Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft
File:                     BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft (raw, json)
Hash identifier:          OX0afQNbzHdar869IM4mifCFw05iVDyztedlRs90TeI=
Subject key identifier:   E0:94:05:73:B4:9D:21:4B:E2:73:B6:B1:FD:6D:74:81:84:42:62:CF
Authority key identifier: BC:B1:5A:98:16:D9:6C:D6:D5:CD:78:E5:24:B0:75:E4:A9:1E:DC:58
Certificate issuer:       /CN=BCB15A9816D96CD6D5CD78E524B075E4A91EDC58
Certificate serial:       047291BE077FA9635CB3309BF62019A47C9BDEFC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 01:06:08 +0000
Manifest this update:     Wed 03 Jun 2026 01:01:08 +0000
Manifest next update:     Thu 04 Jun 2026 04:49:08 +0000
Files and hashes:         1: BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl (hash: rtTaGkOSsnFkWQyd6pi6vkkHtWJsBOF4fkOFLs9L5CY=)
                          2: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: +Kb0QkuG6f/u6BTqbTg841fMbaQ1r4RI338rMHPGvvc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl
                          rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:72:91:be:07:7f:a9:63:5c:b3:30:9b:f6:20:19:a4:7c:9b:de:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB15A9816D96CD6D5CD78E524B075E4A91EDC58
        Validity
            Not Before: Jun  3 01:01:08 2026 GMT
            Not After : Jun  4 04:49:08 2026 GMT
        Subject: CN=E0940573B49D214BE273B6B1FD6D7481844262CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:e2:ca:80:5a:b2:9a:e4:07:c4:eb:75:97:
                    40:25:59:f7:ea:e9:8f:c3:ec:00:0d:2b:07:e3:7e:
                    6b:80:3b:33:3d:79:9e:3e:a7:aa:54:31:63:25:ff:
                    ae:1a:d5:10:e4:8a:a3:47:8a:d6:92:8a:10:f2:27:
                    11:22:b7:24:18:b1:95:8e:32:66:74:6a:e3:cb:3c:
                    59:00:c4:a0:23:40:3a:f0:6a:c4:fb:0b:f5:94:bb:
                    e4:2d:e5:45:22:a4:66:8e:de:b0:97:7e:a4:24:4c:
                    30:c6:6c:ef:f9:75:e2:36:79:c5:01:ea:53:ec:fb:
                    ea:25:8a:0c:24:c3:fd:cb:53:d5:2f:03:b0:c2:27:
                    61:a7:1b:c8:32:b2:e4:61:34:bf:f6:9a:d2:96:dd:
                    26:20:d0:c0:21:d0:50:57:39:69:8f:dd:f9:36:fe:
                    3d:6f:56:ca:e9:cc:95:7c:23:c4:84:00:d4:3a:b6:
                    dd:72:1a:23:b6:b4:78:a9:0a:a6:e4:03:87:fb:ca:
                    84:f0:17:37:06:72:c4:42:33:d2:56:30:a4:85:e5:
                    62:5c:34:ce:84:95:f1:a6:69:5e:a0:5b:2b:e6:1a:
                    4e:1e:7f:fc:8d:1b:08:d6:31:c6:67:d8:0e:09:61:
                    77:c8:48:27:12:53:3b:2d:57:88:0a:74:61:3f:a2:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:94:05:73:B4:9D:21:4B:E2:73:B6:B1:FD:6D:74:81:84:42:62:CF
            X509v3 Authority Key Identifier:
                keyid:BC:B1:5A:98:16:D9:6C:D6:D5:CD:78:E5:24:B0:75:E4:A9:1E:DC:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:04:90:f9:93:3d:a2:5a:d2:b6:ff:46:09:2b:48:d8:2e:
         a2:33:cd:a7:e7:61:4b:96:6c:c9:9b:53:77:34:5a:74:d9:08:
         43:88:2c:2b:22:2e:1f:1d:7e:4e:e7:a2:91:ec:02:c9:02:c5:
         01:19:3f:e4:9d:79:21:b1:03:c3:d3:17:9f:dc:9e:cd:e3:32:
         e0:1d:c3:19:aa:9b:f3:ff:db:25:e8:c3:a4:9d:dc:c2:8e:b8:
         f2:f6:09:a8:f6:c2:ad:e8:25:fc:44:30:b3:b3:d1:5c:06:a5:
         3a:bb:b0:55:94:c9:b1:57:47:20:9a:64:bb:28:9a:d2:e2:86:
         94:2b:19:c9:06:90:21:28:75:ff:90:9d:01:da:00:94:60:2d:
         e8:49:c8:3a:de:01:27:ce:0c:1d:ce:84:3d:57:86:a4:9f:4f:
         33:37:a4:a5:6a:e4:8a:25:b0:2a:cb:dd:1c:8c:0f:ba:4d:7b:
         23:50:fd:bb:8b:93:73:62:29:b1:72:6e:ae:9e:7c:17:f8:1d:
         65:b8:bb:26:24:59:db:65:6a:0e:12:2d:f4:c4:05:50:6e:6d:
         66:3c:6b:da:17:e1:02:1e:55:f6:01:a1:20:b6:ff:33:cf:88:
         51:40:18:a4:af:b5:da:c1:70:03:2c:ac:27:08:0f:60:a4:8f:
         f0:76:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:39:20 2026 by rpki-client