Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
File:                     12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft (raw, json)
Hash identifier:          7e62UJVD5ZwNDaI83AbpSykqG3hNihcAgbGM+VvuRAk=
Subject key identifier:   CD:74:F6:5C:7D:73:A0:EE:2F:40:54:16:F9:E1:C7:95:C2:2E:CC:58
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Certificate issuer:       /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial:       6E620FE9A72CB9F2017243434EA4B3B8774F4315
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
Manifest number:          A4
Signing time:             Wed 02 Sep 2026 15:06:36 +0000
Manifest this update:     Wed 02 Sep 2026 15:01:36 +0000
Manifest next update:     Thu 03 Sep 2026 18:39:36 +0000
Files and hashes:         1: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: 8vjkp3sLrVBHiAgyH56aiCnbINXIhcUYHhrNLKFnaHI=)
                          2: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: vuwCjebAC0K8psv6+IDrny1yHZ/N79DOq7lCZjfajGI=)
                          3: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: M54jxmbu4YqiH5X9dKoh0g3u0CXxxc0mduMC1QC7i/M=)
                          4: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: MAg0dVjN/VisS1hFmLJD+dd3x6Va1gOOR658nswBpQU=)
                          5: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: yNSswNu7I5mxAU9hq/xHGawbAp2gMK9dl+S56V1qrxg=)
                          6: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl (hash: lnz+sawW7dJyQOsh1imQn45ZzpnOT8w//8Qub3oXcww=)
                          7: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: 5iKsngZjg/l5di0MQ+AlFhBsTwnY2MGxKfhU9yL6oXQ=)
                          8: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: P7oRDyeMFp3GGVH+xItLcQl5cfAi5+V0YTxFNRF2C0E=)
                          9: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Wx7ZMhfu3QmD55ls7OXnHTLI9Lf1rMbERV/S++9hKS0=)
                          10: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: 2s3lWabzD50sQ0ixmB15BHbTU/1RTqhE4LdKo/MqXUU=)
                          11: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: OU86nZYQrz1f0zZsfAKDY29WgpGVg/0ubhimI1XnObE=)
                          12: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: jn+GzuAFdRGnqz/8h2QUcRukZQjtYixsBnGXWuK3nO4=)
                          13: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: U/FMi72YlD8fNIhbb89qQOjcqCNZEMwjeIPmXn3ZWgc=)
                          14: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: rRunzg5grI5Ndu/SnsBkpVbfTxQjQL07FKaDwNl7X7E=)
                          15: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: p1nXgf4HFcxW2Y4PUtsAhVWmj9aD2WMQQIgpZQnsekc=)
                          16: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: iv2uySioSu/LP3pkRp7Yqlhu3HDQ0VTi7eqjw18RcDM=)
                          17: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: by6bVuVjvD6SHS/RSc1MKPNjclAKxLlvShxlE0Ivay8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 18:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:62:0f:e9:a7:2c:b9:f2:01:72:43:43:4e:a4:b3:b8:77:4f:43:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
        Validity
            Not Before: Sep  2 15:01:36 2026 GMT
            Not After : Sep  3 18:39:36 2026 GMT
        Subject: CN=CD74F65C7D73A0EE2F405416F9E1C795C22ECC58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:dc:bc:6f:79:a1:20:46:01:06:83:3e:41:
                    f7:5b:d5:24:14:d5:da:33:17:e0:2d:38:b7:ef:74:
                    d3:e8:4f:cd:d3:95:85:f6:f2:a8:e6:ec:cc:07:ed:
                    c5:7b:6f:13:7f:37:50:17:3e:fd:89:58:62:d0:37:
