Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
File:                     A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft (raw, json)
Hash identifier:          o7OLdoMQyVLfDDEP9ISPuZ1x7c5+jwX7WQ6Ev0j7VV4=
Subject key identifier:   F3:72:20:18:E7:03:39:8A:81:36:AF:BE:4D:70:D4:CE:03:04:E3:1A
Authority key identifier: A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05
Certificate issuer:       /CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
Certificate serial:       5E20E9D187F686EA98377EF59CB0A531B3580E58
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
Manifest number:          BC
Signing time:             Sun 20 Sep 2026 13:03:11 +0000
Manifest this update:     Sun 20 Sep 2026 12:58:11 +0000
Manifest next update:     Mon 21 Sep 2026 15:42:11 +0000
Files and hashes:         1: 3230322e31302e35342e302f32332d3234203d3e20313430343735.roa (hash: 53lk28OB7C2r9Lbn77bndS7Z8jO3dRRKei6ftjTbvh8=)
                          2: 3230322e31302e35352e302f32342d3234203d3e20313430343735.roa (hash: qdsWQTeruYCWO1TWsZRfYq1Fijj3AYRnr4xjjtmwgSY=)
                          3: 323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa (hash: ZDiFkcumHYkuWYUBaPK86t3Am+BHd46fhGXEEhnKxDM=)
                          4: 3230322e31302e35302e302f32342d3234203d3e20313332363334.roa (hash: fhzQrs4pWOvYBZ4DUAGRteOfMOG5375PmHr/Gd3soN4=)
                          5: 3230322e31302e35322e302f32342d3234203d3e20313337333633.roa (hash: u+Of6FkZ8x04Mn/sbxjOJpufFlGKsbMZ43MhOVlUe9g=)
                          6: 3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa (hash: cgOdljzD6Kb/efyo5mEV6JVDlvdGepzZA5hSBuGf/kU=)
                          7: 323430323a666463303a633830333a3a2f34382d3438203d3e20313337333633.roa (hash: /a6Zkf/b5H6einy3Z1kSJisNnYNJg+CY4h7REq9bRxc=)
                          8: 323430323a666463303a633830303a3a2f34382d3438203d3e20313337333633.roa (hash: CjRDsAz+aS/+92X6fntWUbGjGlM8inRBSEZ9nZ+tTOw=)
                          9: 3230322e31302e35312e302f32342d3234203d3e20313332363334.roa (hash: JKmskqrmBEKWLRqcTfgQmkJ1rpIxbXQj387cHsgkWiM=)
                          10: 3230322e31302e35332e302f32342d3234203d3e20313430343639.roa (hash: XZqZKEwcIT/tOmTDjZRtLyihPdxqZLum5E4RRGNWZX0=)
                          11: 323430323a666463303a3a2f33322d3438203d3e20313337333633.roa (hash: Z7H/OfXP8qxT4Zi/m6gpjjp2JZ6eagoR20N4vstB3k0=)
                          12: 3230322e31302e35342e302f32342d3234203d3e20313430343735.roa (hash: HRGD4R+yGdYBp3Or0hgA2AcbAMPLv3YF0a66aMPbpmc=)
                          13: 323430323a666463303a633830323a3a2f34382d3438203d3e20313337333633.roa (hash: Gsl3H+Xpktz1qLk/16DVTjg0FvEY5dvYbGDi7zrN6y4=)
                          14: 3230322e31302e33322e302f32332d3234203d3e20313337333633.roa (hash: RzbRWoTyq317VopjOdRZUyYGaw/2GeV/fl1ATPbbRe8=)
                          15: 323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa (hash: 12hGBEU127xFfYRBwaq0Vm/CxpSbZT0y22MOj9lRvjg=)
                          16: 3230322e31302e36322e302f32342d3234203d3e20313530353031.roa (hash: dENlFssvXSbhibcUcmYMpj6LsZqbMhw2TzlfQilBjlw=)
