Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
File:                     0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft (raw, json)
Hash identifier:          89febLF8Pd6mp3I9BMK+3ED60jIFQ3T0U4eC7jiIqUY=
Subject key identifier:   44:3B:5F:30:0C:E0:0F:5D:AB:1F:CD:A4:51:B7:07:25:C4:D2:BB:7F
Authority key identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B
Certificate issuer:       /CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
Certificate serial:       5C0BF449C23B93E9CC6736D81C59F06D94139691
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
Manifest number:          BC
Signing time:             Mon 21 Sep 2026 06:44:55 +0000
Manifest this update:     Mon 21 Sep 2026 06:39:55 +0000
Manifest next update:     Tue 22 Sep 2026 06:45:55 +0000
Files and hashes:         1: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: eGNJ1n8bDbQmoRq42DR0txAWzu8nV66h2S77nx17RKM=)
                          2: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: nvDEHVXbGDG+kKml4fz3Sd8nG2pVg2Fj1k1Un7attMA=)
                          3: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: uPncvP1Okkrf/KpwWjJFMH8U1aVMZjmRtyTj19SObI0=)
                          4: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: zqcics87PZHEsmOvrEn/LcF+KjiPqSCgEE2g8ZVSVI0=)
                          5: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: CL+9kkFdZB1yJCIEMLA3vz2l4BhvC9xFNrhK/p8qNDc=)
                          6: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: QzYDwyPq+ZTPv+eibCiOEvPDQMFXiIE8GpKBHMdWRXQ=)
                          7: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: 2gQ9649f0ndaTmtOcqaJrXV4bKlAfn8pEGxSt46Gu58=)
                          8: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: EDtByMK6TjQp0hyoWNPeAL24hwV2DhNIgESuhbW7CKA=)
                          9: 0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl (hash: vqiGTPtHX2rCaNe2osrtugwkMS78hY5RgjZRb0/i8ms=)
                          10: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: A4kpcsQqVoWwVBNEfjq/CynxKvKVE62mleHwZXUsKos=)
                          11: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: L72MNFWs2/TCwq6F2L6j0rz6XVlkqh9uNTreRhurkKw=)
                          12: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: Aj2bJsLbEDIrOPmhvglJ6dR9+tL1DPZS/JEdmKKswFk=)
                          13: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: Ht0VezJ4KIWCDr66hCxSQYWb1Dq0K65XBemGOv1TcQc=)
                          14: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: sxS8L7umdKtGUeT2wWhEoM1JoZ/BT1Jv1zxeZbH381g=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl
                          rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0b:f4:49:c2:3b:93:e9:cc:67:36:d8:1c:59:f0:6d:94:13:96:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
        Validity
            Not Before: Sep 21 06:39:55 2026 GMT
            Not After : Sep 22 06:45:55 2026 GMT
        Subject: CN=443B5F300CE00F5DAB1FCDA451B70725C4D2BB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:cc:98:77:62:47:b6:70:62:24:9c:bf:66:
                    47:67:43:31:b5:b1:b8:61:f5:a0:0e:2f:a6:ba:fa:
                    ad:be:50:16:e0:e2:a3:20:8b:1e:e5:da:e0:17:1b:
                    fc:b5:4a:cd:73:2c:04:3a:6b:fe:ad:b2:61:ce:26:
                    89:cb:a7:1d:94:93:91:94:0f:2a:05:4e:1c:40:ae:
                    0d:02:02:fc:1d:81:bd:2d:88:63:fb:5e:59:c6:59:
                    fb:ba:63:ec:ad:1a:7a:db:ad:a1:55:36:79:bb:96:
