Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
File:                     ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft (raw, json)
Hash identifier:          HfLKBhJihu2QxKbhdkQX12yMSDx+vqW7uApOmU0Dq/U=
Subject key identifier:   99:04:46:F8:EB:EF:E4:D7:F4:6C:AC:E0:17:0E:9C:D9:FA:BD:BC:7E
Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
Certificate issuer:       /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Certificate serial:       6B9A719B1DA65DBA52FE6ED4B8FBDA8136B75E30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
Manifest number:          42
Signing time:             Fri 19 Jun 2026 18:28:07 +0000
Manifest this update:     Fri 19 Jun 2026 18:23:07 +0000
Manifest next update:     Sat 20 Jun 2026 19:02:07 +0000
Files and hashes:         1: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: MI6jQTtOVHvsuWHm0uvBE0TFhtVi+xCMKjXMCSCBFDY=)
                          2: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl (hash: u8NFpsGyz0KSe82rSOGSNcxoyGBtwwRNukE83u3tlxg=)
                          3: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0=)
                          4: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=)
                          5: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: CVFptYCjc0BlHCccW2Xncqnkcsz2aSryEWVdhnNHxQY=)
                          6: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: 12cGaGOgBCZ2rP3AvRmGNqqU8d1JvTtobCIZ/qRPUPE=)
                          7: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
                          rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 19:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9a:71:9b:1d:a6:5d:ba:52:fe:6e:d4:b8:fb:da:81:36:b7:5e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
        Validity
            Not Before: Jun 19 18:23:07 2026 GMT
            Not After : Jun 20 19:02:07 2026 GMT
        Subject: CN=990446F8EBEFE4D7F46CACE0170E9CD9FABDBC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:fc:20:80:1a:7f:43:86:d1:e0:75:22:2d:
                    3c:e9:b5:5d:d6:69:1d:5f:63:7f:19:78:a1:0d:a8:
                    4b:56:8b:33:74:0e:48:66:1c:ef:85:2e:fe:dd:4a:
                    ce:5d:0a:07:0a:61:ef:0d:14:4d:cd:71:14:74:38:
                    ec:3a:ca:32:1e:89:85:a1:89:06:bc:91:cc:24:1c:
                    9a:5f:4a:5d:97:28:bd:a0:81:12:40:6f:76:e5:b3:
                    fc:e7:92:9e:62:85:12:f6:2b:1a:9c:67:fe:f8:71:
                    e5:e5:71:3a:ec:10:81:63:f0:02:76:c1:69:c6:46:
                    16:b7:db:68:f9:93:1b:0b:5d:bc:97:45:6d:d6:a5:
                    9a:d4:ae:68:ff:e4:12:57:53:84:60:1b:0a:ef:85:
                    82:90:d0:23:59:b4:8a:bf:6c:82:69:05:92:42:fa:
                    16:72:d5:c2:e1:4d:0b:9b:0a:9c:d4:5e:e6:1e:de:
                    f0:40:21:40:e0:8a:ad:63:9b:66:03:f3:dc:e4:7b:
                    7d:19:e2:4a:19:4a:c2:02:59:a9:00:ec:22:2d:81:
                    f1:b9:41:cd:fe:b6:55:b4:ba:32:41:fc:21:2d:60:
                    e9:88:f6:43:b5:e8:ea:d5:2f:3a:7b:92:d0:99:4f:
                    da:d9:f0:01:59:26:a9:1d:66:44:9c:4d:56:51:cb:
                    49:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:04:46:F8:EB:EF:E4:D7:F4:6C:AC:E0:17:0E:9C:D9:FA:BD:BC:7E
            X509v3 Authority Key Identifier:
                keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:44:48:59:2b:df:7c:98:97:51:a5:f1:be:39:94:b5:37:5e:
         c0:3b:be:62:39:d0:d4:7e:03:56:3c:27:5c:d4:e3:8e:a3:a5:
         ce:50:45:25:61:90:43:d5:f4:1a:25:6f:b6:48:46:b1:0c:4c:
         a1:87:90:3b:09:15:49:fd:88:5e:d8:f4:42:b4:79:8d:a4:62:
         b1:80:c3:55:9d:df:26:88:c0:b8:b4:ae:e9:fd:e0:5b:89:6c:
         1b:08:9f:d4:9e:9f:48:b2:20:3d:9e:02:e7:c9:37:a9:b3:f7:
         14:f3:45:0d:cf:ef:10:0d:ec:7a:e6:4b:45:e2:38:bf:ef:81:
         27:9e:17:89:3c:20:03:f1:51:86:0a:82:9c:52:f5:58:77:27:
         2b:56:6f:59:44:48:fe:e9:69:4a:6b:db:89:b4:81:8d:a2:dd:
         e9:f2:91:eb:b7:7a:fa:06:9c:26:d8:3e:e9:4a:90:6e:81:3a:
         42:3b:ee:cd:db:e3:29:23:d4:20:68:a9:55:94:b0:e1:2f:2e:
         f4:7a:48:20:25:de:96:fd:23:08:f7:20:f4:b1:3f:62:62:42:
         a1:6e:26:88:1d:71:2f:54:6a:a1:bb:ae:c5:5d:47:bc:16:e9:
         dd:74:59:b9:b4:aa:26:0c:af:af:37:64:33:16:d1:32:9f:91:
         fe:f2:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:00:48 2026 by rpki-client