Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
File:                     B677F5476721449C1CB3D8F67673665A0A038595.mft (raw, json)
Hash identifier:          cPvrqveSeu2fQFoHpiHkzH3Hsw5E+4gzvBG4FlTrzP8=
Subject key identifier:   D5:AB:93:B0:F8:7F:16:9D:13:23:FA:72:81:3C:7B:88:79:89:94:6A
Authority key identifier: B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95
Certificate issuer:       /CN=B677F5476721449C1CB3D8F67673665A0A038595
Certificate serial:       2D340ACB5D21236225417E5ECC79B8808909250D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
Manifest number:          8C
Signing time:             Fri 14 Aug 2026 16:10:00 +0000
Manifest this update:     Fri 14 Aug 2026 16:05:00 +0000
Manifest next update:     Sat 15 Aug 2026 20:02:00 +0000
Files and hashes:         1: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: lRUuWcUd02IZlpdvWX9KHM1+gKLrQM+l0jBHsP+smvs=)
                          2: B677F5476721449C1CB3D8F67673665A0A038595.crl (hash: BrYyoFjMy6qXByKk7lFCLRZAbse62PChX+oaRv1zdfI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl
                          rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 20:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:34:0a:cb:5d:21:23:62:25:41:7e:5e:cc:79:b8:80:89:09:25:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B677F5476721449C1CB3D8F67673665A0A038595
        Validity
            Not Before: Aug 14 16:05:00 2026 GMT
            Not After : Aug 15 20:02:00 2026 GMT
        Subject: CN=D5AB93B0F87F169D1323FA72813C7B887989946A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:17:1b:60:7b:e4:e7:30:3b:9d:b9:19:2d:
                    1d:d2:cc:03:d5:26:b4:46:44:70:4e:78:b1:bc:be:
                    a6:b9:80:97:25:a9:3b:43:be:74:67:21:22:c2:06:
                    12:a3:e5:8c:e5:46:c0:b7:2d:d9:11:dd:c3:67:ae:
                    aa:8c:6c:2b:92:ed:92:59:a3:13:33:ce:9a:8b:7b:
                    ee:00:83:82:fe:77:3a:c8:ec:72:47:78:8c:a7:00:
                    fa:f2:1a:48:be:43:2e:98:94:2b:b1:ae:dc:44:d3:
                    6c:1d:c7:24:81:e4:22:02:bb:43:06:c5:93:43:35:
                    49:8c:1a:8d:9e:f5:ec:09:e9:f3:7a:b3:09:f1:61:
                    64:c7:d7:55:02:80:d8:57:53:57:12:d2:eb:ff:e9:
                    70:20:94:57:90:1f:d9:ce:11:bc:22:af:54:bb:2b:
                    b0:5e:6d:33:77:83:50:07:76:e9:4f:4a:84:84:18:
                    d1:80:f0:91:6a:ad:e7:34:9b:39:c4:b2:2a:12:4c:
                    e8:e9:93:15:70:98:86:f7:cb:c7:ff:17:e7:43:22:
                    47:9f:e1:ef:02:0e:56:62:33:f0:c5:ad:b6:76:38:
                    bd:d2:d1:3c:e7:f1:2b:8d:cb:f2:d2:2a:31:73:16:
                    f5:92:c0:34:f5:3f:3d:f9:53:04:27:22:1a:c3:2b:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AB:93:B0:F8:7F:16:9D:13:23:FA:72:81:3C:7B:88:79:89:94:6A
