Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
File:                     1661480FF274E46E5E74274531EDCB741CA1C734.mft (raw, json)
Hash identifier:          DEBXi/ME19zcxV3d7MWQ+NbBxO6TSMeagIcBdO9WerU=
Subject key identifier:   AA:90:84:DF:77:B1:12:87:12:A1:69:9E:AD:33:97:89:CF:12:09:89
Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
Certificate issuer:       /CN=1661480FF274E46E5E74274531EDCB741CA1C734
Certificate serial:       58E593C60E541644FC1844CCBB9D71288D189B5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 19:20:17 +0000
Manifest this update:     Tue 12 May 2026 19:15:17 +0000
Manifest next update:     Wed 13 May 2026 21:36:17 +0000
Files and hashes:         1: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: RJW8cxc5knQFd6ZsJTxIJMJPLrpi1nPKGRB3o32Vvrg=)
                          2: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: 8uSlgnTbxGAzWNgbE1BKBFBhMHsG7F+ZnW0oGHCnk8w=)
                          3: 1661480FF274E46E5E74274531EDCB741CA1C734.crl (hash: d3Xt/d8ip3aXm4q4ASEhFycLaR/8+/lraCZfMg+OenE=)
                          4: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: V75gkBW5l6X/+7vnO9PPI54r4jLFDkXk/84VL8kexoA=)
                          5: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: 8ZVpWuFxO9temB8Ho9FZTNXvwZzEzY2CqMkIIHYcFZs=)
                          6: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: yeyDp2n0wd57cuHVR90zOnbkcRU0QZljusHdKuOsPt4=)
                          7: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: D5DehsQ30Cg+nOY8N0HK+YwXqyoPTcKwYKHkFyOMq6Q=)
                          8: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: Y0BQZtsB87a9/5oaZfRO5KllrRmXSjrLR0zXbqGB394=)
                          9: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: pwGyBzBOtEK35HSrAz+AVA7aiAsnsEM4hcBWRLigb/A=)
                          10: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: 5Rh6b8BHsmWIHG3vGb6jLaqPvuwWEBxRJQJuBZZsDT0=)
                          11: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: jf6b7kXVa1dhZZRDA/RPJIPiAhtoDFAim3d84aPTFo8=)
                          12: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: IFRJrTg8onKZh/TaH9A8yf1wtYUjMcqN4WYH9m4UY4o=)
                          13: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: 6+4UoGWRmOvV9or9CsRz3CTlMpRVAi94wKc1SslyAWU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
                          rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e5:93:c6:0e:54:16:44:fc:18:44:cc:bb:9d:71:28:8d:18:9b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734
        Validity
            Not Before: May 12 19:15:17 2026 GMT
            Not After : May 13 21:36:17 2026 GMT
        Subject: CN=AA9084DF77B1128712A1699EAD339789CF120989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ee:44:f1:6b:c5:48:1e:a8:78:b9:10:27:8f:
                    42:33:d7:b4:0f:7b:75:d0:53:33:1a:c9:89:90:53:
                    ab:48:33:79:d5:df:b2:1d:f2:9a:e1:d1:18:b3:2f:
                    51:7d:02:1a:6b:93:34:ea:66:85:25:2a:a2:5c:a3:
                    c5:73:92:d3:26:5e:1f:aa:13:b8:fb:ad:75:f3:1d:
                    64:51:4e:e5:84:63:4d:e1:a6:84:26:0d:67:23:6b:
                    e9:0f:8f:ed:96:90:19:4d:2c:8c:9d:76:48:c7:67:
                    a8:c7:9b:fa:3b:47:0d:c0:59:6d:5a:f6:4a:a8:9b:
                    ac:b5:55:28:48:4d:34:c1:80:ff:36:ed:95:a5:2a:
                    07:46:03:aa:58:eb:1f:73:5f:63:cf:23:db:51:b4:
                    c7:f6:89:f5:7e:2c:87:c4:90:fd:12:1c:e4:70:b0:
                    33:16:d5:20:a5:84:da:13:2e:b3:57:b0:9d:10:d3:
                    62:f9:78:42:b5:87:31:c4:32:3e:52:da:1a:eb:67:
                    35:2b:61:23:71:54:54:6d:7e:58:b8:89:32:e2:3d:
                    38:3c:85:e2:c6:d3:aa:a7:4d:d5:a0:6b:91:d9:b9:
                    fc:46:19:b5:a6:53:a3:a7:5c:ec:6a:63:99:1d:d9:
                    d1:d6:01:36:f7:98:a4:2b:dc:9f:58:11:f4:58:a4:
                    7c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:90:84:DF:77:B1:12:87:12:A1:69:9E:AD:33:97:89:CF:12:09:89
            X509v3 Authority Key Identifier:
                keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7e:e9:74:65:41:64:88:b6:3e:b3:2a:57:82:42:84:19:bd:
         d7:06:42:2a:5e:87:c6:a7:75:21:a9:2b:2f:7b:5e:2c:87:1c:
         bf:1d:bb:a8:d6:ad:34:ce:01:5d:59:a2:2f:7b:fc:ca:6a:7a:
         7e:26:af:f9:8d:19:f6:53:f6:70:1e:a2:b6:6b:f8:d9:6c:32:
         f2:e2:e4:47:f6:90:14:f6:35:10:01:cf:16:b2:73:cd:67:31:
         71:4b:cf:38:d8:b5:66:42:04:dc:fa:5f:fe:d8:2e:c7:3b:99:
         19:bc:a4:bb:11:57:26:bc:ea:7d:8a:e1:e3:fb:39:17:e5:e5:
         0d:80:4d:d3:d3:69:8b:fc:27:b1:11:10:4e:84:1a:da:ec:89:
         63:c1:a8:10:a1:24:15:21:de:c7:d2:49:28:59:9c:96:d2:29:
         7f:d1:89:65:5a:31:af:72:79:16:7b:d3:67:af:db:71:8a:2a:
         dc:8a:1a:eb:b0:b9:9c:a3:c3:41:d1:1c:04:36:1e:d7:b0:fa:
         6f:39:ec:9c:89:07:4f:a5:cc:f4:91:49:7c:58:54:d0:ca:cd:
         6f:60:37:ca:44:43:ee:a6:a5:b4:bd:9f:7e:1a:34:09:e6:a7:
         da:d3:d8:de:7e:32:1a:de:8e:d2:f6:e8:ac:d3:2f:42:2c:a3:
         51:cc:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:57 2026 by rpki-client