Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
File:                     BC56CE0B357E1A9036243CAE454739729AD6633C.mft (raw, json)
Hash identifier:          kMkptbyCls6/kmtRDHxX/CaHNEikGMYp34aTKM+nNX8=
Subject key identifier:   0F:94:D5:C0:A2:35:37:53:44:AA:8F:36:77:08:19:E3:B9:4F:0A:13
Authority key identifier: BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C
Certificate issuer:       /CN=BC56CE0B357E1A9036243CAE454739729AD6633C
Certificate serial:       6F0538C38FD94FB5C752267445642872A151D9B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
Manifest number:          3E
Signing time:             Thu 18 Jun 2026 00:57:58 +0000
Manifest this update:     Thu 18 Jun 2026 00:52:58 +0000
Manifest next update:     Fri 19 Jun 2026 04:42:58 +0000
Files and hashes:         1: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: gRWK/0YFVmnxzlTGh51A5dqs3NFdvCJxXgz/joszlok=)
                          2: BC56CE0B357E1A9036243CAE454739729AD6633C.crl (hash: IvhOpzz7jy0cqgciWyUy07ymsh8YN2GRhBQfKVq7WEo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl
                          rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 04:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:05:38:c3:8f:d9:4f:b5:c7:52:26:74:45:64:28:72:a1:51:d9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC56CE0B357E1A9036243CAE454739729AD6633C
        Validity
            Not Before: Jun 18 00:52:58 2026 GMT
            Not After : Jun 19 04:42:58 2026 GMT
        Subject: CN=0F94D5C0A235375344AA8F36770819E3B94F0A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:31:25:06:f5:37:68:da:02:de:e4:eb:bf:
                    32:c9:8f:9e:25:d4:4a:a3:28:79:92:9f:40:2d:96:
                    8a:bd:ed:83:cd:5b:ef:37:42:54:65:5f:fe:c1:17:
                    11:e3:e3:45:2f:4b:9f:ec:3f:cd:55:cf:0e:29:82:
                    b0:ff:a4:38:7e:ca:1a:43:04:83:22:bc:31:be:ee:
                    b4:99:91:44:cd:24:84:64:80:f7:3a:17:33:d7:11:
                    df:8d:93:b2:ad:1d:86:a2:b1:07:3b:de:a2:1f:fb:
                    fc:c7:a3:16:a0:36:c0:b9:f5:c1:ee:93:bd:4f:3c:
                    f8:78:1b:62:e0:ad:fe:32:72:8b:84:46:6c:bb:8c:
                    01:9b:f1:fa:6f:ba:e6:70:72:06:a8:3c:c9:16:3d:
                    34:16:19:c5:3b:62:0c:0f:21:51:a5:a7:93:f3:df:
                    01:93:af:a2:a3:e9:3f:f1:41:9e:da:6e:2c:ca:f5:
                    1f:a9:0f:5a:50:ec:61:fd:53:b2:0a:79:57:46:5e:
                    29:8a:ba:f9:d0:a5:b8:7b:d4:29:35:1f:3c:ef:56:
                    e8:d4:74:f3:8f:82:9b:29:7c:3a:4e:6d:5b:2a:ef:
                    84:1f:0e:4f:a8:11:40:57:a9:12:66:ae:76:ee:56:
                    6f:6f:d5:09:74:27:45:c7:0e:53:db:b3:46:71:7b:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:94:D5:C0:A2:35:37:53:44:AA:8F:36:77:08:19:E3:B9:4F:0A:13
            X509v3 Authority Key Identifier:
                keyid:BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:15:90:b7:09:2d:d3:f5:8f:2c:60:2e:d0:6d:ad:92:f0:25:
         1b:7b:6a:10:ed:3c:9d:b9:6c:b7:a9:1d:8d:57:44:7c:a4:73:
         ab:c3:59:dd:fc:cf:e1:81:24:e5:83:21:82:a2:47:64:f2:c2:
         88:9a:87:91:0a:77:2e:77:fc:75:6d:37:c9:57:b0:dd:90:96:
         68:69:85:f8:77:c0:48:96:94:60:5c:8f:80:ee:60:e6:bc:42:
         6f:a1:43:36:d3:77:15:40:45:f8:2a:7b:38:fb:87:86:75:ac:
         25:92:7e:b4:14:d0:b3:44:9d:3b:ff:90:7e:91:d7:74:a5:4b:
         1c:3c:95:71:69:fa:40:23:5b:b3:94:9a:dd:7f:58:b7:2a:2c:
         35:75:d4:0d:44:18:2d:da:35:2e:b2:11:33:63:dd:ba:36:d3:
         20:02:57:62:b8:86:17:df:a2:1f:f7:53:ed:2a:e4:b0:b5:8a:
         09:c3:e5:5f:de:c4:2b:57:e2:92:56:23:9d:cb:6f:c4:65:0b:
         df:d5:51:91:ce:19:4c:77:f7:f3:21:54:08:1c:f3:3a:38:4b:
         47:3f:c6:45:cf:fe:d8:71:ab:8b:d2:ca:83:0d:f9:82:79:af:
         b9:9b:8a:f4:6e:c6:00:1a:a9:ef:b3:20:e6:3b:e2:8b:eb:45:
         5e:aa:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:09:31 2026 by rpki-client