Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
File:                     7ACC57BA3042B007AA1613352A73FFD3162E565F.mft (raw, json)
Hash identifier:          b7ydldlA4TR9+rLEgsP5Zc75SbtqtjSvNLUgoA4AeeM=
Subject key identifier:   BF:44:FC:99:28:AE:F2:0C:8C:D2:12:64:FA:46:A9:0D:FC:EC:1A:BA
Authority key identifier: 7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F
Certificate issuer:       /CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
Certificate serial:       3FA529EFA30BD0CA7F8FDC63203419CAD2C5CE30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 18:37:30 +0000
Manifest this update:     Tue 02 Jun 2026 18:32:30 +0000
Manifest next update:     Wed 03 Jun 2026 20:17:30 +0000
Files and hashes:         1: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: z0ApomisoqwQnhgmCVulOkc7tSSTjZgNZBL2SV/mK8w=)
                          2: 7ACC57BA3042B007AA1613352A73FFD3162E565F.crl (hash: nMtunW1rjXnLgwLd9875+Dx8+0eziu5dinnhCxoxOfI=)
                          3: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: EE9ymycRiG5es8LdeuDyt4ZBgyII9pYHMLKeHbtmxMg=)
                          4: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: jo8zHFeqe3LGwp2AuxTgHU+gmdWY0CJTnZZ7WU6u+5k=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl
                          rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a5:29:ef:a3:0b:d0:ca:7f:8f:dc:63:20:34:19:ca:d2:c5:ce:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
        Validity
            Not Before: Jun  2 18:32:30 2026 GMT
            Not After : Jun  3 20:17:30 2026 GMT
        Subject: CN=BF44FC9928AEF20C8CD21264FA46A90DFCEC1ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:80:18:59:25:9e:b7:c8:9f:b5:9e:7a:74:
                    f9:1b:12:62:bc:8b:24:e7:62:c8:b4:9f:4e:da:d5:
                    26:18:84:b1:1c:fa:e9:29:d7:2e:47:b7:c2:88:d1:
                    74:62:ec:f5:8a:f2:fb:73:50:3e:50:57:b9:c8:b8:
                    7b:68:16:e9:20:20:39:1b:fc:3b:1b:00:18:dc:48:
                    e7:44:64:b9:21:bd:08:d5:5d:82:f8:2f:ee:df:62:
                    2b:bc:47:5a:af:4a:ef:e7:e3:ab:2f:53:7c:73:e3:
                    1b:75:f0:6b:d6:2d:b5:03:db:c2:aa:0a:b7:ba:b1:
                    4e:39:d3:43:5a:3c:8f:b6:10:c6:fa:24:7e:4e:46:
                    cd:95:6f:54:5c:5f:26:dc:91:3e:62:e1:d6:b9:c5:
                    e6:4a:03:8e:db:90:e4:a2:63:25:9b:9b:61:bd:a7:
                    43:41:d3:28:c7:26:f7:97:08:6f:79:f0:02:26:50:
                    54:d7:69:9b:88:75:89:02:cf:5b:cd:cb:42:02:35:
                    b3:1c:9d:3b:61:a9:25:2e:a9:18:fa:21:62:30:8f:
                    4c:0b:0a:ad:8e:50:77:36:e2:d2:e5:66:7a:db:bc:
                    18:a3:c5:06:16:7d:df:f9:5a:e9:1b:a5:e3:8d:05:
                    c4:d1:f2:62:99:fd:47:8d:19:4b:86:f5:55:66:4c:
                    a9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:44:FC:99:28:AE:F2:0C:8C:D2:12:64:FA:46:A9:0D:FC:EC:1A:BA
            X509v3 Authority Key Identifier:
                keyid:7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:37:8c:e8:8b:23:93:b7:9b:39:48:51:e5:52:4d:f9:17:
         2b:f0:f1:a1:e2:61:2f:49:2d:56:fa:27:33:bf:90:38:90:82:
         c2:74:f9:51:15:57:60:c5:1e:c2:07:b7:1f:40:3e:83:c1:03:
         36:8b:99:21:f6:89:e3:81:75:c7:60:26:e7:b8:ff:5f:ef:a3:
         ff:5c:38:86:35:e0:1f:53:e1:a5:1b:96:da:c0:3c:cb:85:9a:
         e5:16:92:e3:af:dc:48:52:61:02:ff:cf:21:8e:08:b4:de:24:
         24:34:da:36:4c:79:0a:07:61:bf:95:4c:b2:7e:12:32:6b:40:
         e9:b5:4f:a4:81:ac:27:d6:0c:d9:31:94:52:40:ae:5e:ee:6f:
         6b:e3:f5:6a:38:8e:15:7e:d2:21:cd:24:c1:88:7b:86:49:46:
         e5:98:c7:1e:1c:40:6b:61:2d:02:cd:75:48:7c:b9:b5:b4:50:
         9b:a3:10:e9:82:c8:b0:1c:69:5e:ee:4b:79:16:5f:41:79:41:
         4f:38:2a:c9:16:1a:21:ca:f5:df:62:21:45:51:c7:1e:4c:7e:
         02:ca:d8:f4:d9:a0:43:ae:9a:a6:f7:b2:45:8a:d3:87:fd:f5:
         df:35:b3:9a:dc:ba:2e:bc:73:02:c9:1c:29:e3:18:28:c6:dd:
         d4:9b:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:11:47 2026 by rpki-client