Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
File:                     B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft (raw, json)
Hash identifier:          rI7XXNErQwGglF4DVPzx46i9fxr0dFC0j1cheYO3KyU=
Subject key identifier:   2E:00:C2:15:25:80:0B:D3:C5:4F:3D:73:3D:93:B5:75:58:F5:AE:71
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       35A8A91D84BFEE3B29FF4FE48BCCAE49CBF30473
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
Manifest number:          E5
Signing time:             Tue 20 Oct 2026 11:28:46 +0000
Manifest this update:     Tue 20 Oct 2026 11:23:46 +0000
Manifest next update:     Wed 21 Oct 2026 13:49:46 +0000
Files and hashes:         1: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: rQv5s8+gPpGYB/vGkK0E1KzGoHeIzauVQLPwV+zcAQU=)
                          2: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8=)
                          3: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=)
                          4: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=)
                          5: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=)
                          6: 3130332e31362e3133392e302f32342d3234203d3e20313338303737.roa (hash: fb0u8nL2mSZSjhRNXrQKe5m4wVsqo96iE9FDTVCkkuc=)
                          7: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl (hash: DY9h/mzBPSJQ/WBC1IAV7UfwHph7tJaOHIpUqJoZ0cU=)
                          8: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=)
                          9: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: tjiI+qv5K6jVgsJD0bWk0XAJK3Ch0HFCGyxU2fDhIKk=)
                          10: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: ofLAcZqnlKOmXqsmeIfCr72lWZy9ZeTWZkof0/9RVb8=)
                          11: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=)
                          12: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=)
                          13: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: Xej95JrdMsifVKYujoAl0DIGRkayLR1TXbEVcv1ObYw=)
                          14: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: sbLJ41IDFdN5IJsomNQRipWLxXGCHRyqteaWEwRsz7Q=)
                          15: 3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (hash: gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=)
                          16: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg=)
                          17: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: IexADjY/vH+ci1AK/jeAttZdrOIQ48kpykD2boWk1lE=)
                          18: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (hash: xLR88IyMVCA8vdgyK8OQ+LkpI8JImP1CEA8k4aA9Syk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 13:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a8:a9:1d:84:bf:ee:3b:29:ff:4f:e4:8b:cc:ae:49:cb:f3:04:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: Oct 20 11:23:46 2026 GMT
            Not After : Oct 21 13:49:46 2026 GMT
        Subject: CN=2E00C21525800BD3C54F3D733D93B57558F5AE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:70:84:8f:a4:53:fa:02:3c:47:3a:17:6c:
                    d6:e1:34:b0:56:05:18:87:bd:fa:50:a8:3d:df:46:
                    53:a0:3d:82:c1:4d:67:0f:88:90:09:1c:61:51:58:
                    1c:ca:93:dc:fa:8f:79:3d:c2:38:0f:9d:4f:cc:0b:
                    e9:62:d7:bb:a6:4d:76:dd:a2:8d:4e:e6:75:cf:c8:
                    40:9e:e0:63:da:8d:76:1b:90:36:d2:b9:40:c1:6a:
                    4c:99:65:92:80:db:f4:eb:00:f4:bf:e5:d1:9a:84:
                    cd:3f:54:1a:12:4b:39:28:17:04:ba:3a:f4:17:ad:
                    15:d8:bb:f8:bb:d1:96:74:c9:03:13:d4:9e:cb:24:
                    18:d5:7e:0c:3c:2b:f5:2a:ca:69:9b:04:25:66:d9:
                    7c:46:94:2d:b4:cb:49:e9:83:09:73:ff:10:00:95:
                    60:cb:14:09:4b:d3:86:86:18:33:5d:7a:62:73:4d:
                    84:e5:3e:41:10:60:4f:00:85:5d:88:86:74:cb:bc:
                    69:5f:de:6f:69:bc:f7:bb:cc:f0:56:c1:ca:19:f1:
                    18:47:76:36:05:1e:55:dd:f3:ea:9c:dc:ee:18:a1:
                    05:65:d9:1b:bb:62:30:84:b0:37:16:74:ca:5c:4b:
                    a8:65:b6:25:ff:55:7f:b5:ed:70:cc:bc:87:7d:3d:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:C2:15:25:80:0B:D3:C5:4F:3D:73:3D:93:B5:75:58:F5:AE:71
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:74:d3:89:97:64:52:62:71:0a:14:84:95:38:97:54:bc:21:
         40:c8:14:5e:7a:12:ae:2e:ce:0b:79:49:44:f5:e9:eb:e7:25:
         bb:47:90:49:ad:82:df:f2:9e:c0:55:42:02:aa:3b:de:32:07:
         c7:99:11:6d:ab:6c:49:bd:56:f5:e8:b3:b0:cf:86:20:a7:e7:
         fc:f2:e3:f7:cb:1e:da:37:8b:70:45:af:7a:2d:74:bb:2f:26:
         82:5e:6c:65:bd:88:c3:29:67:5c:1e:a1:a5:da:27:11:f3:f7:
         1a:46:c9:89:e8:dd:e7:aa:b3:57:f1:d6:41:40:54:a8:4e:55:
         48:2e:e4:b6:2e:64:0f:a8:4d:0a:87:ec:71:5f:6f:05:2c:4b:
         84:81:4f:d3:d8:ac:f1:c0:46:bd:95:7e:6d:a0:ec:b4:0e:05:
         79:29:99:e6:50:8e:9b:a7:01:3d:1c:16:af:0c:d7:62:07:54:
         9a:e9:12:7c:f6:a4:8a:47:9c:ae:6b:28:b4:a4:f1:fa:b4:94:
         39:fa:24:d9:62:42:d8:f5:26:13:e1:18:ac:b4:a0:0d:18:75:
         1b:ba:66:4b:7f:b2:f8:5b:98:94:4a:e8:c2:95:21:83:13:06:
         31:b2:a7:4f:6f:a4:e4:d7:1d:a2:dd:f3:a1:55:f0:4a:1a:b2:
         d3:ef:c3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:43:55 2026 by rpki-client