Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
File:                     46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft (raw, json)
Hash identifier:          OUZnavcnJEErwyTqTARpPJDXMSK3P81fzYA/iok+u/k=
Subject key identifier:   16:BF:18:33:38:5B:94:59:34:74:B3:24:68:A2:CD:2D:FB:8E:85:B3
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Certificate issuer:       /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial:       0DA1F3E678C4D4DBF3D6E7B9EF260848D90D7B76
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
Manifest number:          A5
Signing time:             Wed 02 Sep 2026 15:57:31 +0000
Manifest this update:     Wed 02 Sep 2026 15:52:31 +0000
Manifest next update:     Thu 03 Sep 2026 16:13:31 +0000
Files and hashes:         1: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: uXr8DnKi8QtOAVEEstmImQaN4M7bPiEAwEuGTottsCo=)
                          2: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=)
                          3: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: P3rNCMyzAiokg7rVA737lP8Lovb0gWKaIdt9sIaalEY=)
                          4: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: 1okkgqoiBVDWBMw8B8fUz+WUWSrHUDprl2WG1iMqp8w=)
                          5: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl (hash: Res4hBP5MOyNkniE8kgRA2zmth7kMZQPmrIbXe/6p7c=)
                          6: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: jcwrytSrVr9iAZjPRv58Wx2zSE/xYS0utsjnTbXZlh8=)
                          7: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: WTtSNSnNo9oz9/i7rHt1jxuFUkS6d/teW8M9wk46Nik=)
                          8: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: oJrAXv58oZDMk40W9JRPwNDx1VF9IQdEUdgQPzLFkmg=)
                          9: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 8IXeZT2nMIplDuKAy9sTdwidwLtl6QHRFLk7GQI0XlE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
                          rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 16:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a1:f3:e6:78:c4:d4:db:f3:d6:e7:b9:ef:26:08:48:d9:0d:7b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
        Validity
            Not Before: Sep  2 15:52:31 2026 GMT
            Not After : Sep  3 16:13:31 2026 GMT
        Subject: CN=16BF1833385B94593474B32468A2CD2DFB8E85B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:75:16:5e:72:78:ec:71:1f:b5:2f:bc:ef:
                    9a:7b:f8:4f:11:25:ae:07:63:10:d1:c5:30:a9:7c:
                    5f:68:74:3e:f4:2f:78:ed:a1:8a:7f:2c:d5:36:b6:
                    4b:f3:34:5d:99:0b:f9:5e:1b:bb:f6:ce:d0:88:69:
                    45:de:67:93:bc:39:bb:11:88:73:ac:c5:64:ad:b0:
                    a8:cb:a3:3a:02:4b:fb:41:d5:19:dc:ef:6a:79:6c:
                    4b:4a:a2:bc:ad:d1:5c:12:32:98:f0:7e:ae:9a:fb:
                    00:f1:90:ec:d0:27:20:33:6a:3b:af:cf:b3:d7:bd:
                    f7:3d:48:7f:f5:92:09:8c:26:d8:18:0b:eb:94:8e:
                    c4:88:b8:b8:05:9e:09:61:1b:3b:73:a9:bc:49:45:
                    56:75:8b:91:37:20:3f:9e:f7:6d:47:58:e2:5a:f7:
                    e2:29:b8:b6:af:2f:2b:24:e6:a7:6a:41:99:9c:2e:
                    13:50:32:e0:d3:1b:bc:d3:87:a8:f6:54:0a:f3:f5:
                    96:c9:ef:0b:96:86:92:84:fb:84:93:98:a7:c6:76:
                    13:88:e8:f0:5f:cd:ea:3b:cc:d4:48:5d:b8:71:64:
                    24:2e:7f:cc:8f:25:12:51:72:88:26:c7:1d:7d:45:
                    33:6a:2d:6d:a5:c9:85:6c:81:7d:5e:83:4b:ee:05:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BF:18:33:38:5B:94:59:34:74:B3:24:68:A2:CD:2D:FB:8E:85:B3
            X509v3 Authority Key Identifier:
                keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:00:70:cd:c5:d4:cb:19:d4:7e:91:46:aa:76:69:3b:59:8d:
         53:3d:65:46:67:58:50:8c:da:92:f0:31:7e:36:0a:fd:0e:90:
         c1:c7:8e:6a:81:f2:28:d4:e9:5b:9f:53:5c:f9:cd:90:1d:ef:
         1c:f2:5b:6d:62:bc:bb:20:aa:7b:db:5b:96:94:cb:83:b2:af:
         f8:32:63:6d:f0:d1:44:60:26:5c:25:97:b8:29:34:8b:fc:83:
         c5:f7:82:de:15:0a:51:63:b1:65:db:b4:4f:68:04:44:9f:b9:
         87:c0:c8:13:45:87:2d:df:b7:c5:21:76:ec:3d:90:db:a6:5b:
         8b:45:df:50:4c:d1:ea:f1:b5:2e:ba:b8:aa:10:a0:31:ec:77:
         fc:af:e6:58:c3:0d:bd:81:1f:e8:2d:c7:cb:34:1e:2a:80:44:
         fe:4e:88:18:0d:15:9d:ae:76:09:0d:1a:a5:de:ff:da:e3:aa:
         56:37:13:01:51:a0:56:d8:b8:94:0e:6c:35:74:f8:3f:ee:5d:
         59:2f:d4:17:0c:d1:4e:77:db:f2:6d:d4:31:7d:56:2c:20:45:
         a2:e5:db:2f:dd:e3:b6:fa:b3:a6:45:37:b5:ff:13:36:bd:03:
         d7:3a:96:14:42:d7:42:ab:4e:ff:bf:92:5b:1e:ea:76:56:5c:
         e5:b0:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:13:19 2026 by rpki-client