Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
File:                     46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft (raw, json)
Hash identifier:          EGqqRof2uDZuGArRQg3XeLa2XUcLOk9PUS/3VrzNiNo=
Subject key identifier:   32:2C:A4:38:C6:F4:8B:86:A5:56:D8:85:81:52:95:CD:AA:E3:44:B4
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Certificate issuer:       /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial:       56899A608E417E8F8FCA1C73CB12A7EB98494C88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
Manifest number:          61
Signing time:             Mon 13 Jul 2026 08:29:23 +0000
Manifest this update:     Mon 13 Jul 2026 08:24:23 +0000
Manifest next update:     Tue 14 Jul 2026 11:06:23 +0000
Files and hashes:         1: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=)
                          2: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: WTtSNSnNo9oz9/i7rHt1jxuFUkS6d/teW8M9wk46Nik=)
                          3: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 8IXeZT2nMIplDuKAy9sTdwidwLtl6QHRFLk7GQI0XlE=)
                          4: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: oJrAXv58oZDMk40W9JRPwNDx1VF9IQdEUdgQPzLFkmg=)
                          5: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl (hash: nQ7zb1ZdG5J8/vE4cBBCRXOAxEDCDB6dnpzwJTIH/qA=)
                          6: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: P3rNCMyzAiokg7rVA737lP8Lovb0gWKaIdt9sIaalEY=)
                          7: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: uXr8DnKi8QtOAVEEstmImQaN4M7bPiEAwEuGTottsCo=)
                          8: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: jcwrytSrVr9iAZjPRv58Wx2zSE/xYS0utsjnTbXZlh8=)
                          9: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: 1okkgqoiBVDWBMw8B8fUz+WUWSrHUDprl2WG1iMqp8w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
                          rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 05:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:9a:60:8e:41:7e:8f:8f:ca:1c:73:cb:12:a7:eb:98:49:4c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
        Validity
            Not Before: Jul 13 08:24:23 2026 GMT
            Not After : Jul 14 11:06:23 2026 GMT
        Subject: CN=322CA438C6F48B86A556D885815295CDAAE344B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:83:b4:52:14:22:fd:4c:c3:43:60:0a:6d:
                    d1:d4:5e:21:ca:8a:2d:3c:a5:94:a4:d8:7a:50:c4:
                    67:d4:f4:45:6c:f6:92:42:2f:f2:0b:33:88:83:5d:
                    08:d4:c8:08:46:d4:a9:75:c7:58:d2:91:b1:c5:fc:
                    2a:24:f2:7c:64:ad:1f:6e:fd:ac:b3:1b:09:9c:a3:
                    5a:ee:38:61:e1:e6:04:49:a4:4d:d7:62:a5:37:7c:
                    ff:fa:93:e6:83:95:3b:57:3c:3a:02:dd:bf:b7:ac:
                    35:c1:99:13:66:53:78:d8:f9:e4:7b:8e:13:e0:41:
                    dd:54:74:d1:24:3a:66:9d:19:2b:6a:80:3e:87:4f:
                    13:ff:32:ca:9d:51:d5:a6:e0:9d:c9:38:85:9c:5f:
                    f6:ac:38:d5:3b:41:78:43:5f:cf:5d:cd:b1:4b:21:
                    b1:da:50:49:04:5f:b1:93:cf:a8:0a:07:f3:4d:f8:
                    ae:83:57:47:89:cb:34:e6:d9:a3:33:6f:aa:c9:24:
                    30:0e:ba:97:d5:fb:83:fd:f5:65:d3:d0:b2:6d:33:
                    73:2c:cb:5a:02:dd:fd:45:d7:1a:cd:c9:d6:8a:27:
                    b3:db:6a:1d:ae:b3:09:e9:d4:e0:95:17:20:92:fb:
                    37:29:a7:5e:0f:79:5c:16:67:b7:bb:f5:20:df:3c:
                    31:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2C:A4:38:C6:F4:8B:86:A5:56:D8:85:81:52:95:CD:AA:E3:44:B4
            X509v3 Authority Key Identifier:
                keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:1f:d8:87:b4:6d:1f:7b:7f:f2:17:ee:95:3f:d9:22:59:
         70:a4:dc:55:ac:b0:0a:f7:db:f1:71:96:6f:e7:b5:f7:d7:88:
         b2:25:ef:06:6e:76:02:ba:a9:83:6f:a4:0d:29:b3:8a:50:c1:
         7c:ca:0a:2c:13:a9:ea:61:7c:bf:51:0c:80:61:43:df:06:3e:
         5f:fc:0e:96:36:87:e5:55:b8:e1:04:6e:cd:bb:3b:ac:26:82:
         be:e1:4c:21:4c:a7:88:d8:58:27:7c:76:44:89:60:17:03:07:
         b4:00:bd:c8:2f:78:9d:be:63:2e:44:77:da:7b:db:d4:9b:64:
         c3:73:39:5f:f2:c0:b3:7b:52:e3:68:1c:d3:4c:d1:04:9a:a1:
         b5:6b:3f:c2:e9:3b:15:de:b7:63:7c:b5:54:7a:36:79:55:e1:
         42:17:0a:fd:04:7b:51:12:fe:92:d9:97:95:be:fd:6a:99:6d:
         f5:86:43:aa:b3:3e:38:04:fe:6c:a8:1b:c7:f5:2d:b2:d3:d7:
         22:1c:88:6d:5d:5c:e0:2e:fb:71:e8:b7:d6:61:ea:15:b3:33:
         0c:d9:b0:ee:93:e8:fe:0b:8c:d0:4a:f4:df:6b:71:9c:d7:db:
         aa:0e:ee:aa:e6:e9:2c:2d:ed:fb:4e:92:51:79:6f:4d:30:4e:
         8a:76:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:35:03 2026 by rpki-client