                          17: 3230322e31302e35322e302f32332d3234203d3e20313337333633.roa (hash: Tj44K8M0kyIyNVPMD0ebyVJjg9LhX68HN2gKKlUECaQ=)
                          18: A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl (hash: 3hNVicPy/aTNPNNalmv3Ha0yW9+r28kkQ6Wf2u0Kt5U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl
                          rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:20:e9:d1:87:f6:86:ea:98:37:7e:f5:9c:b0:a5:31:b3:58:0e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305
        Validity
            Not Before: Sep 20 12:58:11 2026 GMT
            Not After : Sep 21 15:42:11 2026 GMT
        Subject: CN=F3722018E703398A8136AFBE4D70D4CE0304E31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:1c:19:b1:02:8b:13:bf:a9:a4:56:b2:01:
                    b3:eb:89:bb:a1:c0:95:00:77:48:f0:97:fa:0c:b0:
                    a9:cb:53:e9:de:ba:de:aa:15:56:ed:ac:4f:3f:19:
                    9a:b9:49:6c:67:fc:44:08:85:1e:ca:c6:1f:45:80:
                    05:e3:db:a2:68:af:b8:ad:a7:83:86:e2:1c:1e:c5:
                    cd:b5:be:6f:92:00:dd:51:7c:cf:70:49:be:8f:45:
                    48:44:d2:f5:c0:50:fe:2f:b9:3c:c5:ef:ea:47:a9:
                    c3:f0:72:10:d6:2b:ef:92:a7:03:4e:86:05:e5:7d:
                    c3:95:88:69:f7:e8:68:5c:93:09:8b:05:12:f0:ee:
                    b3:7a:db:77:fd:9a:8f:26:50:ee:04:45:2f:74:55:
                    a9:8c:10:f0:36:d5:dd:ef:f1:4e:06:18:47:c9:42:
                    73:aa:0b:35:c9:42:e4:e0:52:94:c3:0a:8a:1f:7d:
                    f7:ee:2c:36:76:ba:ae:cc:65:8d:d4:ce:8a:26:e7:
                    c6:a9:fc:32:a7:11:6c:be:e2:72:3f:f4:57:f1:3d:
                    2e:a9:8f:11:7a:be:73:d2:80:6a:13:92:5b:15:dd:
                    fa:76:8a:a0:fa:02:68:c7:32:00:d6:fb:b0:ef:6d:
                    5a:36:c5:d3:91:a8:48:00:f2:1a:cc:92:4c:2b:d2:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:72:20:18:E7:03:39:8A:81:36:AF:BE:4D:70:D4:CE:03:04:E3:1A
            X509v3 Authority Key Identifier:
                keyid:A0:6C:E5:EE:EF:DB:5B:66:43:B1:8A:83:EB:E3:9B:3C:52:FF:D3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/A06CE5EEEFDB5B6643B18A83EBE39B3C52FFD305.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:a7:c4:51:b9:de:d7:ab:64:5e:20:3f:46:ce:81:66:bc:
         67:e4:71:61:04:b1:12:52:ea:0d:e3:c5:bf:4d:af:13:78:dc:
         da:ae:ec:8a:14:24:66:f3:a1:19:21:c6:b8:33:7d:78:d2:4e:
         d2:bc:ed:61:49:5e:b0:b0:b2:7d:96:4b:ad:ce:ec:8c:12:85:
         2f:5f:4c:ff:b4:8c:c8:d8:45:cf:22:76:33:45:5f:c5:95:40:
         a6:8d:0c:41:cb:30:26:6d:bb:4e:2d:41:4b:d2:88:c6:d3:b4:
         50:c7:66:4f:27:df:9b:13:d6:c5:15:c3:4c:31:44:8b:dc:f6:
         33:79:a7:c7:bc:0f:0e:ae:00:9e:f7:dc:60:50:c3:8e:b6:d9:
         51:26:ee:ee:fc:df:11:f0:ad:60:9a:ba:6a:94:86:ca:f5:42:
         32:06:3f:14:bf:69:09:bb:56:0a:dd:d5:c5:65:ad:4c:29:3d:
         98:90:81:27:e3:99:15:ae:66:d9:7f:73:20:a1:5e:b2:e1:df:
         ec:eb:75:8e:db:60:61:78:38:4d:1a:31:7c:18:9b:37:13:5b:
         ac:3e:0a:d3:03:5b:41:92:d4:39:5c:94:d8:2b:34:14:82:57:
         91:ca:49:68:a3:fe:c5:d2:b9:0c:74:02:83:4f:7e:4f:ec:41:
         6a:ef:98:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:20 2026 by rpki-client