9:9f:2d:8b:99:54:f5:a8:ba:15:37:38:ec:b3:
                    ec:d3:3b:48:39:71:70:07:a4:54:d8:c8:e7:21:f1:
                    d3:c0:94:42:01:98:e6:67:8c:3c:cf:d6:59:98:1b:
                    b5:0d:e1:90:a3:8a:d3:ad:ed:64:1e:4b:d4:51:fa:
                    83:50:cd:0a:69:e0:7c:1c:75:4d:c2:fc:f3:d8:94:
                    2d:6b:05:43:8a:b8:3c:00:d3:b4:7f:01:c1:12:47:
                    de:a8:c1:16:76:1d:42:1e:33:0d:b5:45:25:a5:c5:
                    18:35:51:60:71:94:d8:96:64:38:72:cc:90:3b:09:
                    27:cf:95:ec:c6:2b:48:72:0b:9f:55:ad:ad:14:80:
                    de:b9:cb:f2:da:f2:cd:55:9a:10:7d:66:92:7c:de:
                    e9:89:0b:36:6c:9b:32:c3:f4:fd:67:11:a5:f3:39:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:16:F8:EE:06:1F:CB:A7:77:31:06:B5:F2:57:3A:6F:D9:EB:B2:1C
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:99:2d:75:55:a0:12:11:dd:cf:26:54:78:8a:30:6c:1c:22:
         de:35:6a:29:41:34:ab:9b:46:e3:5d:f0:f9:9f:f2:5e:e9:f1:
         ba:68:82:e5:9b:58:7e:e0:5c:1a:56:64:76:62:1a:ae:e7:7e:
         b9:01:43:50:1c:30:86:66:43:cc:27:cf:a8:ba:dd:37:3a:3d:
         66:59:20:aa:98:24:9a:f8:b3:d5:7c:a6:35:68:11:2c:fc:da:
         de:9d:75:34:2b:4a:c4:8e:4f:1f:a1:fb:ab:76:7d:45:f1:51:
         a5:97:9c:57:2e:4c:cc:22:1f:02:db:5a:d1:5b:d3:0f:38:68:
         fe:66:7f:7b:97:96:02:9b:37:bc:07:73:46:fa:12:15:6b:cd:
         3e:08:12:5c:74:20:4f:61:9c:9e:88:96:ce:4f:0e:ff:bc:74:
         7d:b9:57:38:cb:5c:3f:55:92:d7:b0:35:1d:62:70:d8:db:39:
         bb:d6:bb:0c:20:df:3c:cb:f9:38:ca:d3:fe:bf:43:da:9b:d1:
         54:eb:bf:00:63:ed:d2:be:8b:37:70:97:93:e4:60:80:54:6a:
         b0:70:76:4d:46:c4:dd:77:dd:fe:88:49:d2:07:66:1c:85:c9:
         ed:79:46:7e:89:3c:88:13:92:f9:ac:2e:28:bb:89:35:23:04:
         3f:4c:7c:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUR141F6PF3XlCVoch8vTcRNcxkx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg3QUM1QzEwNEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMz
NkM3NkUzMjAeFw0yNjA3MjgyMjA5MTFaFw0yNjA3MjkyMzMxMTFaMDMxMTAvBgNV
BAMTKDAyMTZGOEVFMDYxRkNCQTc3NzMxMDZCNUYyNTczQTZGRDlFQkIyMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFDmw87gkPAWSJMSkwQe3nZ9v
oJG5W5mqY0Py8ocDZdtMkJ2ZVjeLXrGvkyDGfJzWtC7ODpKbzXqRKrEa18PMZ1JV
nqi6ul21EWiUyJcalUdPsZQhKB99jZTpny2LmVT1qLoVNzjss+zTO0g5cXAHpFTY
yOch8dPAlEIBmOZnjDzP1lmYG7UN4ZCjitOt7WQeS9RR+oNQzQpp4HwcdU3C/PPY
lC1rBUOKuDwA07R/AcESR96owRZ2HUIeMw21RSWlxRg1UWBxlNiWZDhyzJA7CSfP
lezGK0hyC59Vra0UgN65y/La8s1VmhB9ZpJ83umJCzZsmzLD9P1nEaXzOTv9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAhb47gYfy6d3MQa18lc6b9nrshwwHwYDVR0j
BBgwFoAUuHrFwQTVGhbR/taqukDV8zbHbjIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmQ1YzQ3MTUtMjgyZS00NTdmLWI4OWUtMDQxYmY5MTEwYWY4LzAvQjg3QUM1QzEw
NEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMzNkM3NkUzMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CODdBQzVDMTA0RDUxQTE2RDFGRUQ2QUFCQTQwRDVGMzM2Qzc2
RTMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ1YzQ3MTUtMjgyZS00NTdmLWI4
OWUtMDQxYmY5MTEwYWY4LzAvQjg3QUM1QzEwNEQ1MUExNkQxRkVENkFBQkE0MEQ1
RjMzNkM3NkUzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA2ZLXVVoBIR3c8mVHiKMGwcIt41ailBNKub
RuNd8Pmf8l7p8bpoguWbWH7gXBpWZHZiGq7nfrkBQ1AcMIZmQ8wnz6i63Tc6PWZZ
IKqYJJr4s9V8pjVoESz82t6ddTQrSsSOTx+h+6t2fUXxUaWXnFcuTMwiHwLbWtFb
0w84aP5mf3uXlgKbN7wHc0b6EhVrzT4IElx0IE9hnJ6Ils5PDv+8dH25VzjLXD9V
ktewNR1icNjbObvWuwwg3zzL+TjK0/6/Q9qb0VTrvwBj7dK+izdwl5PkYIBUarBw
dk1GxN133f6ISdIHZhyFye15Rn6JPIgTkvmsLii7iTUjBD9MfJ0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:54 2026 by rpki-client