Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
File:                     12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft (raw, json)
Hash identifier:          FTMblMn+mhHAikxlQW06qzjzPGCvGXn5Fkxtry8SWr0=
Subject key identifier:   3E:BF:C9:71:1B:07:0D:6B:75:85:3C:E2:AC:15:FB:8B:05:42:B9:8F
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Certificate issuer:       /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial:       4B7004461260C09876C5C23A5A6037C589A7B6CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 22:07:38 +0000
Manifest this update:     Fri 19 Jun 2026 22:02:38 +0000
Manifest next update:     Sun 21 Jun 2026 01:02:38 +0000
Files and hashes:         1: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: jn+GzuAFdRGnqz/8h2QUcRukZQjtYixsBnGXWuK3nO4=)
                          2: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: by6bVuVjvD6SHS/RSc1MKPNjclAKxLlvShxlE0Ivay8=)
                          3: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: M54jxmbu4YqiH5X9dKoh0g3u0CXxxc0mduMC1QC7i/M=)
                          4: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: U/FMi72YlD8fNIhbb89qQOjcqCNZEMwjeIPmXn3ZWgc=)
                          5: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: OU86nZYQrz1f0zZsfAKDY29WgpGVg/0ubhimI1XnObE=)
                          6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: 5iKsngZjg/l5di0MQ+AlFhBsTwnY2MGxKfhU9yL6oXQ=)
                          7: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: MAg0dVjN/VisS1hFmLJD+dd3x6Va1gOOR658nswBpQU=)
                          8: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: vuwCjebAC0K8psv6+IDrny1yHZ/N79DOq7lCZjfajGI=)
                          9: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: 8vjkp3sLrVBHiAgyH56aiCnbINXIhcUYHhrNLKFnaHI=)
                          10: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: yNSswNu7I5mxAU9hq/xHGawbAp2gMK9dl+S56V1qrxg=)
                          11: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: 2s3lWabzD50sQ0ixmB15BHbTU/1RTqhE4LdKo/MqXUU=)
                          12: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: P7oRDyeMFp3GGVH+xItLcQl5cfAi5+V0YTxFNRF2C0E=)
                          13: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: rRunzg5grI5Ndu/SnsBkpVbfTxQjQL07FKaDwNl7X7E=)
                          14: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Wx7ZMhfu3QmD55ls7OXnHTLI9Lf1rMbERV/S++9hKS0=)
                          15: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: iv2uySioSu/LP3pkRp7Yqlhu3HDQ0VTi7eqjw18RcDM=)
                          16: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: p1nXgf4HFcxW2Y4PUtsAhVWmj9aD2WMQQIgpZQnsekc=)
                          17: 12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl (hash: 9r7ivVjvHcTQu1tamns94bdsJu0ehnshj5ii1M0mqwU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 01:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:70:04:46:12:60:c0:98:76:c5:c2:3a:5a:60:37:c5:89:a7:b6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
        Validity
            Not Before: Jun 19 22:02:38 2026 GMT
            Not After : Jun 21 01:02:38 2026 GMT
        Subject: CN=3EBFC9711B070D6B75853CE2AC15FB8B0542B98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:54:a5:23:89:5e:87:02:b8:ca:c0:c5:fa:
                    40:00:c9:46:fe:74:51:ce:33:a0:ad:6d:f2:62:96:
                    61:8e:00:0f:29:6a:3e:d4:2e:fa:93:56:26:ae:03:
                    69:f6:23:21:3a:89:d5:8f:95:c7:d8:ad:da:f9:ba:
                    23:15:ad:47:6a:fd:2c:7d:b8:14:06:f0:f3:72:f7:
                    44:ca:a9:df:39:41:3a:f5:24:ca:00:d8:fc:9c:1c:
                    f0:63:ff:eb:23:3a:cf:c4:c3:54:38:d7:c0:36:8a:
                    8d:de:54:40:3c:6a:c7:c1:2b:60:b6:9b:ff:98:2d:
                    93:57:a9:7c:db:30:b7:bf:e1:6e:1a:42:86:c3:36:
                    05:0f:28:1f:2d:ec:42:86:f9:26:cd:59:c4:d0:f7:
                    37:bb:ca:3d:12:d7:f3:54:35:f3:13:59:13:af:f9:
                    a2:8d:59:f2:f7:fc:63:de:d7:7a:aa:45:12:84:99:
                    f1:cb:12:46:ce:45:c6:8c:b3:45:96:5e:55:5e:cc:
                    7d:07:f4:d0:2a:26:28:f0:d2:e7:40:43:a3:db:09:
                    7f:46:cf:39:7e:da:9c:16:65:83:08:e8:d3:4f:7d:
                    5b:6c:2c:33:34:d2:b6:a7:49:fc:a6:54:c9:ce:7d:
                    54:2b:56:ee:97:24:8e:8f:69:08:d1:77:1a:de:e7:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BF:C9:71:1B:07:0D:6B:75:85:3C:E2:AC:15:FB:8B:05:42:B9:8F
            X509v3 Authority Key Identifier:
                keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:40:ab:0d:b9:c9:e7:ed:5d:d6:e5:9f:fe:d7:71:99:32:4b:
         58:e5:aa:dd:99:4e:ed:15:15:59:28:d2:39:1a:fa:b8:7b:ef:
         55:a8:44:20:0c:12:65:09:df:3e:3b:41:88:d5:0a:b2:8c:fa:
         2c:66:8f:38:bd:80:71:0e:e2:28:bc:0d:74:19:45:d0:10:ef:
         ec:b0:26:39:95:61:4e:a5:70:bb:4b:84:84:3d:81:63:78:51:
         3a:c3:b8:c0:35:f7:49:b1:84:7c:e0:24:06:a1:ec:e0:3b:35:
         8b:24:0a:38:e8:1b:c1:7e:82:fd:19:30:19:6b:41:dd:b4:23:
         f4:74:6f:cc:98:0a:49:91:70:c7:f2:fb:6b:f9:c4:76:05:2b:
         c9:c6:77:33:06:83:44:08:48:5e:67:0a:c4:f1:6b:07:0e:77:
         d3:7a:15:73:e4:d4:34:31:db:de:8a:5d:89:d1:39:01:f5:76:
         ed:91:52:22:43:5e:60:8a:a7:00:f4:c2:75:d7:4d:0f:90:d5:
         2b:ff:c8:11:d0:cf:23:24:c3:1a:33:64:43:34:9c:67:20:2a:
         eb:f6:52:1d:c0:5a:4a:c6:fd:30:11:6c:bc:31:e4:4a:5e:39:
         eb:9d:9c:17:e5:99:40:b8:5e:17:d3:b7:69:86:2b:9e:2f:b8:
         0d:74:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:16:52 2026 by rpki-client