                    66:b2:7f:a0:47:c6:27:78:3e:f7:f0:2c:90:7f:c4:
                    27:10:13:cd:54:d5:91:59:73:3d:ec:3e:82:a0:f4:
                    c4:34:d4:43:27:96:47:cf:f6:e0:6a:62:52:b8:f0:
                    fe:6f:c5:74:78:57:b2:a5:be:52:8a:4a:ae:7f:17:
                    30:ca:89:92:57:1c:b9:4b:82:1d:a1:ee:41:ab:8b:
                    c5:21:eb:3e:65:86:e6:31:b6:6b:d0:e1:01:2f:f1:
                    86:a9:2d:b6:b9:fe:4d:25:96:ba:5c:53:09:82:44:
                    bf:59:31:32:00:a0:40:69:d9:1e:7f:fb:d3:55:63:
                    36:6f:83:70:a5:de:0c:64:00:cb:2f:86:a6:9d:8c:
                    68:58:ee:a7:8b:39:bb:f7:56:70:70:4f:6e:17:90:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3B:5F:30:0C:E0:0F:5D:AB:1F:CD:A4:51:B7:07:25:C4:D2:BB:7F
            X509v3 Authority Key Identifier:
                keyid:0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:84:f3:95:4a:86:47:f7:a8:40:54:46:41:02:50:9b:93:89:
         48:c8:17:08:33:37:83:bf:55:50:70:e7:38:02:0f:5f:d2:b5:
         19:b6:f7:20:33:4b:55:b0:54:92:68:10:0c:56:d5:9e:c1:75:
         3e:8d:8f:24:f8:5d:74:61:16:4f:cb:0b:e5:e3:2e:e6:7a:80:
         99:69:d4:3f:ff:b4:81:0e:eb:f6:fd:86:6d:45:e8:ec:a2:2d:
         36:97:f4:3d:5c:4a:8b:67:af:58:7f:96:37:dc:01:5c:ae:7c:
         11:fa:d7:e4:a7:40:3c:0e:e4:db:6c:4b:08:88:c1:49:42:73:
         ce:b5:4d:e5:fa:4b:2f:55:b6:a4:2c:9f:5e:40:35:27:54:d9:
         fc:74:f8:43:4b:f4:7c:8d:52:fe:7d:b2:d5:41:a1:f5:be:6d:
         6d:0a:89:32:8d:46:44:5d:33:49:f8:d9:f3:85:7f:87:54:2b:
         52:73:e7:44:bd:09:ed:ba:db:6d:51:a6:6d:c9:93:cd:48:71:
         4d:3d:b7:6a:c3:da:17:bb:a4:12:22:36:57:02:50:e9:38:ed:
         fc:11:30:84:61:82:8a:6e:af:5b:2a:90:70:29:40:92:b8:e2:
         25:0d:98:96:85:1c:e5:ff:12:70:c5:fb:a7:20:0f:22:36:51:
         4b:1f:31:74
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXAv0ScI7k+nMZzbYHFnwbZQTlpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJDQkFGOEREMEI2MzkxRTcxNUIwMTM2M0Q3QzlCQTJE
NTVFM0E2QjAeFw0yNjA5MjEwNjM5NTVaFw0yNjA5MjIwNjQ1NTVaMDMxMTAvBgNV
BAMTKDQ0M0I1RjMwMENFMDBGNURBQjFGQ0RBNDUxQjcwNzI1QzREMkJCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNB8yYd2JHtnBiJJy/ZkdnQzG1
sbhh9aAOL6a6+q2+UBbg4qMgix7l2uAXG/y1Ss1zLAQ6a/6tsmHOJonLpx2Uk5GU
DyoFThxArg0CAvwdgb0tiGP7XlnGWfu6Y+ytGnrbraFVNnm7lmayf6BHxid4Pvfw
LJB/xCcQE81U1ZFZcz3sPoKg9MQ01EMnlkfP9uBqYlK48P5vxXR4V7KlvlKKSq5/
FzDKiZJXHLlLgh2h7kGri8Uh6z5lhuYxtmvQ4QEv8YapLba5/k0llrpcUwmCRL9Z
MTIAoEBp2R5/+9NVYzZvg3Cl3gxkAMsvhqadjGhY7qeLObv3VnBwT24XkA6bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURDtfMAzgD12rH82kUbcHJcTSu38wHwYDVR0j
BBgwFoAUC8uvjdC2OR5xWwE2PXybotVeOmswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWViOThjZWQtYWYxOC00YmZmLWFkNzEtNzNkMmIwYzlkOGE5LzAvMEJDQkFGOERE
MEI2MzkxRTcxNUIwMTM2M0Q3QzlCQTJENTVFM0E2Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkNCQUY4REQwQjYzOTFFNzE1QjAxMzYzRDdDOUJBMkQ1NUUz
QTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWViOThjZWQtYWYxOC00YmZmLWFk
NzEtNzNkMmIwYzlkOGE5LzAvMEJDQkFGOEREMEI2MzkxRTcxNUIwMTM2M0Q3QzlC
QTJENTVFM0E2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABOE85VKhkf3qEBURkECUJuTiUjIFwgzN4O/
VVBw5zgCD1/StRm29yAzS1WwVJJoEAxW1Z7BdT6NjyT4XXRhFk/LC+XjLuZ6gJlp
1D//tIEO6/b9hm1F6OyiLTaX9D1cSotnr1h/ljfcAVyufBH61+SnQDwO5NtsSwiI
wUlCc861TeX6Sy9VtqQsn15ANSdU2fx0+ENL9HyNUv59stVBofW+bW0KiTKNRkRd
M0n42fOFf4dUK1Jz50S9Ce26221Rpm3Jk81IcU09t2rD2he7pBIiNlcCUOk47fwR
MIRhgopur1sqkHApQJK44iUNmJaFHOX/EnDF+6cgDyI2UUsfMXQ=
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:44:29 2026 by rpki-client