Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
File:                     7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft (raw, json)
Hash identifier:          KNq/WrKw6nsxt0Y9COXIA2ACQEsjHc5BbhJI9QGyudU=
Subject key identifier:   FD:12:69:7C:1A:CA:37:5A:2A:0E:71:89:41:60:3A:BC:3E:94:A0:3F
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Certificate issuer:       /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial:       614D6066701355EBE83E9B0DBAEA9F3DAB08C146
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 01:06:05 +0000
Manifest this update:     Wed 03 Jun 2026 01:01:05 +0000
Manifest next update:     Thu 04 Jun 2026 04:31:05 +0000
Files and hashes:         1: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: Ceh8rJrQm7Qi4u0ZWtFtIRi76jfUMfkPpmVXy/7YVr4=)
                          2: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: f7mNVMXrNdEsNoFnuQE41PlKhPiJR8mRcK26l9bSldY=)
                          3: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: gz0mtebVHRYvwcZULFWZzRpAOfu5PGcdFQ6/2J/rYJg=)
                          4: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: 0OL8yRFc3dc/04Uo3qwJLQPh9f57dZz2AXVP9/HkiQ8=)
                          5: 7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl (hash: GPy6Z8v3hm4KxKS3Tj5wb8tzHG1cJ0K7DwqRySxCkj4=)
                          6: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: vG4Mb3wY0nH5gNgPEIFeNyHxuUNv8KkKuwMYPOjoYEg=)
                          7: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: iPYJKyy3LjL+wdadigRDVFan06P6sm3qFgCQgu9haaI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
                          rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4d:60:66:70:13:55:eb:e8:3e:9b:0d:ba:ea:9f:3d:ab:08:c1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
        Validity
            Not Before: Jun  3 01:01:05 2026 GMT
            Not After : Jun  4 04:31:05 2026 GMT
        Subject: CN=FD12697C1ACA375A2A0E718941603ABC3E94A03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:c4:8d:41:6a:f9:e1:0d:2f:b4:b1:57:39:
                    fc:73:08:e9:8f:f7:1f:3d:d7:be:aa:9a:a4:c0:f4:
                    e6:e8:72:92:2b:7c:17:dd:1f:0e:b7:df:8e:7d:b6:
                    5b:69:9e:76:cf:61:01:e2:24:c6:0c:29:bb:89:c8:
                    3d:2a:e0:c3:62:fb:5e:e9:ab:6d:6a:2a:6e:4e:70:
                    47:49:c1:f3:67:04:17:9b:68:4a:90:5a:b5:24:33:
                    16:a8:80:40:a2:e9:8b:96:59:f4:46:a7:7d:e0:57:
                    de:b4:3f:54:e0:be:f7:7d:4e:70:13:be:fc:8d:b9:
                    27:fb:72:9e:d3:e9:23:f2:7f:96:b7:d2:29:b7:f4:
                    b9:df:7d:13:fb:9d:b8:66:21:9c:9c:a8:b8:b6:17:
                    21:97:8f:9f:38:fc:bf:ca:d6:37:3d:d3:aa:2d:4a:
                    8a:19:5f:d5:47:ad:9c:62:32:2d:fe:a2:d1:1b:7d:
                    b8:a2:a4:1c:73:78:70:52:db:8b:be:ff:b2:4c:ed:
                    07:e5:cc:0d:5c:c1:b9:06:e9:db:72:22:27:04:27:
                    a3:1f:4d:25:d1:0b:55:ba:62:5b:6c:08:e5:b6:ed:
                    54:7e:eb:18:4d:98:96:86:36:37:f4:53:e6:c9:9f:
                    f6:0f:f7:5f:4a:8a:55:e9:d0:6f:74:52:6f:87:8a:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:12:69:7C:1A:CA:37:5A:2A:0E:71:89:41:60:3A:BC:3E:94:A0:3F
            X509v3 Authority Key Identifier:
                keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:dd:65:c5:2d:63:17:e5:e7:95:68:a3:e9:d1:0e:6a:43:86:
         fd:31:a0:eb:bc:ac:b4:c8:e0:bc:d7:6c:86:3d:34:50:5c:19:
         81:2e:ab:34:de:0d:e1:bf:67:de:56:01:b3:8b:e7:d6:37:f4:
         31:75:94:75:96:73:ab:ed:41:cf:7a:32:76:2a:8b:70:33:9c:
         31:96:b0:0d:e5:42:83:e0:52:b4:cb:00:da:9b:2d:fc:5c:43:
         bd:c5:ca:6f:5d:51:42:59:78:1b:50:13:2b:91:79:15:3a:5c:
         ce:2e:cd:82:12:ae:60:4f:81:d5:14:f1:37:1b:0d:82:93:8b:
         47:43:78:91:49:4f:c5:3f:d9:fd:5c:6c:7a:c2:83:6f:7d:61:
         2f:a2:da:a2:ed:94:a8:3a:f9:6f:34:b9:9e:af:48:59:12:1a:
         82:57:d6:e3:3c:e5:fc:d2:07:8e:c2:74:32:36:12:24:2a:ff:
         0f:a1:92:97:1a:f6:58:79:67:2b:24:eb:7d:b6:cf:9a:f9:ce:
         cd:c7:aa:44:3b:15:0e:78:8f:8e:01:88:cc:3a:9d:21:70:14:
         ba:15:f8:e3:40:81:a2:eb:18:f0:ab:72:4c:04:c4:1d:5f:84:
         9a:51:ee:6f:d9:cc:2e:80:73:9d:c4:69:f1:46:63:8e:b2:fc:
         9e:81:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:19 2026 by rpki-client