Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
File:                     0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json)
Hash identifier:          L7kFvZiRIjl8aLngkpOv0RwGviBOUHi7B+HT/v+uiBU=
Subject key identifier:   3A:CC:8C:B5:25:DF:60:22:89:8F:24:DC:F3:14:42:E9:4F:59:DE:AF
Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
Certificate issuer:       /CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Certificate serial:       0BA26218CF0251A840CA21A35E6B0BFE1CBC096E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
Manifest number:          56
Signing time:             Sat 04 Jul 2026 12:02:10 +0000
Manifest this update:     Sat 04 Jul 2026 11:57:10 +0000
Manifest next update:     Sun 05 Jul 2026 15:45:10 +0000
Files and hashes:         1: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=)
                          2: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=)
                          3: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=)
                          4: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=)
                          5: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=)
                          6: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=)
                          7: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: /ka26hF+PaBkbk36to19dK8mkJ6NAPimDjAUWFE51ik=)
                          8: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=)
                          9: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=)
                          10: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
                          rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Jul 2026 15:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a2:62:18:cf:02:51:a8:40:ca:21:a3:5e:6b:0b:fe:1c:bc:09:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F
        Validity
            Not Before: Jul  4 11:57:10 2026 GMT
            Not After : Jul  5 15:45:10 2026 GMT
        Subject: CN=3ACC8CB525DF6022898F24DCF31442E94F59DEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:b4:d2:ae:29:2b:f2:03:0d:47:d1:c0:ad:
                    84:4f:bf:6a:c5:3d:bf:c5:cd:72:ef:30:cb:32:95:
                    60:36:62:2c:2c:2b:c9:2b:c1:67:d4:d2:cc:de:7b:
                    12:2a:67:0c:fe:35:cd:4f:0f:9a:dd:72:63:1f:25:
                    e8:56:3f:88:4b:f2:2f:ea:ce:9f:df:d4:34:89:67:
                    71:e7:27:39:b2:9e:ce:ce:07:0d:37:6e:19:01:64:
                    ea:93:e6:90:98:d6:8f:cf:be:3f:f1:7a:95:e3:4c:
                    e5:7f:6b:0b:b1:75:57:e4:95:84:5a:f8:c2:f4:6f:
                    29:79:ae:f5:4f:5a:20:ec:56:23:19:4f:b2:01:fe:
                    a9:45:a8:cf:8a:cd:c4:d0:02:70:a5:22:ef:5c:1d:
                    26:5a:68:5b:b4:4b:c0:57:01:9c:4a:ee:5d:2c:3b:
                    c2:56:27:e0:f1:59:e3:2e:65:48:52:ae:5c:14:ca:
                    58:f3:2a:4c:34:2c:fa:f1:60:e6:9b:20:2b:e8:91:
                    ca:d5:64:54:d0:7e:c9:4d:26:04:b5:f1:f5:39:8a:
                    25:b6:95:c0:d8:4f:20:74:bb:aa:fd:cd:f8:a1:4e:
                    e7:51:16:4f:97:be:ce:06:f8:0f:8f:84:5b:2a:f6:
                    16:be:cc:9e:29:4c:39:d0:20:67:da:d6:2b:8f:be:
                    fb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CC:8C:B5:25:DF:60:22:89:8F:24:DC:F3:14:42:E9:4F:59:DE:AF
            X509v3 Authority Key Identifier:
                keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:90:7e:f6:09:fd:43:73:dc:20:5a:ce:73:54:82:32:92:
         7a:aa:8c:54:01:c9:e7:65:6b:8d:e2:0d:cd:2e:df:97:75:96:
         9d:4f:c0:77:91:c5:3e:1d:ea:51:1f:95:00:38:52:a2:97:24:
         b9:79:ce:d8:c1:cc:39:75:56:fa:a9:50:1e:6b:7b:d2:db:a8:
         f9:90:91:9b:cc:d2:64:db:f9:c8:8f:65:f2:57:0c:42:0b:7c:
         d8:b3:37:cc:74:78:87:12:b4:de:89:e0:44:02:65:87:c6:f2:
         99:f9:8d:7a:04:29:43:c5:7d:bb:6d:0e:c2:57:78:8c:31:7f:
         9c:8e:0c:32:3c:47:6f:04:e8:bc:1a:06:dd:a2:e7:57:c5:1e:
         a7:03:e2:64:40:32:ee:74:2f:fd:4f:3b:67:8f:1e:93:9d:3f:
         61:82:1c:70:20:2a:0b:ec:f4:ad:85:4f:07:1f:a4:08:e6:82:
         95:f5:a8:4f:7a:1c:f7:cf:ce:08:58:da:39:cd:43:ad:3d:36:
         f6:81:ca:30:57:60:8c:9f:8f:5b:54:be:61:8a:80:ab:45:34:
         06:06:6b:6e:66:89:c9:84:a3:9c:06:be:6a:18:e6:64:36:56:
         a8:ac:51:05:5e:8d:ce:03:6f:6a:56:63:2a:11:55:41:c4:54:
         4c:17:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 03:54:21 2026 by rpki-client