Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
File:                     488A458129866D0E7DBFF7668D82664F584F8541.mft (raw, json)
Hash identifier:          669Up+VH5F8zNfrfOX2GXAVY0HZrz9Y4GOKSAJHiPJc=
Subject key identifier:   1C:B8:12:08:1B:29:8E:F8:F0:3F:41:0D:BD:59:E6:90:30:09:8D:B6
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Certificate issuer:       /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial:       043D85A54C3FB0A324FE78E116DE8213944E256B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
Manifest number:          72
Signing time:             Mon 27 Jul 2026 03:47:28 +0000
Manifest this update:     Mon 27 Jul 2026 03:42:28 +0000
Manifest next update:     Tue 28 Jul 2026 06:05:28 +0000
Files and hashes:         1: 3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (hash: QPI+dREhzvsIigpY59BOgb1O27ZG4A0uLzoVwlmd6ns=)
                          2: 323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (hash: H13662R2JsQ6xsWPNm8piREclR+MKAOjI1IQH6H0ptk=)
                          3: 3130312e35302e31362e302f32342d3234203d3e20313331313137.roa (hash: oN+sl0Dox7b9G17/qNLZ11JOxDe7lTDnIlNYUqfGpaY=)
                          4: 3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa (hash: cNsXz0HEcLxttb5xDjo+VflY5ICv7Vrpe3SghZW7FwU=)
                          5: 3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (hash: Yz2BU+sizR5MaKXnmTSXZbcNfxY4e6NTRVofqsdo3Mc=)
                          6: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (hash: wbehxlGBOFZ5POFNUace0mPfuERAJPSvGNjotR14fdE=)
                          7: 3130312e35302e31382e302f32342d3234203d3e203338353038.roa (hash: 8PlxVCA9cCDGMuR64vfddEL6IDG5jHV1vCDU29KjPwk=)
                          8: 323030313a6431303a393430303a3a2f33382d3438203d3e20313335343738.roa (hash: noWOl6fVub87P1/SVgYHH5T2hrSTXsrQ+oEMt1rrpNg=)
                          9: 3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa (hash: aox2X7SgWnRXu8G+kGHpNIJb4RAjQYMcZgSqdVFmhhE=)
                          10: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (hash: mML8Y06xC1Ba28dmIO2VE5Ln2tzvvZV3niqEU4AWOB4=)
                          11: 323430353a383138303a3a2f33322d3332203d3e2034373837.roa (hash: UAYb+1HjfSmt5R+QlsY+ZQQtQPafl+SlPKPY7/wXU0Q=)
                          12: 3130312e3132382e36342e302f31392d3234203d3e20313335343738.roa (hash: 5id0QnfcKsnw0+S9ulptOtQBEWbR8UG/S4Owh/B9W74=)
                          13: 3130312e35302e32302e302f32342d3234203d3e20313336313038.roa (hash: EDCshkdLjSQa8Tly9uBitRYcw264uiv+JqjzXRSvnDM=)
                          14: 323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (hash: G3pU6symkaZdSMicPc79FGi+dBVSw2ehAYC4dr25SgE=)
                          15: 3130312e35302e31372e302f32342d3234203d3e20313331313138.roa (hash: PFfkqIsqIUsjwmUd9ei8zQ4zYaZHPfsMYrmE63f1ou0=)
                          16: 34352e3132362e38302e302f32322d3234203d3e20313335343738.roa (hash: b2lWOoaou2J1YIxknocGyrbJm7waL5thO0MNRGLl9mc=)
                          17: 3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa (hash: cChkhgKm+2KNkrgQft7uIxPkb8RhfpDlI+RUTMMAntw=)
                          18: 488A458129866D0E7DBFF7668D82664F584F8541.crl (hash: OtsmYWYpgtye/U5FOKm7hWG46AxibEtWJh7EyJxlMKg=)
                          19: 3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa (hash: KiBzwdkwkvBjgtXV0cM+MD3JNlJOyrjNhlEWrqegSSU=)
                          20: 3230322e3135382e302e302f31372d3234203d3e2034373837.roa (hash: WW8sIJ6AThc6GzaZsxU3S0vSQEeSjQOfDUvBVqio138=)
                          21: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (hash: +JXr82FpG/6Wt8qvldpnb4fgmcqGxYhFwHI7evACCBg=)
