Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
File:                     B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft (raw, json)
Hash identifier:          J1GfG7bYBYKlqEnlY55FlD+ucb2OXPYwLp6xZw/N38E=
Subject key identifier:   EC:1D:D0:E7:1D:FD:82:91:B9:01:38:59:1D:8F:6D:E2:D7:49:7D:CC
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       15FBF643F0916FA4ADD84B0DE8C5A47FB2F5382D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 09:06:16 +0000
Manifest this update:     Tue 02 Jun 2026 09:01:16 +0000
Manifest next update:     Wed 03 Jun 2026 12:57:16 +0000
Files and hashes:         1: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg=)
                          2: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl (hash: F96M7y3R7Fg94W23pxhy+ST17R26spA6C1s31ZWGoKA=)
                          3: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (hash: xLR88IyMVCA8vdgyK8OQ+LkpI8JImP1CEA8k4aA9Syk=)
                          4: 3130332e31362e3133392e302f32342d3234203d3e20313338303737.roa (hash: fb0u8nL2mSZSjhRNXrQKe5m4wVsqo96iE9FDTVCkkuc=)
                          5: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: tjiI+qv5K6jVgsJD0bWk0XAJK3Ch0HFCGyxU2fDhIKk=)
                          6: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=)
                          7: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=)
                          8: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: Xej95JrdMsifVKYujoAl0DIGRkayLR1TXbEVcv1ObYw=)
                          9: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=)
                          10: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8=)
                          11: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=)
                          12: 3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (hash: gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=)
                          13: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: sbLJ41IDFdN5IJsomNQRipWLxXGCHRyqteaWEwRsz7Q=)
                          14: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: rQv5s8+gPpGYB/vGkK0E1KzGoHeIzauVQLPwV+zcAQU=)
                          15: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=)
                          16: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: ofLAcZqnlKOmXqsmeIfCr72lWZy9ZeTWZkof0/9RVb8=)
                          17: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=)
                          18: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: IexADjY/vH+ci1AK/jeAttZdrOIQ48kpykD2boWk1lE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fb:f6:43:f0:91:6f:a4:ad:d8:4b:0d:e8:c5:a4:7f:b2:f5:38:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: Jun  2 09:01:16 2026 GMT
            Not After : Jun  3 12:57:16 2026 GMT
        Subject: CN=EC1DD0E71DFD8291B90138591D8F6DE2D7497DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:80:21:f6:0f:01:1a:73:a5:6c:d1:17:6c:
                    a7:3e:dc:dc:22:4d:9f:55:7c:21:4d:f7:77:01:17:
                    27:0f:0e:de:ee:13:74:3a:11:d6:40:20:97:80:e7:
                    78:bd:68:a2:e5:6a:ec:d3:27:77:72:de:1f:88:52:
                    fe:ab:47:c5:eb:31:04:8d:7d:2c:41:a6:ba:29:b2:
                    b3:e8:95:40:e1:e4:47:c0:81:9c:ba:88:1c:96:11:
                    95:6c:a5:f9:df:3c:80:d2:ee:58:fe:ae:92:76:6c:
                    72:d4:9a:68:16:07:83:50:87:1a:73:b3:34:e2:63:
                    78:c3:5b:7d:98:7d:6d:42:6c:d6:04:46:eb:5f:dd:
                    70:10:d5:cf:7e:fb:fa:9f:68:6e:86:fe:85:76:11:
                    ac:52:16:74:0e:6f:9f:5d:28:52:eb:d0:0f:85:6b:
                    53:f8:77:3d:57:2f:22:c6:88:c2:1f:4f:27:d2:53:
                    04:90:c6:ed:ed:c8:d1:f9:33:8e:44:86:89:ff:1b:
                    76:7a:c4:84:f4:10:70:4c:f3:7d:20:7c:4f:da:d7:
                    21:2c:53:0b:77:21:d8:bc:1b:ad:c5:32:4f:1a:28:
                    e7:92:e6:6c:28:1d:ac:58:da:b4:88:f6:2f:5f:98:
                    2f:d2:99:a0:f0:dc:da:11:4b:ef:dd:29:5d:5d:8e:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1D:D0:E7:1D:FD:82:91:B9:01:38:59:1D:8F:6D:E2:D7:49:7D:CC
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:38:75:36:19:09:5e:ae:f1:9e:f9:c7:e3:3e:9c:4a:06:bb:
         13:c6:9e:04:f9:ce:ee:2b:ad:07:a4:cb:e9:4d:47:cb:b9:bb:
         c5:2d:b6:43:7c:8b:50:88:5b:d4:7e:4f:35:06:83:10:de:30:
         e2:ad:83:9e:8c:4b:18:43:11:5c:16:c8:93:d8:a7:84:73:85:
         a1:b7:3b:c0:50:6a:51:25:10:38:ab:ee:a6:4d:46:a1:77:e2:
         71:f1:a9:2d:42:83:55:64:67:ef:83:64:6f:2e:4a:a0:cb:4e:
         97:c3:5b:b5:45:47:c4:b9:3e:ea:55:01:41:9f:ef:3a:09:2a:
         98:1b:76:ac:65:dd:16:63:41:d8:3c:fa:2d:c6:d3:b3:b0:50:
         53:18:c9:6c:5a:f4:c1:75:9b:ba:5b:c1:02:2d:34:9c:48:7b:
         56:2f:7b:3f:fc:3c:76:42:4a:d4:3f:36:87:bc:5f:58:13:34:
         15:3a:fd:05:e7:ef:6f:84:ea:57:47:f0:2c:80:de:70:5f:09:
         db:c1:55:df:59:b8:d6:24:0f:3c:81:85:bc:01:ad:13:f9:dd:
         be:ea:3f:20:95:15:72:ef:49:cd:c7:8d:b6:92:d5:43:93:47:
         57:3a:9c:97:d0:ce:81:53:45:ce:76:2f:02:81:06:9c:6d:47:
         38:bb:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:05:19 2026 by rpki-client