            X509v3 Authority Key Identifier:
                keyid:B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:79:91:94:bc:75:14:6e:46:ce:e0:5d:8c:b4:b0:59:2d:a1:
         21:53:02:06:7b:ad:df:f8:41:4d:cb:ec:83:c2:44:79:9b:bf:
         ab:8e:ff:58:73:e9:b1:25:eb:10:48:61:76:47:64:27:40:2d:
         ae:c8:0f:a1:af:4d:25:2f:1b:33:d5:86:bb:c1:fb:9d:30:d2:
         68:3a:d3:02:d2:50:36:3c:96:18:5d:ae:27:70:97:74:da:28:
         96:1f:15:53:5b:94:3a:0e:b0:18:50:10:3d:79:45:43:36:f6:
         2e:56:23:76:fa:3f:50:c6:ed:bd:94:42:93:c0:1b:bf:93:8c:
         51:ec:ac:a6:93:b2:c6:93:4e:44:95:6c:e9:fc:b1:03:04:0b:
         d6:14:39:1b:1a:1e:9e:13:fa:b9:6a:af:06:bb:9e:9a:b6:ac:
         e2:b0:b5:d2:7b:85:80:cc:73:73:11:19:6b:23:31:1d:e3:68:
         15:0b:b9:c4:87:28:05:d7:ec:19:2a:7e:b0:55:cb:03:cf:90:
         6a:1a:a6:ea:a8:19:eb:04:57:46:e6:20:4c:d7:0d:e4:bb:b4:
         27:b4:f9:98:73:f4:e3:a7:35:79:16:c8:4f:23:34:b9:ec:f0:
         a2:3d:04:30:98:3e:fa:28:9c:e8:22:cb:14:d1:7f:54:30:fa:
         1a:ba:ff:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULTQKy10hI2IlQX5ezHm4gIkJJQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY3N0Y1NDc2NzIxNDQ5QzFDQjNEOEY2NzY3MzY2NUEw
QTAzODU5NTAeFw0yNjA4MTQxNjA1MDBaFw0yNjA4MTUyMDAyMDBaMDMxMTAvBgNV
BAMTKEQ1QUI5M0IwRjg3RjE2OUQxMzIzRkE3MjgxM0M3Qjg4Nzk4OTk0NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yRcbYHvk5zA7nbkZLR3SzAPV
JrRGRHBOeLG8vqa5gJclqTtDvnRnISLCBhKj5YzlRsC3LdkR3cNnrqqMbCuS7ZJZ
oxMzzpqLe+4Ag4L+dzrI7HJHeIynAPryGki+Qy6YlCuxrtxE02wdxySB5CICu0MG
xZNDNUmMGo2e9ewJ6fN6swnxYWTH11UCgNhXU1cS0uv/6XAglFeQH9nOEbwir1S7
K7BebTN3g1AHdulPSoSEGNGA8JFqrec0mznEsioSTOjpkxVwmIb3y8f/F+dDIkef
4e8CDlZiM/DFrbZ2OL3S0Tzn8SuNy/LSKjFzFvWSwDT1Pz35UwQnIhrDK5qvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1auTsPh/Fp0TI/pygTx7iHmJlGowHwYDVR0j
BBgwFoAUtnf1R2chRJwcs9j2dnNmWgoDhZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmFlNmNkNDEtMmU0Yy00Y2MyLTg4MWUtYmFiNDRhODg0ZmQ0LzAvQjY3N0Y1NDc2
NzIxNDQ5QzFDQjNEOEY2NzY3MzY2NUEwQTAzODU5NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNjc3RjU0NzY3MjE0NDlDMUNCM0Q4RjY3NjczNjY1QTBBMDM4
NTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmFlNmNkNDEtMmU0Yy00Y2MyLTg4
MWUtYmFiNDRhODg0ZmQ0LzAvQjY3N0Y1NDc2NzIxNDQ5QzFDQjNEOEY2NzY3MzY2
NUEwQTAzODU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAF5kZS8dRRuRs7gXYy0sFktoSFTAgZ7rd/4
QU3L7IPCRHmbv6uO/1hz6bEl6xBIYXZHZCdALa7ID6GvTSUvGzPVhrvB+50w0mg6
0wLSUDY8lhhdridwl3TaKJYfFVNblDoOsBhQED15RUM29i5WI3b6P1DG7b2UQpPA
G7+TjFHsrKaTssaTTkSVbOn8sQMEC9YUORsaHp4T+rlqrwa7npq2rOKwtdJ7hYDM
c3MRGWsjMR3jaBULucSHKAXX7BkqfrBVywPPkGoapuqoGesEV0bmIEzXDeS7tCe0
+Zhz9OOnNXkWyE8jNLns8KI9BDCYPvoonOgiyxTRf1Qw+hq6/wA=
-----END CERTIFICATE-----
Generated at Sat Aug 15 13:29:41 2026 by rpki-client