Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft
File:                     BACDD9DBC696965384EE99739EB6991320966120.mft (raw, json)
Hash identifier:          YO692b/DP9TVZzJn8hBqzHk9VdJTuXbYihwJ0ifnMQ0=
Subject key identifier:   BB:3F:37:02:14:FA:77:38:F2:E7:8E:A6:9C:29:2E:28:BB:8E:A5:5B
Authority key identifier: BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20
Certificate issuer:       /CN=BACDD9DBC696965384EE99739EB6991320966120
Certificate serial:       0B4FF3BF2DAC9E6A5636E0F9CC188583AD68A246
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft
Manifest number:          42
Signing time:             Sat 20 Jun 2026 02:12:23 +0000
Manifest this update:     Sat 20 Jun 2026 02:07:23 +0000
Manifest next update:     Sun 21 Jun 2026 03:36:23 +0000
Files and hashes:         1: BACDD9DBC696965384EE99739EB6991320966120.crl (hash: opT5xZzPdqVsW+d7oePTNshdeo6JXY655amL0fM2CjE=)
                          2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: jccZCiZqanCMuer6DeJWWqbD0FyYnO8bjfTBGy1Zc5I=)
                          3: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: L4o9uZCSJCtTiGzmDyncLujPwn9u+0cj/bmMr7mpke0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl
                          rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4f:f3:bf:2d:ac:9e:6a:56:36:e0:f9:cc:18:85:83:ad:68:a2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACDD9DBC696965384EE99739EB6991320966120
        Validity
            Not Before: Jun 20 02:07:23 2026 GMT
            Not After : Jun 21 03:36:23 2026 GMT
        Subject: CN=BB3F370214FA7738F2E78EA69C292E28BB8EA55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:b2:10:f0:ab:80:74:d3:96:2e:b0:52:8c:
                    da:24:ed:38:e2:b8:c5:5d:5d:20:35:c0:55:15:3a:
                    80:54:c1:fd:c0:57:f0:c6:a1:06:61:4d:be:61:25:
                    d4:3e:97:24:fc:ec:e5:8d:d0:f2:94:3e:e8:0f:c2:
                    ac:8d:98:a8:16:58:30:88:eb:5d:a8:68:d5:30:a2:
                    89:23:99:25:e3:7b:b5:41:12:77:32:2c:d2:12:93:
                    c2:07:72:3c:9b:a8:44:e8:c3:84:0e:a3:86:b2:d0:
                    c4:0c:65:5d:40:1d:e9:2b:e9:e4:6a:ac:38:b6:7e:
                    0d:af:9c:54:6a:33:f5:ec:da:52:d6:7a:ff:d4:54:
                    44:0f:14:dd:13:6e:52:c9:a7:3b:c2:f9:d2:a8:47:
                    2f:4c:34:ac:62:23:7b:fa:aa:9f:44:fd:7d:1f:fc:
                    2f:c1:06:f2:6d:42:a0:e4:64:9e:ab:51:5e:c3:4d:
                    61:cb:56:7e:2f:35:e7:5f:cf:ec:86:bd:98:fb:e8:
                    70:3e:c8:12:6c:79:db:32:ea:0c:1d:42:a9:ef:c9:
                    4b:3e:17:88:74:ce:02:31:70:00:9b:b4:e1:e1:24:
                    b1:44:9e:b9:7f:59:7e:db:37:2f:4a:ed:b1:88:95:
                    ff:18:db:55:56:8c:96:8b:00:1c:fc:91:5c:16:fe:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3F:37:02:14:FA:77:38:F2:E7:8E:A6:9C:29:2E:28:BB:8E:A5:5B
            X509v3 Authority Key Identifier:
                keyid:BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fe:0f:50:6f:2c:b0:1f:4c:fe:d8:f3:6f:10:51:53:d9:cb:
         ed:e9:8b:3d:fa:94:15:1f:4d:05:fc:af:2d:04:48:14:4c:e1:
         f1:35:01:87:45:18:07:85:76:8d:4e:c8:9d:0f:eb:2b:3c:c3:
         b8:b1:48:ef:f0:01:7b:ce:6e:3d:60:a0:35:a8:c6:e2:95:e6:
         ee:9b:99:db:c5:66:ab:08:42:2e:93:d7:2e:e9:9e:68:ca:49:
         16:eb:49:07:4d:62:c0:8c:ec:62:62:47:2a:b0:0e:51:0c:00:
         ea:53:f1:d7:f2:c1:ee:8e:d3:eb:d8:c2:57:5b:98:b6:62:51:
         7a:6e:a5:af:33:f9:2b:df:ff:69:52:a6:db:8a:37:79:c4:6f:
         74:e4:3d:c8:56:c5:63:b4:45:6c:a7:98:98:6a:2c:71:9e:3a:
         f5:c3:3b:f7:cd:10:87:98:73:e0:e5:6e:8f:ef:06:55:ee:a5:
         a4:25:73:6c:e2:99:79:23:bf:81:8f:e1:a4:f7:07:48:7a:1a:
         b5:6c:38:76:78:d1:ca:72:49:d5:96:b6:ce:58:20:80:c5:c8:
         d6:4a:f1:40:43:16:ff:a5:d8:de:4a:cf:29:e9:9c:d1:16:27:
         c6:a5:04:23:c3:9a:fd:e1:82:6b:0c:31:9c:79:08:81:de:39:
         d7:27:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:59:40 2026 by rpki-client