Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
File:                     8557597ED1797691974B01C1D7D410DE0468CB64.mft (raw, json)
Hash identifier:          3pRdYqk6CckdJne8EbDlwsQ8CNLaNOK8IXm9AVnDbIo=
Subject key identifier:   90:AE:D6:34:DB:DC:73:89:72:70:A2:55:D4:B7:77:4C:D3:EB:3C:68
Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64
Certificate issuer:       /CN=8557597ED1797691974B01C1D7D410DE0468CB64
Certificate serial:       11F26578CBD0A31D6D747C2F90BE6A1B4AAF3818
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
Manifest number:          46
Signing time:             Tue 23 Jun 2026 21:22:13 +0000
Manifest this update:     Tue 23 Jun 2026 21:17:13 +0000
Manifest next update:     Wed 24 Jun 2026 21:39:13 +0000
Files and hashes:         1: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: cqcltXHdESyCAro4lMlrbhRLXh2L5uRV2u8+8/UIEXU=)
                          2: 8557597ED1797691974B01C1D7D410DE0468CB64.crl (hash: SBlujfL2ZNtDuGS+eqJZY9s2kN3BBvOTedPr+E+Aeeg=)
                          3: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: ooohintErIiZJY6PsGdeSKgN/xAUtlDemuxd4hTQIlw=)
                          4: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: TL3itnqoh4qV4HBGxDux8BTRX5lkC3J82Sib/ZT6wuU=)
                          5: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: 7N8cgyb6Ww7RJC4vhy0UsAqS4uP5oOpnOjak+OLi484=)
                          6: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: TH1xxKIpC/iys3VyCm1mmUpDcchr21F0tjGUobHxDDI=)
                          7: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: +2lXgv7qT46jamYAhQHOD/peUAc/KCPSkZn0WfZ6XNU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl
                          rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Jun 2026 21:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f2:65:78:cb:d0:a3:1d:6d:74:7c:2f:90:be:6a:1b:4a:af:38:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64
        Validity
            Not Before: Jun 23 21:17:13 2026 GMT
            Not After : Jun 24 21:39:13 2026 GMT
        Subject: CN=90AED634DBDC73897270A255D4B7774CD3EB3C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:cc:f6:19:77:08:cb:9a:0e:ad:fb:ce:3e:
                    6c:62:8e:68:0c:44:8a:c0:e2:62:b4:2f:c6:b8:ad:
                    74:e5:03:7c:d2:30:97:c4:66:da:ec:7a:fa:48:73:
                    46:53:2e:f0:21:59:d3:f3:5d:c6:2f:7f:54:3c:ee:
                    42:df:29:d5:38:05:82:19:1a:6e:72:e6:c0:41:4b:
                    d7:f5:5f:63:af:73:69:f5:1d:b8:bd:ca:58:7c:b2:
                    c4:2b:e6:1c:8b:2c:c3:a3:84:c6:44:4b:46:94:2a:
                    4c:4a:1c:97:8b:b2:03:ab:f2:ff:63:0f:c4:af:f5:
                    b1:7e:1b:34:9d:0e:ae:09:93:61:2a:5a:07:6c:42:
                    bd:06:0f:d5:01:f9:33:c0:62:8e:2a:ae:a1:37:9c:
                    43:ab:d9:7d:f7:2c:4b:1c:3a:26:42:98:e7:bf:95:
                    1a:a0:8c:ab:42:25:36:5b:f9:7d:57:d0:f5:40:43:
                    5b:13:5f:d0:f3:85:5f:5d:d5:01:c2:27:81:31:75:
                    48:31:e7:62:36:33:af:3f:92:d2:5a:9d:8e:d3:ca:
                    74:0b:c8:8a:b6:6d:52:10:b2:36:ef:86:82:f4:32:
                    e5:b1:f1:e3:e3:5f:c3:20:b0:9f:28:4d:05:a3:e1:
                    87:87:f2:b6:85:cd:e5:eb:59:13:0c:55:75:aa:16:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AE:D6:34:DB:DC:73:89:72:70:A2:55:D4:B7:77:4C:D3:EB:3C:68
            X509v3 Authority Key Identifier:
                keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:52:f8:0f:97:8e:d7:a7:06:70:7a:c0:b6:0b:b0:e2:92:
         a5:13:4a:d3:5b:a6:fa:20:1a:d3:b3:5b:8b:bf:29:4e:ec:7b:
         cd:38:60:b1:3b:18:61:b3:6c:98:d3:de:f8:34:84:2c:82:25:
         d1:59:3f:e6:a3:f9:5c:69:8f:80:a9:9d:80:33:a1:a7:20:51:
         dc:15:32:18:8e:19:a6:0c:0e:25:6c:5a:f3:fd:b3:3a:50:9c:
         03:f8:18:a2:64:d5:c3:47:df:7c:29:f5:e6:a0:4a:14:51:d6:
         74:18:d9:71:5f:25:f3:00:c9:e6:31:de:4b:c7:0a:7a:ec:82:
         71:fe:be:b6:59:49:e9:aa:48:91:7d:5b:cb:e9:c7:a0:6f:77:
         9c:b4:43:8a:aa:81:fe:33:93:ae:0e:66:dc:de:4e:6f:f9:d0:
         f6:c0:c7:2c:4d:76:5b:1f:65:8c:68:94:09:e3:9d:7f:2c:54:
         e0:49:2d:07:6b:99:51:fc:09:8b:8b:fc:78:21:76:41:0f:41:
         72:bc:cb:1c:66:f9:81:d1:84:0b:78:ec:86:e0:4e:dc:33:1e:
         0d:bd:50:a7:e5:e6:b0:f8:3d:e2:23:fb:33:53:93:ab:94:7c:
         da:06:d8:b2:55:86:06:fe:3a:76:6d:c8:03:a8:32:c1:46:38:
         65:0b:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:05 2026 by rpki-client