Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
File:                     B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft (raw, json)
Hash identifier:          u3rDxv2ztH7KK23G4lDHHfsJtoDPU/o+qJJPFG6xMno=
Subject key identifier:   91:D7:45:80:FD:1E:AA:E2:E6:AB:CB:16:5C:C1:CD:85:F0:D9:65:7B
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       5CD457FFCEA5603FB8F91749ECBA9AF844701C78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
Manifest number:          39
Signing time:             Sat 13 Jun 2026 08:59:46 +0000
Manifest this update:     Sat 13 Jun 2026 08:54:46 +0000
Manifest next update:     Sun 14 Jun 2026 12:25:46 +0000
Files and hashes:         1: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: sbLJ41IDFdN5IJsomNQRipWLxXGCHRyqteaWEwRsz7Q=)
                          2: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=)
                          3: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=)
                          4: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: rQv5s8+gPpGYB/vGkK0E1KzGoHeIzauVQLPwV+zcAQU=)
                          5: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8=)
                          6: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=)
                          7: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=)
                          8: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: ofLAcZqnlKOmXqsmeIfCr72lWZy9ZeTWZkof0/9RVb8=)
                          9: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: IexADjY/vH+ci1AK/jeAttZdrOIQ48kpykD2boWk1lE=)
                          10: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: Xej95JrdMsifVKYujoAl0DIGRkayLR1TXbEVcv1ObYw=)
                          11: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: tjiI+qv5K6jVgsJD0bWk0XAJK3Ch0HFCGyxU2fDhIKk=)
                          12: 3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (hash: gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=)
                          13: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg=)
                          14: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=)
                          15: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=)
                          16: 3130332e31362e3133392e302f32342d3234203d3e20313338303737.roa (hash: fb0u8nL2mSZSjhRNXrQKe5m4wVsqo96iE9FDTVCkkuc=)
                          17: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl (hash: D1bozBToCeunOIReKd/FNfe3bBn2aJozKxb4W3OedGU=)
                          18: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (hash: xLR88IyMVCA8vdgyK8OQ+LkpI8JImP1CEA8k4aA9Syk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d4:57:ff:ce:a5:60:3f:b8:f9:17:49:ec:ba:9a:f8:44:70:1c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: Jun 13 08:54:46 2026 GMT
            Not After : Jun 14 12:25:46 2026 GMT
        Subject: CN=91D74580FD1EAAE2E6ABCB165CC1CD85F0D9657B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:1e:58:9f:d4:51:1e:14:df:0d:ec:08:11:
                    d6:2b:e5:40:1e:20:31:cc:8c:57:df:66:10:f5:80:
                    e0:fe:9b:03:a2:06:10:36:51:d6:c5:d8:12:d6:6c:
                    89:b4:9d:45:69:98:5d:16:53:94:1f:02:51:a7:7d:
                    d4:55:6d:22:4b:f9:42:b0:b9:1b:f8:ea:5a:67:0e:
                    e4:2e:54:05:45:b6:f5:22:4c:21:ba:29:65:fa:3e:
                    2e:62:fa:b3:87:26:b0:8b:d6:78:68:47:42:7f:78:
                    99:11:19:65:e6:e5:b1:7d:8a:4d:7e:b9:65:05:3b:
                    c9:15:cd:f2:be:d1:39:1f:04:a7:0d:6d:f0:5e:71:
                    c7:ec:59:50:77:4a:c9:fd:24:3d:50:39:15:4f:e4:
                    0d:cc:10:ef:24:2b:af:c5:a3:e9:c7:86:bd:f7:88:
                    8e:01:88:93:4e:0b:85:e0:0c:4c:2a:4d:17:6d:58:
                    c1:5f:48:18:f4:ac:bd:2a:ae:03:93:12:c6:b2:71:
                    0d:6e:18:93:7e:86:0a:d7:92:98:3f:f7:72:18:b3:
                    be:b6:0f:46:b6:e9:79:61:a7:a0:ab:9d:86:5d:81:
                    3a:81:0e:ae:96:0b:cb:4f:22:94:f8:2b:eb:1f:05:
                    d9:57:71:39:15:8b:d7:3a:4f:81:23:8d:bb:d0:61:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D7:45:80:FD:1E:AA:E2:E6:AB:CB:16:5C:C1:CD:85:F0:D9:65:7B
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:2b:e5:a6:20:20:35:e9:ad:99:ac:3c:41:2f:ba:b6:ee:
         00:31:bb:80:8e:df:e8:21:02:16:e7:51:4d:06:5c:aa:a2:fc:
         bb:0a:a7:fb:76:b4:fd:b8:ba:17:1d:70:75:b9:37:31:46:4a:
         62:b7:60:ce:34:4b:31:de:7d:a6:4c:b7:ee:63:dd:fd:4d:7c:
         64:0a:e7:2e:73:81:59:19:f4:4f:eb:b1:4e:52:80:63:4b:c0:
         3d:be:96:17:7b:49:3a:00:10:90:6d:fe:3c:9d:56:5e:78:45:
         da:a8:b5:cc:62:97:52:1d:5d:10:2f:c1:f4:a4:79:f0:63:b4:
         b9:a2:c8:db:42:45:59:a0:53:96:c8:82:71:3e:eb:51:5d:39:
         6c:46:cb:a6:41:14:c3:da:6a:8d:a6:57:1d:10:9a:0a:d1:a8:
         02:3a:73:0c:57:12:69:f7:29:9a:01:53:5f:89:61:c4:7a:0f:
         29:d9:af:76:e9:d9:e0:00:88:25:39:c4:5d:41:9d:c1:34:ad:
         fd:ae:8f:c3:2f:30:e6:ef:db:2c:e6:86:81:ae:11:9e:c0:72:
         e6:87:d5:f7:80:76:65:e1:34:eb:12:4f:59:d4:5d:e4:d3:36:
         36:79:a6:81:11:60:e7:0c:ea:99:bc:b9:74:43:b7:f7:26:81:
         dc:4d:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:08 2026 by rpki-client