Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
File:                     8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json)
Hash identifier:          5dASjqUImGRfJs2P/VRzVtlbbZt1ueJVuyHf5mIgLUs=
Subject key identifier:   71:44:00:F0:3D:A3:49:C7:C9:D8:C0:C0:BC:DA:C9:36:B3:93:50:85
Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64
Certificate issuer:       /CN=8BE5D6878B464D9FA654023C63F4762E67599164
Certificate serial:       09018843FD152619B0DA4984AE96AA0D2F69404E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
Manifest number:          05
Signing time:             Tue 05 May 2026 08:40:42 +0000
Manifest this update:     Tue 05 May 2026 08:35:42 +0000
Manifest next update:     Wed 06 May 2026 10:07:42 +0000
Files and hashes:         1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=)
                          2: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: JnrW7xntozx3ody4Hr/dkh2rpt5NW08cTLLPuVZWa0U=)
                          3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl
                          rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:01:88:43:fd:15:26:19:b0:da:49:84:ae:96:aa:0d:2f:69:40:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164
        Validity
            Not Before: May  5 08:35:42 2026 GMT
            Not After : May  6 10:07:42 2026 GMT
        Subject: CN=714400F03DA349C7C9D8C0C0BCDAC936B3935085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:c6:6c:4d:c3:9a:b9:45:d8:46:ec:be:8a:
                    4a:56:a3:71:5c:0c:8b:a1:28:9b:a2:89:ca:a3:cd:
                    14:d6:70:32:68:7a:54:67:4c:9e:7c:44:f2:4d:fb:
                    bd:70:ec:cd:07:76:02:6b:a3:38:0d:3e:eb:42:92:
                    cd:43:65:6b:87:c5:a0:a9:47:ac:1c:2e:a4:37:6f:
                    18:14:7a:58:a9:e0:3b:ae:c1:89:bd:e6:8a:24:ef:
                    33:e5:e9:00:ee:95:c7:ab:17:5b:c2:80:ed:d7:5e:
                    51:1a:86:90:ae:52:80:86:1d:b6:e5:53:70:7e:e3:
                    cb:cd:01:d4:06:2c:a8:18:ed:62:dc:12:a4:f2:ae:
                    cf:92:c2:78:74:75:6a:c4:8a:dd:81:a5:36:72:07:
                    9f:ed:74:12:b3:18:f7:57:92:5e:28:68:4a:dc:f6:
                    e4:e3:e8:b1:1e:97:a2:2c:0b:1e:1e:82:59:4a:91:
                    74:98:22:b2:01:d6:b2:7e:ac:5a:c4:21:a1:25:dd:
                    c6:a8:f5:d0:7d:4b:77:d5:b7:76:66:34:b8:e9:5a:
                    7b:ba:84:86:3d:3b:dc:b8:77:b8:9d:d5:ce:d9:45:
                    2a:07:6b:4a:21:9f:da:ed:43:aa:04:95:2d:ba:35:
                    23:02:79:2b:5d:de:65:2b:18:b2:eb:ea:30:5f:e8:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:44:00:F0:3D:A3:49:C7:C9:D8:C0:C0:BC:DA:C9:36:B3:93:50:85
            X509v3 Authority Key Identifier:
                keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:65:e5:41:ec:2e:dc:6a:b4:98:1a:65:91:7d:65:15:ce:ea:
         d3:99:26:5e:eb:f5:0d:74:91:39:4d:04:36:95:a6:da:1a:b5:
         f0:9b:cc:6d:72:bd:88:06:bb:2f:83:69:4e:da:1c:24:1c:48:
         2e:5f:82:7e:69:9e:74:8a:b5:80:27:f3:5a:cb:01:5c:a7:86:
         80:dd:92:8c:48:f3:82:5e:61:69:98:d4:12:a8:96:92:39:69:
         ce:47:4e:04:26:5b:2a:96:4e:ea:0b:40:68:ac:c9:be:af:79:
         db:d9:76:f8:4c:27:6c:71:2d:5d:50:c7:e6:ff:4c:fa:8a:68:
         01:04:dc:07:66:2f:a6:57:11:32:5c:8d:35:72:b9:25:77:86:
         b0:d5:72:57:c3:d5:6b:32:20:90:0e:89:d2:a5:42:49:80:a8:
         56:3c:05:c1:27:09:a3:24:ae:05:50:6c:45:db:f3:ae:6c:57:
         55:f3:3b:e3:c5:3d:13:1a:63:73:8f:31:56:a2:54:64:a5:e0:
         de:76:ee:3b:4a:7a:c7:6a:d7:4c:c9:05:3b:32:17:f4:63:78:
         d8:8e:4b:ea:7e:0e:c8:6a:4f:06:c8:88:70:e1:b1:e4:d0:ec:
         2a:d8:5a:fc:7a:dd:52:a5:e3:d3:b2:4b:a7:2c:5c:0f:3f:46:
         7a:c6:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:06:18 2026 by rpki-client