Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
File:                     66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft (raw, json)
Hash identifier:          0TGPrv/G/QnXR1UpkdDGq7mr7vC3g8Hod+/FXlvnNVY=
Subject key identifier:   9C:1F:13:BA:F7:CC:74:A3:46:2A:E3:A4:E8:2F:54:1D:6D:41:F3:0B
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Certificate issuer:       /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial:       3346D124A7FA8235C070CB61370FA9D86B16BF6C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
Manifest number:          A6
Signing time:             Wed 02 Sep 2026 17:44:28 +0000
Manifest this update:     Wed 02 Sep 2026 17:39:28 +0000
Manifest next update:     Thu 03 Sep 2026 18:22:28 +0000
Files and hashes:         1: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: kNgOuGZXLAFUYxR2TmnqvvHmRiKcIBei3j7WTSaZzZ4=)
                          2: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: EPaxFk59J+mAhJJZI0UXN15r/MDP8erRFtwyeOK2Jyc=)
                          3: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: cq5fJGcOxUi8WO0+4dKMsKLXIWSZjZoNabBBMuQjlGY=)
                          4: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: UQULiH/rzGZ+Qot5L6bTSG/ZqsqiXoMUdx2Z+g8DPd4=)
                          5: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 8DBxlpB4P7TBKUnRSvj1q12ltJkx0DrbCvm4btLrod4=)
                          6: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: NaIbUIEcHg996UwcSPOlGfP3YqUKyIHzjC1cqpknTE4=)
                          7: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: Di5sToIdYtfOw42F6tH8eEgf1Tlo/6HAUCPyhJe7z9s=)
                          8: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: i5cJhoPHd05iRQrt+c8hD0fxUqa82L/0uVmpW5FyRsM=)
                          9: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: G3d5+PJ4RwaH3+49YAXZuwZHSBMw/JF+ioQ5xyAVwXk=)
                          10: 66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl (hash: HwJlydKcHd3PiEcDH85ypBT5CRH4BKbGgKvYOjjEnY8=)
                          11: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: cOXnXn1Tgv14XhXe0FNGT6IvDCa8su0BXcORjmSihek=)
                          12: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: r6gC26YZfyRCXBqtBxM90HpZHycKXfj7CtQcMDuzkHs=)
                          13: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: kxIOYoC0XrMoUIa2RKDIrOUk61PTYC6D0smdwPW+OqE=)
                          14: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: 8VioNKBine3nnTO3lIrgZ5P0mwfqaztVY9eBTGZLZpY=)
                          15: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: ayJGb85mEsw6hkCd3R4N6T60EHmEHaE0N2aTdVYDJwU=)
                          16: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: n/ZVRJi6yb8Dz2Mvlmk9fIXtW9fAfV0qot64+DO2GBg=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
                          rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 18:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:d1:24:a7:fa:82:35:c0:70:cb:61:37:0f:a9:d8:6b:16:bf:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
        Validity
            Not Before: Sep  2 17:39:28 2026 GMT
            Not After : Sep  3 18:22:28 2026 GMT
        Subject: CN=9C1F13BAF7CC74A3462AE3A4E82F541D6D41F30B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:fd:3d:ac:3c:8a:ed:a1:38:c1:8a:40:cf:
                    87:cb:bd:e7:48:d3:04:5c:94:c0:8d:83:ba:1b:e6:
                    fd:51:10:95:d2:50:4f:af:4d:ca:85:e6:93:da:43:
                    64:d8:28:b1:f4:93:1a:39:cd:42:f2:24:0b:9b:73:
                    be:13:6e:a2:62:41:49:67:4b:66:17:00:19:e3:78:
                    29:86:6c:2e:66:23:3a:cb:31:5a:8e:a3:cc:67:0f:
                    e4:f2:58:7e:1d:4b:7c:05:21:0e:81:97:8d:da:4b:
                    ee:ab:9f:2b:49:4a:56:3a:92:8e:7c:84:67:ed:84:
                    96:a8:a9:4f:65:71:8f:10:a5:b4:67:c8:90:d4:aa:
                    ec:31:65:47:0a:ce:53:39:f8:4c:c4:25:4f:5d:54:
                    1f:96:4d:8a:a0:71:44:95:ae:e2:e4:16:e1:50:db:
                    e4:e8:76:8a:37:8d:1d:f6:32:88:12:74:32:d0:24:
                    60:cf:5f:1c:62:f9:eb:80:08:01:9c:88:bc:53:1d:
                    57:4b:9d:11:1c:f6:24:94:f2:a6:16:17:d2:01:56:
                    df:86:2a:29:4d:8e:69:78:ba:74:c3:f6:8d:3e:0a:
                    5d:1c:f7:ab:ce:ce:9e:47:e8:c6:44:ec:95:9a:74:
                    bf:4f:99:cf:12:3e:31:77:77:d4:ff:77:7d:1a:e6:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1F:13:BA:F7:CC:74:A3:46:2A:E3:A4:E8:2F:54:1D:6D:41:F3:0B
            X509v3 Authority Key Identifier:
                keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:1c:16:52:ea:90:c9:de:08:9d:12:b8:94:43:a7:39:7a:
         6c:62:f9:f1:04:80:7d:59:88:d5:e9:76:a3:ed:a3:0d:a7:94:
         52:f2:99:7e:a5:f1:d0:a8:31:0d:e2:a2:fa:e7:71:c7:67:fd:
         70:b8:ec:99:b8:0a:92:14:7e:98:07:6c:c8:2b:0a:97:8f:da:
         90:be:15:8c:30:7f:73:92:ad:9a:38:e2:42:77:ee:25:9f:6c:
         3c:5a:19:0b:24:d7:9f:6f:81:36:4d:91:6e:38:75:c1:a5:6b:
         e8:34:94:24:89:4b:56:ab:c2:ef:03:9e:1c:aa:8b:83:8b:58:
         6e:9d:f4:3b:8b:30:3e:9f:9e:88:69:f8:a1:55:21:f0:84:c9:
         58:38:fe:0f:6a:dc:df:f3:34:ad:a8:ee:cd:69:c3:65:7e:53:
         41:c0:16:31:4e:ae:55:07:dc:34:d4:b7:7f:4c:ab:ef:5a:50:
         13:ba:7d:fb:03:71:e3:77:d2:ff:43:9f:f5:94:e3:10:76:4a:
         4d:b8:ed:20:ac:b3:39:bc:83:d1:07:3a:d6:13:d2:df:06:41:
         02:4c:0a:6f:5b:c9:6e:01:60:d1:51:06:2f:ae:f5:ce:86:36:
         1a:b3:12:13:1e:3e:86:46:57:ab:d6:55:2f:1d:20:9a:ac:e6:
         9d:24:48:4f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM0bRJKf6gjXAcMthNw+p2GsWv2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGOTZBRUJGOUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMx
MkZGOUEwNDAeFw0yNjA5MDIxNzM5MjhaFw0yNjA5MDMxODIyMjhaMDMxMTAvBgNV
BAMTKDlDMUYxM0JBRjdDQzc0QTM0NjJBRTNBNEU4MkY1NDFENkQ0MUYzMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHv09rDyK7aE4wYpAz4fLvedI
0wRclMCNg7ob5v1REJXSUE+vTcqF5pPaQ2TYKLH0kxo5zULyJAubc74TbqJiQUln
S2YXABnjeCmGbC5mIzrLMVqOo8xnD+TyWH4dS3wFIQ6Bl43aS+6rnytJSlY6ko58
hGfthJaoqU9lcY8QpbRnyJDUquwxZUcKzlM5+EzEJU9dVB+WTYqgcUSVruLkFuFQ
2+Todoo3jR32MogSdDLQJGDPXxxi+euACAGciLxTHVdLnREc9iSU8qYWF9IBVt+G
KilNjml4unTD9o0+Cl0c96vOzp5H6MZE7JWadL9Pmc8SPjF3d9T/d30a5iS7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnB8TuvfMdKNGKuOk6C9UHW1B8wswHwYDVR0j
BBgwFoAUZvlq6/nIohM3y0p4FTab7BL/mgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmVlNDdiYmYtYmE4NC00NDhmLTk2MmItMmFhZjVjN2RkNjhkLzAvNjZGOTZBRUJG
OUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMxMkZGOUEwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NkY5NkFFQkY5QzhBMjEzMzdDQjRBNzgxNTM2OUJFQzEyRkY5
QTA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2
MmItMmFhZjVjN2RkNjhkLzAvNjZGOTZBRUJGOUM4QTIxMzM3Q0I0QTc4MTUzNjlC
RUMxMkZGOUEwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFTiHBZS6pDJ3gidEriUQ6c5emxi+fEEgH1Z
iNXpdqPtow2nlFLymX6l8dCoMQ3iovrnccdn/XC47Jm4CpIUfpgHbMgrCpeP2pC+
FYwwf3OSrZo44kJ37iWfbDxaGQsk159vgTZNkW44dcGla+g0lCSJS1arwu8Dnhyq
i4OLWG6d9DuLMD6fnohp+KFVIfCEyVg4/g9q3N/zNK2o7s1pw2V+U0HAFjFOrlUH
3DTUt39Mq+9aUBO6ffsDceN30v9Dn/WU4xB2Sk247SCsszm8g9EHOtYT0t8GQQJM
Cm9byW4BYNFRBi+u9c6GNhqzEhMePoZGV6vWVS8dIJqs5p0kSE8=
-----END CERTIFICATE-----
Generated at Thu Sep 3 09:46:39 2026 by rpki-client