Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
File:                     0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft (raw, json)
Hash identifier:          L1xFcB7HMZp44DQEbPoKOndp1KYlqDvLzM08w7I4YE8=
Subject key identifier:   30:7D:65:2D:5E:44:39:25:AF:C5:6B:EE:85:B7:3C:84:E0:97:7A:1C
Authority key identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B
Certificate issuer:       /CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
Certificate serial:       16B682E322C06F9B54F77EDB4DF111537760A5CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
Manifest number:          41
Signing time:             Fri 19 Jun 2026 21:42:11 +0000
Manifest this update:     Fri 19 Jun 2026 21:37:11 +0000
Manifest next update:     Sun 21 Jun 2026 00:26:11 +0000
Files and hashes:         1: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: EDtByMK6TjQp0hyoWNPeAL24hwV2DhNIgESuhbW7CKA=)
                          2: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: L72MNFWs2/TCwq6F2L6j0rz6XVlkqh9uNTreRhurkKw=)
                          3: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: eGNJ1n8bDbQmoRq42DR0txAWzu8nV66h2S77nx17RKM=)
                          4: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: QzYDwyPq+ZTPv+eibCiOEvPDQMFXiIE8GpKBHMdWRXQ=)
                          5: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: 2gQ9649f0ndaTmtOcqaJrXV4bKlAfn8pEGxSt46Gu58=)
                          6: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: nvDEHVXbGDG+kKml4fz3Sd8nG2pVg2Fj1k1Un7attMA=)
                          7: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: A4kpcsQqVoWwVBNEfjq/CynxKvKVE62mleHwZXUsKos=)
                          8: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: uPncvP1Okkrf/KpwWjJFMH8U1aVMZjmRtyTj19SObI0=)
                          9: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: sxS8L7umdKtGUeT2wWhEoM1JoZ/BT1Jv1zxeZbH381g=)
                          10: 0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl (hash: NB9CArxcIE90WiyQ8qfM7RUCCGhI77ln6Ic16sxP/v8=)
                          11: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: CL+9kkFdZB1yJCIEMLA3vz2l4BhvC9xFNrhK/p8qNDc=)
                          12: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: Ht0VezJ4KIWCDr66hCxSQYWb1Dq0K65XBemGOv1TcQc=)
                          13: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: zqcics87PZHEsmOvrEn/LcF+KjiPqSCgEE2g8ZVSVI0=)
                          14: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: Aj2bJsLbEDIrOPmhvglJ6dR9+tL1DPZS/JEdmKKswFk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl
                          rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 00:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b6:82:e3:22:c0:6f:9b:54:f7:7e:db:4d:f1:11:53:77:60:a5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
        Validity
            Not Before: Jun 19 21:37:11 2026 GMT
            Not After : Jun 21 00:26:11 2026 GMT
        Subject: CN=307D652D5E443925AFC56BEE85B73C84E0977A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:9d:77:29:6d:f9:03:4b:70:35:76:66:b4:
                    a4:58:d1:12:ee:73:e9:12:67:44:2d:49:29:6f:e6:
                    bd:c7:30:fa:b1:f3:bf:bf:a2:32:8b:8a:73:bf:2d:
                    26:f6:b4:8c:e9:9e:4c:0a:8c:09:c9:e0:4e:0c:f0:
                    52:4b:65:b2:94:ee:4f:87:31:8b:87:b7:4a:98:88:
                    33:36:00:90:84:1c:42:ac:19:55:37:2b:3b:c0:33:
                    0a:ac:23:8a:57:83:26:5c:a7:cb:2f:67:3c:f8:3a:
                    9d:50:b7:0c:4f:23:38:ea:ad:44:c3:1d:58:70:b9:
                    31:81:db:2f:26:55:bc:cf:de:6b:25:b1:57:f7:c7:
                    b1:5d:62:ee:77:4a:ce:36:48:d3:07:fd:93:9e:38:
                    9a:4a:99:44:43:6e:45:d2:94:bf:75:7e:8c:36:27:
                    d6:6b:42:a4:69:1f:0f:f1:1b:1a:8c:21:26:32:73:
                    72:d6:d9:52:ff:24:b2:3d:bd:48:93:5e:8d:95:d4:
                    c5:44:2f:70:cf:58:c8:c2:5d:5e:1f:55:a1:1b:d5:
                    07:01:a7:df:07:94:35:4b:bc:08:2b:20:9f:86:2b:
                    ea:0d:3f:fd:ff:bd:97:28:11:6d:9c:59:02:f2:ee:
                    a4:ee:b8:1c:06:c9:d8:18:2a:f1:1b:f3:eb:61:1d:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7D:65:2D:5E:44:39:25:AF:C5:6B:EE:85:B7:3C:84:E0:97:7A:1C
            X509v3 Authority Key Identifier:
                keyid:0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:6a:cc:78:fd:92:d3:40:27:bf:4b:87:1a:e3:b3:c6:5a:04:
         68:72:17:1f:c6:99:c3:22:a0:27:81:17:16:66:fe:5e:ff:d6:
         85:5f:5d:70:d8:7c:b8:a7:55:be:31:9f:9e:4b:e9:3b:b1:60:
         d9:31:b1:0c:a2:88:c5:ac:39:d8:a0:3c:65:cc:bf:92:75:30:
         9a:0f:42:3a:fe:62:5f:a6:f0:d2:43:3f:c6:6b:5a:d6:f3:fd:
         bc:39:26:54:96:72:37:06:87:e6:a4:f2:af:ee:67:33:26:11:
         70:69:25:6b:ea:e9:c0:87:9e:d5:fa:30:88:f0:c3:1d:94:66:
         bf:7f:dd:df:14:90:4e:b0:87:6a:bf:6f:a4:ca:f5:4e:42:48:
         f7:e4:47:2c:41:fb:54:d6:e1:d8:09:1c:a7:4e:f5:20:ca:bb:
         86:63:77:65:ba:1b:96:21:d5:8b:17:5a:85:2a:11:9f:03:7a:
         8d:21:1f:05:67:20:3f:a5:1b:d7:d2:bb:8d:ff:f9:82:e7:85:
         34:ac:3f:22:10:dd:ab:b7:0f:06:ba:4d:74:ae:60:b7:dc:e0:
         1e:bc:58:2a:1d:5f:96:01:82:36:7a:98:fa:15:4d:b7:1d:45:
         21:f6:c8:52:ca:74:b7:d7:a9:ea:a5:d2:5f:d4:dd:3b:7d:05:
         43:2c:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:16:52 2026 by rpki-client