Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
File:                     207EA811568CF1DB9A757936B650F6F68EBB08B5.mft (raw, json)
Hash identifier:          UVHoE2XX1SRhWksf24ozOJzsM/yA0iaiSlEXTBOatjI=
Subject key identifier:   44:5C:FB:73:F7:44:39:A7:14:39:26:45:6A:EA:AC:9D:A0:81:4F:8E
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Certificate issuer:       /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial:       33AF07069D40B9718BA1D8A089AFE16F3068BE9D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
Manifest number:          10
Signing time:             Wed 13 May 2026 08:15:29 +0000
Manifest this update:     Wed 13 May 2026 08:10:29 +0000
Manifest next update:     Thu 14 May 2026 10:37:29 +0000
Files and hashes:         1: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: yp9LgKk0vpVLD1ssSi3ZMXSFOq3JC5q5meA5QQuObAo=)
                          2: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: P/jDOIqhS8TYGh1HRra14jw9lZ/QNU3dPScct8NOxRA=)
                          3: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: zZnfuS7x4B3IbMWwGHUKAscPUAhTdq47Ud12yvcyTws=)
                          4: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw=)
                          5: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=)
                          6: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: JAv/L1Ca/rOAR83XrzqT+QKIkZeHE06/YMr97eIGL/8=)
                          7: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=)
                          8: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=)
                          9: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98=)
                          10: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: pA4m3YcDohtyW2KH722N1KPWI/anmYo+9ayJjEcxchg=)
                          11: 207EA811568CF1DB9A757936B650F6F68EBB08B5.crl (hash: Wd66kTMIZ6hQFgfoBT1MkqSUFFSbjET8O/xHu8raNsU=)
                          12: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: g+arXZ/+W18ln97mYgZBk8E2/DdTLNyMPheE+2x0Cuc=)
                          13: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=)
                          14: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: YdojAte0DabKD9U31MLajmNX2Ade2ItCQ0uOXVTExGw=)
                          15: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: kk/YLt9sOibq+Ehirb8Tv+ujtGYKVYXNjuOikBMvvf4=)
                          16: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: mhO206C5MCEo68TF6ww7+81+IS3YTnFs3GIVpnP+S28=)
                          17: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: NON+2mKqUMP5nxNEYTSRYXBctaTyrQBZDGBl/+tv7Iw=)
                          18: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U=)
                          19: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yk4mIGPQKduAZWFcwjNTu/2gsTuXAS4f5Gm0DqPPeQM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
                          rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:af:07:06:9d:40:b9:71:8b:a1:d8:a0:89:af:e1:6f:30:68:be:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
        Validity
            Not Before: May 13 08:10:29 2026 GMT
            Not After : May 14 10:37:29 2026 GMT
        Subject: CN=445CFB73F74439A7143926456AEAAC9DA0814F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:34:4f:fd:91:fe:21:4b:a0:8b:0f:60:1d:
                    d9:de:f2:34:93:63:58:f0:ee:d7:66:cc:b3:a5:52:
                    d2:e3:f2:e3:d5:4e:83:97:65:49:e7:03:83:d5:dd:
                    0f:79:5d:83:b3:55:5d:e2:39:d0:3a:18:86:7e:aa:
                    12:af:4b:ea:b5:6c:f4:a3:33:19:b9:19:33:37:2f:
                    d0:ef:04:88:54:c8:6b:1b:b0:8b:b7:b3:62:0d:b0:
                    b7:ee:e7:be:6f:f4:0e:56:c8:4f:d2:f5:f0:cd:9c:
                    bf:6e:0f:9f:4b:2e:80:c9:22:4b:cf:27:80:a3:3e:
                    1b:c2:1a:13:62:b3:d5:b5:54:b0:22:a0:d9:a2:ab:
                    55:0e:83:ff:16:19:6a:bb:b1:82:a7:12:5e:a5:d4:
                    2f:7b:15:f1:45:c6:78:f1:86:2c:e1:00:39:d9:a4:
                    15:3a:9b:c4:0d:26:87:ce:42:26:83:2b:25:71:7c:
                    bc:e9:44:75:ed:12:b1:86:7d:73:19:5a:08:03:77:
                    42:30:7c:90:6b:94:39:5d:3e:08:07:8b:1e:87:4c:
                    80:92:e3:51:11:2b:26:af:c3:2e:4a:8a:02:3f:e7:
                    86:3d:ee:cb:e6:ae:4f:e6:aa:56:77:7e:26:62:21:
                    c3:78:88:41:66:60:df:48:06:72:03:7c:50:08:fa:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5C:FB:73:F7:44:39:A7:14:39:26:45:6A:EA:AC:9D:A0:81:4F:8E
            X509v3 Authority Key Identifier:
                keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e5:f1:47:ef:09:cd:4e:38:38:db:8b:46:8e:1a:5c:76:4d:
         58:69:65:90:39:a0:10:5d:b1:a4:fd:d5:b6:33:b9:56:f7:f2:
         ca:92:7d:1f:42:47:90:dc:e9:4e:b5:8f:9f:37:2c:e6:1e:70:
         56:18:bf:83:fa:cf:2f:44:d6:38:a1:64:82:17:99:ac:2f:c0:
         94:31:de:cf:c9:91:cf:ee:f7:7b:a2:d0:a9:2a:e4:40:83:72:
         45:86:4d:cd:0c:56:4d:8d:2e:97:27:d5:2f:ae:ba:59:6a:33:
         24:d2:02:b6:f3:82:e6:68:a4:ff:b0:f4:c7:49:9f:61:45:a0:
         94:dd:81:8f:ca:2d:4e:c3:b7:6c:41:07:c3:02:4e:58:f9:fd:
         1b:8c:a4:1c:4d:f4:ac:da:bb:6c:31:f8:fe:45:c4:b6:07:f1:
         32:2d:47:75:f5:db:2d:e5:91:c1:62:c9:10:66:da:58:c2:c9:
         f7:8e:28:20:ff:82:6d:de:dd:fc:39:4e:ab:01:a3:71:b9:7a:
         2e:3d:d6:84:03:41:99:14:f0:9d:0e:43:aa:b2:42:e2:36:b7:
         58:8e:0d:71:83:26:68:90:da:4d:38:44:1e:ff:79:7a:9a:c5:
         c5:ec:e0:45:64:9b:3e:e6:7e:7b:fa:38:27:ed:a6:3a:80:d2:
         27:c9:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 02:48:40 2026 by rpki-client