Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
File:                     0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json)
Hash identifier:          hXgN1NbpRXZZ1/hEmU+Tij0FfNhzKVcGbx1i5FnXz1A=
Subject key identifier:   AA:D4:71:F6:5E:61:33:43:FF:98:56:DF:ED:6B:25:CF:87:BD:CE:1E
Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
Certificate issuer:       /CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Certificate serial:       61315392899DF940E6B7FE47365FBF43370CEE97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
Manifest number:          70
Signing time:             Thu 23 Jul 2026 17:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 16:55:40 +0000
Manifest next update:     Fri 24 Jul 2026 17:14:40 +0000
Files and hashes:         1: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=)
                          2: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=)
                          3: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=)
                          4: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=)
                          5: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=)
                          6: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=)
                          7: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=)
                          8: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=)
                          9: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: sNokMO6FKYlJ2N5o875zF9tXDJFrmEoCzUZbKDHY4Wc=)
                          10: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
                          rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 17:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:31:53:92:89:9d:f9:40:e6:b7:fe:47:36:5f:bf:43:37:0c:ee:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F
        Validity
            Not Before: Jul 23 16:55:40 2026 GMT
            Not After : Jul 24 17:14:40 2026 GMT
        Subject: CN=AAD471F65E613343FF9856DFED6B25CF87BDCE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:cc:8c:8b:7f:93:d6:65:ea:d7:16:fd:b2:
                    70:d3:3f:04:12:4b:f0:52:63:c3:d5:80:6e:6b:7c:
                    ab:df:0d:62:8f:38:83:f3:42:8e:6e:9d:eb:29:ad:
                    6e:f5:51:a5:2f:c5:58:8f:6f:9a:fd:d3:d5:c1:b4:
                    9b:a6:02:16:59:b6:a0:4d:4e:0e:ee:d3:f7:24:a4:
                    7b:22:be:ae:a2:b4:36:0e:d2:6d:03:10:2d:34:6a:
                    ee:66:86:cc:ed:86:01:06:da:47:1d:3d:e5:f6:fe:
                    91:40:3a:8e:f2:a2:a8:e6:4b:63:1a:04:c4:8f:ca:
                    32:32:77:22:83:24:78:56:92:48:70:75:1b:02:64:
                    1c:db:65:53:ec:bd:47:ea:6b:e1:fc:d9:aa:a3:c5:
                    e8:48:70:a6:15:5f:42:57:a0:c7:ba:d6:ab:c5:fc:
                    1f:b8:00:ec:80:20:3e:8e:d3:cb:9f:82:0f:be:b9:
                    63:08:54:fd:df:8d:c4:d0:f5:81:39:c6:fb:8c:f9:
                    b2:5e:3e:8a:fd:4e:03:1f:69:e5:00:de:5e:20:8a:
                    b9:10:de:77:45:bf:c8:79:d7:b1:f2:55:76:08:e8:
                    e9:aa:d0:26:72:d4:e1:88:91:f1:fc:9e:4f:a2:f8:
                    47:93:1b:c5:18:c7:70:bd:23:04:8e:e2:61:e1:af:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D4:71:F6:5E:61:33:43:FF:98:56:DF:ED:6B:25:CF:87:BD:CE:1E
            X509v3 Authority Key Identifier:
                keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:22:ad:fd:b2:f6:4a:dd:8c:0c:44:8b:77:ec:82:42:3a:b6:
         4e:98:6f:b8:01:15:b3:c5:16:41:47:88:03:c3:c9:8e:51:d5:
         64:14:c2:ee:12:9f:ac:71:98:65:79:fe:95:94:71:be:b6:8d:
         96:e0:6a:12:b1:63:ed:a2:ea:2f:d1:f9:d8:1a:bd:05:7c:90:
         26:8b:13:28:18:c2:28:78:bb:29:1c:eb:b1:46:e2:34:12:22:
         71:45:14:6d:9b:bd:a0:df:b6:cd:93:a3:58:82:d4:d1:63:14:
         63:fd:ce:ac:3e:68:07:1b:ed:77:87:85:dc:ba:0c:d8:a5:c4:
         e8:61:83:b7:e1:9a:3a:2b:25:2a:7d:88:82:a3:f2:05:23:7a:
         3c:aa:aa:04:25:c5:d1:fc:17:ca:22:c8:c0:04:a8:80:b1:d0:
         3f:d8:43:4d:ac:f7:8b:9d:0e:25:ef:5b:bb:c1:59:87:2e:cc:
         b4:8f:9a:90:a2:3b:ca:ef:65:f9:5f:40:f8:cc:e7:e8:06:7b:
         7c:68:b1:e3:d6:62:b4:33:5e:0f:16:d4:66:4e:87:0c:1e:ac:
         af:cf:c2:36:11:ac:2b:19:69:20:60:11:a2:eb:5b:77:a9:9f:
         2e:02:93:d6:f1:eb:bb:3d:80:47:6b:2d:85:34:0d:8e:b3:e4:
         d3:cd:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:57 2026 by rpki-client