Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft
File:                     BCE01C08E8E67E88147644DD138C0632C10BECF7.mft (raw, json)
Hash identifier:          QzsGej60oiDLWLHbRd8M7s6g28iT43wdq9Z3BsDxDaQ=
Subject key identifier:   01:5D:CB:92:1F:AF:14:8B:60:77:07:A3:20:8C:BE:C2:AF:F8:D9:05
Authority key identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7
Certificate issuer:       /CN=BCE01C08E8E67E88147644DD138C0632C10BECF7
Certificate serial:       46B84C7481C3D89917F4FE3145D43206EA93D347
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 15:38:25 +0000
Manifest this update:     Sat 13 Jun 2026 15:33:25 +0000
Manifest next update:     Sun 14 Jun 2026 17:20:25 +0000
Files and hashes:         1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: GmBqoocRQKggDWCQV98uJdiIxG9ynSKifYvn1zS1W2I=)
                          2: BCE01C08E8E67E88147644DD138C0632C10BECF7.crl (hash: KvpNkzCpYXwevbPtGloFeVlIQlEBYHNa359lsZY5pIc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl
                          rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 15:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:4c:74:81:c3:d8:99:17:f4:fe:31:45:d4:32:06:ea:93:d3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE01C08E8E67E88147644DD138C0632C10BECF7
        Validity
            Not Before: Jun 13 15:33:25 2026 GMT
            Not After : Jun 14 17:20:25 2026 GMT
        Subject: CN=015DCB921FAF148B607707A3208CBEC2AFF8D905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:a1:72:3f:50:f5:3e:3d:db:71:6c:e6:51:
                    d2:93:27:3e:22:bc:fc:8c:24:7a:61:e4:5a:83:4a:
                    75:83:fe:d8:5b:60:26:78:30:4e:43:7e:ce:97:86:
                    a9:86:94:ff:7c:53:fc:bd:9e:95:14:46:e6:f1:99:
                    b4:e5:0c:21:82:89:fb:5c:53:55:cf:b4:c8:1e:e0:
                    22:02:1a:ea:2f:8f:d8:0c:cb:58:93:f6:4d:df:8e:
                    ad:25:fb:d9:dd:fd:04:eb:39:37:f9:24:79:6a:db:
                    f8:d0:7c:cd:d6:d0:c4:f7:62:3e:86:4b:cf:44:8f:
                    b3:a4:a7:56:c8:b3:68:8c:10:40:a0:d9:94:7f:08:
                    5f:93:c8:b6:07:78:c9:e7:d4:e4:0c:1a:21:16:a3:
                    34:a3:53:49:1f:93:27:63:89:25:51:61:c7:3d:8c:
                    0f:3f:6f:cb:9f:3e:6a:db:d1:aa:36:5e:02:83:1e:
                    3a:ee:5e:61:8b:e9:a0:e0:24:f1:f1:bf:3b:e4:fc:
                    22:4a:df:9a:70:57:e8:f4:8b:01:8c:81:3a:81:ef:
                    90:39:d5:a7:c2:47:dd:dc:47:05:ef:ad:8e:36:8b:
                    1b:95:bf:75:34:26:a1:84:a3:cb:ed:3c:78:71:c1:
                    fc:24:59:e1:c2:96:8a:03:dd:ec:10:60:08:af:b4:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5D:CB:92:1F:AF:14:8B:60:77:07:A3:20:8C:BE:C2:AF:F8:D9:05
