Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
File:                     BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json)
Hash identifier:          DId9TwHdE1DuCRddIf2ivbhnVTK3lDYSc9kDFRY2VcQ=
Subject key identifier:   16:55:59:62:78:AA:B0:B5:9F:FD:AE:41:07:9E:75:54:D1:58:DD:9E
Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32
Certificate issuer:       /CN=BFD581C2B0FE16E5707177C62A9085855EA69732
Certificate serial:       5B068A6F193820B850025B16BBA1125CF6A68D32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
Manifest number:          7B
Signing time:             Sun 02 Aug 2026 08:33:00 +0000
Manifest this update:     Sun 02 Aug 2026 08:28:00 +0000
Manifest next update:     Mon 03 Aug 2026 11:02:00 +0000
Files and hashes:         1: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: HSkRQlPo3sBrROS9iDhS/dfaTkEmYVq5cWTtBSwlEDE=)
                          2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl
                          rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:06:8a:6f:19:38:20:b8:50:02:5b:16:bb:a1:12:5c:f6:a6:8d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732
        Validity
            Not Before: Aug  2 08:28:00 2026 GMT
            Not After : Aug  3 11:02:00 2026 GMT
        Subject: CN=1655596278AAB0B59FFDAE41079E7554D158DD9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:4d:91:76:99:d2:98:44:bc:f9:2b:c8:d1:
                    96:0b:b7:b3:65:c1:99:a6:d3:d1:e8:62:75:ca:d6:
                    7a:9e:86:b6:af:db:12:5b:fb:aa:0e:41:24:26:a8:
                    22:fa:62:94:56:2e:dc:52:3d:98:78:5a:82:3d:56:
                    e2:7e:7d:4a:1e:14:53:78:bd:5c:8e:18:c6:e6:52:
                    9f:90:44:1a:73:96:e0:ad:0f:51:37:6c:8a:11:6b:
                    11:13:92:04:16:8e:e7:b6:90:e9:e8:fa:e4:7e:5f:
                    9a:ce:1f:55:e5:99:2c:7d:41:db:24:c7:ed:02:b2:
                    f2:4b:32:8a:f5:2c:56:91:9a:53:f4:91:74:ac:99:
                    b6:ef:ff:42:6e:d5:1e:ed:d4:4c:8f:92:2f:c2:9a:
                    35:61:bf:ff:03:df:68:32:d5:5d:20:d6:c4:fe:c3:
                    58:5b:eb:41:a7:aa:67:cf:4f:d8:46:0d:cf:5d:ad:
                    49:4f:d4:3e:ac:64:f1:1c:ff:2c:98:c5:da:61:67:
                    e2:45:b0:a2:47:7c:a8:8f:f8:bc:13:ab:99:41:e3:
                    b1:15:ff:fe:23:e7:b6:fe:19:35:65:86:75:68:c3:
                    89:5c:2d:80:e3:92:fb:15:2e:fb:70:dd:0c:2e:c9:
                    a8:91:0b:71:44:77:15:90:b3:1f:6a:eb:14:e7:7a:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:59:62:78:AA:B0:B5:9F:FD:AE:41:07:9E:75:54:D1:58:DD:9E
            X509v3 Authority Key Identifier:
                keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:cb:29:98:c6:35:f8:6f:7c:17:85:91:ed:84:6f:ed:83:43:
         ef:66:c8:ee:6b:31:de:9c:fb:68:bc:35:1e:77:c8:aa:13:55:
         29:76:ca:b7:73:ec:33:1f:69:31:f9:b4:53:e1:34:9d:45:83:
         5e:a7:29:f1:80:b0:6f:b8:12:6b:41:68:53:61:e9:00:9b:29:
         75:4c:3d:ef:d9:59:ac:7d:b8:79:e8:6c:49:73:cc:cf:fa:d4:
         14:0f:e5:d6:a6:a4:c8:e1:96:e2:99:70:79:f2:3d:f2:43:54:
         32:c6:98:c6:8c:ed:ed:f7:f4:44:8e:59:88:61:f2:25:2b:11:
         c4:fc:a8:f8:fd:e0:32:07:e7:34:8d:01:1c:c6:aa:38:d4:0d:
         24:3b:32:04:72:ac:2c:09:19:b2:31:7d:7c:2d:01:88:3e:79:
         63:75:8e:df:be:f9:6e:d3:48:82:8f:56:de:06:89:81:01:69:
         07:21:fa:fa:4c:4a:eb:54:03:98:f6:ad:1b:95:f8:3f:ad:91:
         24:8c:65:41:98:d6:6f:28:a7:93:36:b8:fb:69:22:19:e6:47:
         3e:53:97:27:e0:a6:30:62:7e:fd:24:2a:0a:d1:9e:e1:ce:ea:
         00:b6:2d:d9:4e:b0:3c:fc:6d:89:96:6b:d6:da:b7:69:78:13:
         3d:3b:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:38 2026 by rpki-client