Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
File:                     F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft (raw, json)
Hash identifier:          xk4auUiWlWylHV2WCmW1rlr8ixPa6/iOmz/R+wcPYU4=
Subject key identifier:   1A:7D:C7:FB:4E:A8:BA:B8:51:B5:74:F7:BF:0F:8C:C8:1F:49:23:38
Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
Certificate issuer:       /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Certificate serial:       0E16A7D55A99EBBD9CE0D35D3571341C172E82FC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
Manifest number:          2B
Signing time:             Tue 02 Jun 2026 14:27:44 +0000
Manifest this update:     Tue 02 Jun 2026 14:22:44 +0000
Manifest next update:     Wed 03 Jun 2026 16:10:44 +0000
Files and hashes:         1: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: rEzu4P6oExwIZaANS5DV2R8BJmVkjCXI7g7sPguv5ho=)
                          2: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: 5CWw2ztPAElFuqMvrZ+eExbk4B2mKb785wpbROO/cwI=)
                          3: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: RCVkQO3x+P4RF48TeYaUmpS+R/Zp+Q7sEuYMIANrgmM=)
                          4: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: C2/pGzPkMt5Vzcyvrqnbj1Bb56h29NNTc3/kAwJYyFk=)
                          5: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: DQ6rpEJu+zPKG4c6tffclYxCxiCj2KQBdnnwehsPRoM=)
                          6: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: JVzJjBAyxQLaPhKhqz1LXrJdrQUjLBthYVZyc/xVxg0=)
                          7: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: 64HGWL2CzebN7GmYL8lPadZ2nwJ3zX055oQRPQondo0=)
                          8: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl (hash: RUbTD7SYcc3COyJSQhAPTyKlvw269WGtpDZnuXXXBGA=)
                          9: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: c0E9xb18G6dDWSOYbp1L8pfGiJXjXDV9gaUGsFzHbYc=)
                          10: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: PHP1IFXfqbi+BOlMH5y7xyleYHrhQYI+Lt+NZxh64LQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
                          rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 16:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:16:a7:d5:5a:99:eb:bd:9c:e0:d3:5d:35:71:34:1c:17:2e:82:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
        Validity
            Not Before: Jun  2 14:22:44 2026 GMT
            Not After : Jun  3 16:10:44 2026 GMT
        Subject: CN=1A7DC7FB4EA8BAB851B574F7BF0F8CC81F492338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:f3:89:60:57:d3:bc:c2:fb:d8:35:06:b6:
                    09:74:af:55:71:09:f8:b8:e5:af:86:54:92:d9:83:
                    e6:e2:8f:fb:8b:96:01:3d:02:62:3c:fd:be:a7:a4:
                    d9:80:59:e9:8f:7b:18:86:11:a3:b9:c2:fc:09:bd:
                    5b:ec:56:83:be:04:e4:ee:47:4e:c2:57:9c:cf:a2:
                    58:a9:4d:3d:b1:aa:34:98:38:fd:64:81:11:ca:7d:
                    39:e3:3a:53:5c:32:ba:14:69:e2:ee:7f:12:0c:cb:
                    a0:03:d5:45:75:20:2f:5f:b1:d7:72:09:26:48:a1:
                    07:1c:00:5d:b5:b9:15:8c:d9:19:23:04:3b:e5:75:
                    b0:1f:50:77:1f:72:a7:f3:5f:70:f9:c1:39:58:cb:
                    dd:00:6c:5b:17:fd:ec:f5:78:03:dd:dd:d8:a5:7d:
                    8c:b4:ef:4f:c5:ce:91:0f:27:0d:1c:db:c1:3b:d2:
                    4a:39:59:8b:18:63:bd:01:38:97:90:30:d0:ad:24:
                    d9:a5:74:c1:53:9a:9b:9b:fa:a0:fa:d8:ec:a2:86:
                    7f:89:5f:45:5c:e4:c0:e7:94:e5:ec:b2:2e:a0:61:
                    33:2d:5e:73:c8:c5:17:c3:8e:a8:51:0f:36:5f:6a:
                    a2:99:64:e4:ed:90:e9:d1:07:5b:77:28:2d:12:5f:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7D:C7:FB:4E:A8:BA:B8:51:B5:74:F7:BF:0F:8C:C8:1F:49:23:38
            X509v3 Authority Key Identifier:
                keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:52:cc:d5:e9:0a:1c:e2:4c:e6:55:7a:c5:12:71:3f:fe:62:
         3b:32:33:6d:4a:5c:fc:1b:29:6b:ba:39:8c:da:e9:6a:cb:94:
         a4:8a:57:00:7c:fa:a2:18:90:84:c2:9b:a4:93:83:b4:3b:67:
         f1:e9:67:aa:b2:89:55:eb:ae:a7:34:da:c3:da:9c:db:46:47:
         c8:fb:ff:9f:69:92:40:9e:42:ac:ef:15:4e:26:32:fb:7e:71:
         e4:9e:a7:90:c6:04:19:4f:09:40:bf:9e:3f:45:37:91:e5:d9:
         a9:d8:ba:fe:30:1f:a2:2d:a7:04:44:28:23:8b:cc:f1:00:5c:
         62:f8:2d:7c:be:f2:be:d9:0b:d1:c3:e1:6d:7d:ad:f9:59:f2:
         cc:6f:ec:92:54:5b:80:8b:56:a7:08:79:80:a2:15:75:87:51:
         22:a2:9b:af:4b:ff:54:cd:9c:6a:f9:1c:92:e9:23:7d:14:37:
         da:2c:47:72:de:d2:c9:d1:5c:2a:ce:22:71:2b:7e:fd:ea:9f:
         a3:da:72:68:b1:2e:e9:ff:cf:ef:ec:a2:79:27:38:98:bd:11:
         09:ff:84:3a:cd:e5:84:35:98:39:18:2a:6e:10:20:14:9f:14:
         f8:92:e5:3c:1a:cd:b5:85:8f:07:c2:b9:08:13:76:81:16:83:
         cf:20:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:40:48 2026 by rpki-client