                          22: 3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa (hash: 99+LHdnDZ+xXSQ4fS/K7+l08VVwSgr8ZFAwx6f4ta24=)
                          23: 3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (hash: ARl4ZAaC9Jes/owyoPp7apbT6NpWz6hu9CZFgWsDZ/w=)
                          24: 323030313a6431303a3a2f33322d3438203d3e2034373837.roa (hash: 14/1HVNOXsDEYMMhgV/UFslejkV/yr/QLEVbg8K0YaE=)
                          25: 3130312e35302e32312e302f32342d3234203d3e20313338313338.roa (hash: oYKv/Tz7NXAZVTkC/rNO1pYrMZcGeymiJs7AyGifqxg=)
                          26: 3130312e35302e31362e302f32302d3234203d3e2034373837.roa (hash: +b5NqaJS6v9hXzvZigHVYiJMJdXpHZYJPG2i54V2Zkg=)
                          27: 3130312e3132382e36362e302f32332d3234203d3e20313335343738.roa (hash: 1H3PSuEvCc4YKCR6kgpSZidVqJxCnAhidJTquYvi5XY=)
                          28: 3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa (hash: t2MsMuM/1YQ0d1jlVRk+UQIkBTqKfcyfuzkWNhKm+2Y=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
                          rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3d:85:a5:4c:3f:b0:a3:24:fe:78:e1:16:de:82:13:94:4e:25:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
        Validity
            Not Before: Jul 27 03:42:28 2026 GMT
            Not After : Jul 28 06:05:28 2026 GMT
        Subject: CN=1CB812081B298EF8F03F410DBD59E69030098DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:1b:61:39:3e:f7:48:4b:32:00:76:9f:fc:
                    ae:5e:91:91:c9:f3:b1:cd:9b:ae:89:7d:82:d7:77:
                    ae:f3:ac:c9:15:f3:d0:b9:bd:aa:cd:46:a9:ba:d5:
                    fa:c4:87:39:9c:fe:0f:94:a6:6a:a2:fd:cd:e1:48:
                    31:2d:7a:80:2b:10:89:11:a8:38:14:d6:6a:cd:bf:
                    4c:be:c3:6d:03:cd:43:1e:17:5e:20:f2:0f:f4:cc:
                    ab:e0:d5:89:73:e8:ad:cd:51:ef:1e:fb:78:17:09:
                    1d:a0:1d:17:25:30:1b:68:e2:42:cc:7c:dc:a9:8d:
                    d5:d6:bb:fe:f9:55:5d:11:9d:e1:4e:f2:a0:13:66:
                    1e:56:5f:38:f9:42:2e:6b:22:20:e4:27:be:43:69:
                    8e:62:82:2d:f2:4b:ae:a0:e1:8f:17:27:12:a9:a5:
                    b4:00:79:51:38:12:74:bf:d0:d0:6f:bd:e9:46:8b:
                    d6:91:2e:be:ec:c4:f4:c7:dd:77:36:ce:56:3e:2b:
                    f3:1e:c1:76:0d:bd:f2:5b:09:4d:23:87:34:85:61:
                    94:7b:86:70:01:75:dc:2d:8d:4d:b4:aa:06:85:e2:
                    24:c7:2d:30:84:3f:d2:79:77:85:b4:54:14:cf:ce:
                    71:e8:bf:be:75:da:66:fe:06:4e:af:00:bf:0d:22:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B8:12:08:1B:29:8E:F8:F0:3F:41:0D:BD:59:E6:90:30:09:8D:B6
            X509v3 Authority Key Identifier:
                keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:c1:a9:95:3b:32:0a:46:76:95:70:ed:62:3e:2b:a5:9f:
         4e:3a:cf:11:ef:9d:9d:ff:92:e9:c0:f5:93:a6:fc:de:2a:1c:
         d7:2c:13:f7:82:d9:e6:b4:42:3e:02:06:21:fd:78:09:c2:b2:
         3b:0d:d7:3d:98:d2:81:10:51:f5:40:5d:ec:51:0b:2f:c6:dc:
         11:49:7c:27:72:3a:bb:2b:9d:95:ab:62:73:b2:c9:91:7f:ce:
         14:ae:83:f6:4e:12:07:08:e0:d0:d1:11:c9:14:aa:a0:e6:0b:
         68:29:76:9a:a7:44:34:9a:5a:1e:c4:39:1f:9d:24:13:ed:44:
         46:08:7b:6e:61:0f:a0:2a:18:35:96:68:4a:d0:6e:e1:27:e5:
         c7:a7:d6:32:89:b7:34:cc:2e:2d:29:4d:63:09:87:59:76:f8:
         82:6b:44:15:9d:2b:f9:6b:f8:51:aa:13:97:6e:eb:10:18:c5:
         4f:05:c7:c9:68:97:d0:ea:28:a0:1c:80:c9:49:52:dd:4b:f9:
         75:1c:bb:a2:85:5d:19:86:aa:ce:09:c4:6c:38:8d:5a:b2:dc:
         9f:3f:ac:d6:0b:a1:e1:38:2c:5c:af:de:48:0a:82:d9:34:01:
         87:54:41:7c:55:bd:9c:c2:cb:74:87:ef:7c:56:0e:fc:1a:94:
         37:b4:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:20:12 2026 by rpki-client