            X509v3 Authority Key Identifier:
                keyid:BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:ca:4c:c1:24:5a:dc:82:dd:a3:b6:43:49:1b:c4:9c:1c:
         d1:f6:4e:af:57:8e:77:24:01:15:f5:c8:7f:04:1d:cb:4d:d7:
         dd:d8:86:92:b7:ca:a5:f3:14:cd:93:3a:b3:4a:60:09:34:76:
         e1:71:5b:c7:8f:e5:68:87:0e:56:7b:65:b8:6c:0c:c7:be:90:
         ef:2b:a2:b9:87:43:bc:23:0b:7b:1d:a6:fb:5b:26:d6:6d:84:
         39:b1:a0:1d:82:c9:03:5e:9d:f3:97:5f:f5:40:37:0e:d3:c0:
         4d:d9:49:26:2b:0d:4b:1d:ce:b9:ea:18:ac:33:59:cc:aa:b6:
         76:4d:c9:85:dc:e6:f5:bf:84:47:93:42:57:fe:61:70:0c:89:
         4f:92:2b:1e:e4:e8:88:cd:3d:36:3b:50:5d:ff:86:fa:5e:84:
         0c:06:33:f7:ea:e7:26:7e:37:be:27:1c:03:c6:fc:28:81:9a:
         3c:a0:22:5e:f7:62:f5:8d:39:6a:02:8f:4e:20:26:9f:f0:74:
         94:15:17:a3:7e:bb:fa:ae:e5:53:6f:1e:11:30:2c:37:1d:35:
         08:72:5f:b3:4d:f5:ae:1e:11:da:c6:97:a5:1b:e1:78:ee:43:
         88:45:de:75:de:3e:aa:72:05:73:b8:fb:ae:49:e6:27:d8:fe:
         aa:7a:df:c1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURrhMdIHD2JkX9P4xRdQyBuqT00cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2MzJD
MTBCRUNGNzAeFw0yNjA2MTMxNTMzMjVaFw0yNjA2MTQxNzIwMjVaMDMxMTAvBgNV
BAMTKDAxNURDQjkyMUZBRjE0OEI2MDc3MDdBMzIwOENCRUMyQUZGOEQ5MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeq6FyP1D1Pj3bcWzmUdKTJz4i
vPyMJHph5FqDSnWD/thbYCZ4ME5Dfs6XhqmGlP98U/y9npUURubxmbTlDCGCiftc
U1XPtMge4CICGuovj9gMy1iT9k3fjq0l+9nd/QTrOTf5JHlq2/jQfM3W0MT3Yj6G
S89Ej7Okp1bIs2iMEECg2ZR/CF+TyLYHeMnn1OQMGiEWozSjU0kfkydjiSVRYcc9
jA8/b8ufPmrb0ao2XgKDHjruXmGL6aDgJPHxvzvk/CJK35pwV+j0iwGMgTqB75A5
1afCR93cRwXvrY42ixuVv3U0JqGEo8vtPHhxwfwkWeHClooD3ewQYAivtKPhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAV3Lkh+vFItgdwejIIy+wq/42QUwHwYDVR0j
BBgwFoAUvOAcCOjmfogUdkTdE4wGMsEL7PcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2YyOTc1ZDUtZjk5MC00ODRlLTk0NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhF
OEU2N0U4ODE0NzY0NEREMTM4QzA2MzJDMTBCRUNGNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9CQ0UwMUMwOEU4RTY3RTg4MTQ3NjQ0REQxMzhDMDYzMkMxMEJF
Q0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0
NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2
MzJDMTBCRUNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA1xykzBJFrcgt2jtkNJG8ScHNH2Tq9Xjnck
ARX1yH8EHctN193YhpK3yqXzFM2TOrNKYAk0duFxW8eP5WiHDlZ7ZbhsDMe+kO8r
ormHQ7wjC3sdpvtbJtZthDmxoB2CyQNenfOXX/VANw7TwE3ZSSYrDUsdzrnqGKwz
WcyqtnZNyYXc5vW/hEeTQlf+YXAMiU+SKx7k6IjNPTY7UF3/hvpehAwGM/fq5yZ+
N74nHAPG/CiBmjygIl73YvWNOWoCj04gJp/wdJQVF6N+u/qu5VNvHhEwLDcdNQhy
X7NN9a4eEdrGl6Ub4XjuQ4hF3nXePqpyBXO4+65J5ifY/qp638E=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:37:02 2026 by rpki-client