Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
File:                     BF81EC78CC8A61FCFF71A862321A5204E581203B.mft (raw, json)
Hash identifier:          8ZW7dUIPLLaHJbJ9emf93bSrv7pnLZdaIBqOg1vm9q0=
Subject key identifier:   4B:92:01:2B:22:2D:CF:D3:F1:3A:46:BA:18:FF:DD:D6:50:2A:18:6A
Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B
Certificate issuer:       /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
Certificate serial:       11C7FBFAD15B123917925FC806B0791236CBAABC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
Manifest number:          3D
Signing time:             Tue 16 Jun 2026 21:19:58 +0000
Manifest this update:     Tue 16 Jun 2026 21:14:58 +0000
Manifest next update:     Wed 17 Jun 2026 23:23:58 +0000
Files and hashes:         1: BF81EC78CC8A61FCFF71A862321A5204E581203B.crl (hash: Z8Bb/0Ftdu6UNzoh8rXfb8yNFiF9Q+iE93ZwB0HcYow=)
                          2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl
                          rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 23:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c7:fb:fa:d1:5b:12:39:17:92:5f:c8:06:b0:79:12:36:cb:aa:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
        Validity
            Not Before: Jun 16 21:14:58 2026 GMT
            Not After : Jun 17 23:23:58 2026 GMT
        Subject: CN=4B92012B222DCFD3F13A46BA18FFDDD6502A186A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:8b:82:66:c5:10:5a:fe:fe:a0:a9:4f:10:
                    a9:a3:ea:79:4f:36:6c:fe:5f:2b:73:8e:d2:9d:07:
                    be:00:b9:d7:71:20:2e:a5:8d:b9:58:24:8d:a9:1c:
                    be:70:99:fd:eb:95:a9:a5:3a:00:0d:33:f5:b7:da:
                    a6:21:d3:ce:11:53:d3:c6:ed:05:d2:46:04:cc:49:
                    90:57:cf:a3:dd:97:30:41:b5:26:b3:e8:14:19:fa:
                    82:ff:6e:97:46:4e:a0:19:6c:87:22:18:c2:dc:19:
                    21:77:d3:67:8e:91:73:e9:d2:1a:1d:92:87:d9:8a:
                    25:ef:1e:37:f6:fa:e9:a1:a5:62:4f:b6:69:43:78:
                    09:05:76:ca:34:7b:2e:6e:08:fc:4e:87:d1:01:6e:
                    6a:25:d4:ab:d4:3f:7b:3e:28:ad:9e:d3:1d:2d:16:
                    4d:10:79:97:84:cd:f8:44:da:e8:4e:b7:06:90:a9:
                    e6:7f:16:ea:35:44:b8:84:37:3e:50:82:b8:5b:1a:
                    f3:4d:25:d9:d3:f7:03:6e:0b:a8:b8:9b:ed:36:97:
                    2e:4a:1a:a6:74:c9:f3:be:2e:28:d9:0c:59:07:c5:
                    61:ec:63:c3:cb:84:ae:eb:27:c6:8b:db:91:72:e7:
                    49:23:5f:43:24:6c:c9:bf:8f:78:a7:cb:78:2a:02:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:92:01:2B:22:2D:CF:D3:F1:3A:46:BA:18:FF:DD:D6:50:2A:18:6A
            X509v3 Authority Key Identifier:
                keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:73:23:6c:10:1b:67:1c:74:d2:15:8a:a8:93:c3:39:d8:96:
         05:a0:2a:f8:23:27:a3:c1:a0:a0:7a:53:ae:1a:3d:63:17:d3:
         e7:28:2f:79:5c:94:00:a0:80:46:77:a6:d8:7e:e5:ed:1e:c6:
         97:81:8a:81:89:15:50:25:c4:65:b8:77:96:8c:be:71:3e:80:
         8e:c7:98:b4:39:47:94:97:df:05:7e:07:a6:33:ee:7b:bb:86:
         af:7d:a6:67:a9:3c:3b:78:b8:ca:1a:a1:29:1b:e8:ff:b4:01:
         52:57:aa:59:49:1f:8d:29:67:20:43:df:77:56:2e:e3:e7:30:
         e3:82:13:18:a5:37:2b:d2:06:4b:80:3f:9f:05:6b:e3:27:85:
         c2:22:43:e6:21:f8:4e:48:51:36:b8:1c:97:eb:3f:d1:cb:94:
         09:8f:2f:26:fb:87:d8:13:7d:0d:82:c6:ef:e7:9d:3c:f9:db:
         67:48:a1:3d:49:50:a6:62:e1:0c:e5:d3:02:6f:30:c3:29:82:
         b6:a1:8f:78:11:6e:00:db:d4:f3:f5:0b:af:e9:05:6a:f4:77:
         50:bb:a8:93:f7:d2:77:11:02:1c:27:24:14:24:8d:78:92:84:
         70:88:88:7a:8c:a8:76:3f:00:e4:70:38:4a:a2:9d:fe:1a:4a:
         fd:c4:91:e5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEcf7+tFbEjkXkl/IBrB5EjbLqrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRF
NTgxMjAzQjAeFw0yNjA2MTYyMTE0NThaFw0yNjA2MTcyMzIzNThaMDMxMTAvBgNV
BAMTKDRCOTIwMTJCMjIyRENGRDNGMTNBNDZCQTE4RkZEREQ2NTAyQTE4NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEouCZsUQWv7+oKlPEKmj6nlP
Nmz+XytzjtKdB74AuddxIC6ljblYJI2pHL5wmf3rlamlOgANM/W32qYh084RU9PG
7QXSRgTMSZBXz6PdlzBBtSaz6BQZ+oL/bpdGTqAZbIciGMLcGSF302eOkXPp0hod
kofZiiXvHjf2+umhpWJPtmlDeAkFdso0ey5uCPxOh9EBbmol1KvUP3s+KK2e0x0t
Fk0QeZeEzfhE2uhOtwaQqeZ/Fuo1RLiENz5QgrhbGvNNJdnT9wNuC6i4m+02ly5K
GqZ0yfO+LijZDFkHxWHsY8PLhK7rJ8aL25Fy50kjX0MkbMm/j3iny3gqAjJ9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUS5IBKyItz9PxOka6GP/d1lAqGGowHwYDVR0j
BBgwFoAUv4HseMyKYfz/cahiMhpSBOWBIDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDg2OGNmMjItZDAyOS00NWUyLTllMjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhD
QzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRFNTgxMjAzQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CRjgxRUM3OENDOEE2MUZDRkY3MUE4NjIzMjFBNTIwNEU1ODEy
MDNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll
MjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUy
MDRFNTgxMjAzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGhzI2wQG2ccdNIViqiTwznYlgWgKvgjJ6PB
oKB6U64aPWMX0+coL3lclACggEZ3pth+5e0expeBioGJFVAlxGW4d5aMvnE+gI7H
mLQ5R5SX3wV+B6Yz7nu7hq99pmepPDt4uMoaoSkb6P+0AVJXqllJH40pZyBD33dW
LuPnMOOCExilNyvSBkuAP58Fa+MnhcIiQ+Yh+E5IUTa4HJfrP9HLlAmPLyb7h9gT
fQ2Cxu/nnTz522dIoT1JUKZi4Qzl0wJvMMMpgrahj3gRbgDb1PP1C6/pBWr0d1C7
qJP30ncRAhwnJBQkjXiShHCIiHqMqHY/AORwOEqinf4aSv3EkeU=
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:39:56 2026 by rpki-client