                    f3:b5:ad:bf:f0:9d:a3:b5:10:24:f8:79:18:28:5f:
                    72:9c:8b:fe:08:7b:30:a6:d9:da:d8:31:77:00:d7:
                    8a:6d:32:bc:cb:f6:7c:35:cf:f1:ae:77:06:22:31:
                    35:98:b7:b2:d4:94:87:95:98:78:19:78:b5:95:c0:
                    de:a0:04:e6:64:e5:ee:f9:9a:e6:28:16:51:22:7b:
                    1d:c6:6f:5c:58:41:00:6a:ce:d2:4b:75:a6:ba:a4:
                    35:30:77:0c:86:df:bb:bc:25:cd:91:56:df:08:c8:
                    76:63:31:76:d3:1d:1f:7b:7b:44:8b:11:69:69:b4:
                    03:b3:19:24:36:33:fb:af:87:5b:64:49:e8:f4:33:
                    11:da:c5:5f:3e:5d:a5:ce:23:f2:f0:80:29:9b:93:
                    91:40:35:2b:86:ff:84:1b:7f:03:e0:e3:e7:28:30:
                    58:d7:23:b4:15:6e:e4:12:bf:7a:42:fe:84:d4:c6:
                    29:32:79:34:7b:e5:ed:12:2f:cb:a2:e6:09:6c:e2:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:74:F6:5C:7D:73:A0:EE:2F:40:54:16:F9:E1:C7:95:C2:2E:CC:58
            X509v3 Authority Key Identifier:
                keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c2:60:9b:6c:db:14:bd:82:52:b8:2b:f2:10:2b:31:9f:ee:
         e2:8a:50:b6:5e:06:31:7e:4a:2e:0f:d8:d3:a7:ca:01:68:6e:
         b5:4a:5c:1c:28:56:16:ec:f6:bc:fe:4c:12:d3:28:df:d4:be:
         49:f6:b3:78:88:72:66:1c:ab:1d:a4:b9:59:8e:6a:9f:6c:05:
         fe:87:ed:fd:71:e5:20:9f:34:7f:d8:fb:6c:a7:6f:11:6f:da:
         d2:12:a4:1e:10:a7:f5:76:25:7d:bd:37:90:55:a2:2f:89:97:
         fd:ea:78:a8:57:4e:94:37:b3:02:07:19:5f:ba:9c:f6:28:bb:
         57:74:2e:90:d7:0a:19:00:30:44:09:8b:4f:f2:4c:f7:a9:44:
         e7:2c:18:ce:48:2a:7f:9b:5c:8c:1a:07:4a:dc:a1:2a:b2:44:
         a2:b1:5b:6a:ab:6a:f7:5a:6d:65:e9:22:77:42:2f:1c:3f:0a:
         36:87:86:49:3d:5e:a9:36:e1:03:20:fd:92:64:bf:4a:bd:0c:
         19:a0:13:bc:eb:ac:fd:ed:10:7f:12:3e:9f:56:31:87:aa:03:
         03:f0:9d:cb:08:8a:3a:b3:f6:15:b8:0a:89:4c:55:24:77:53:
         33:22:20:0a:d8:ae:a6:be:f9:72:4c:4a:f3:dd:af:ed:71:c3:
         8a:78:a4:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbmIP6acsufIBckNDTqSzuHdPQxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJCRDVGM0Y2QzVBQjFBOUY0RTMxMkE3REFGQUFDQkMy
MjIyOTQ2RDAeFw0yNjA5MDIxNTAxMzZaFw0yNjA5MDMxODM5MzZaMDMxMTAvBgNV
BAMTKENENzRGNjVDN0Q3M0EwRUUyRjQwNTQxNkY5RTFDNzk1QzIyRUNDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQty8b3mhIEYBBoM+Qfdb1SQU
1dozF+AtOLfvdNPoT83TlYX28qjm7MwH7cV7bxN/N1AXPv2JWGLQN/O1rb/wnaO1
ECT4eRgoX3Kci/4IezCm2drYMXcA14ptMrzL9nw1z/GudwYiMTWYt7LUlIeVmHgZ
eLWVwN6gBOZk5e75muYoFlEiex3Gb1xYQQBqztJLdaa6pDUwdwyG37u8Jc2RVt8I
yHZjMXbTHR97e0SLEWlptAOzGSQ2M/uvh1tkSej0MxHaxV8+XaXOI/LwgCmbk5FA
NSuG/4QbfwPg4+coMFjXI7QVbuQSv3pC/oTUxikyeTR75e0SL8ui5gls4vqJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzXT2XH1zoO4vQFQW+eHHlcIuzFgwHwYDVR0j
BBgwFoAUEr1fP2xasan04xKn2vqsvCIilG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2U1OWRiN2UtOTRmNi00MDAyLTk5ZWYtNWU5NmQ4ZTM3ZTUwLzAvMTJCRDVGM0Y2
QzVBQjFBOUY0RTMxMkE3REFGQUFDQkMyMjIyOTQ2RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMkJENUYzRjZDNUFCMUE5RjRFMzEyQTdEQUZBQUNCQzIyMjI5
NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5
ZWYtNWU5NmQ4ZTM3ZTUwLzAvMTJCRDVGM0Y2QzVBQjFBOUY0RTMxMkE3REFGQUFD
QkMyMjIyOTQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEjCYJts2xS9glK4K/IQKzGf7uKKULZeBjF+
Si4P2NOnygFobrVKXBwoVhbs9rz+TBLTKN/Uvkn2s3iIcmYcqx2kuVmOap9sBf6H
7f1x5SCfNH/Y+2ynbxFv2tISpB4Qp/V2JX29N5BVoi+Jl/3qeKhXTpQ3swIHGV+6
nPYou1d0LpDXChkAMEQJi0/yTPepROcsGM5IKn+bXIwaB0rcoSqyRKKxW2qravda
bWXpIndCLxw/CjaHhkk9Xqk24QMg/ZJkv0q9DBmgE7zrrP3tEH8SPp9WMYeqAwPw
ncsIijqz9hW4ColMVSR3UzMiIArYrqa++XJMSvPdr+1xw4p4pGg=
-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:29 2026 by rpki-client