Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
File:                     0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json)
Hash identifier:          cSFSvKYnUMkYWmWDMR7N8dEmEMIweIrK4ypF+ehzFuQ=
Subject key identifier:   6F:82:62:06:C2:FE:F2:55:8D:86:9B:C8:4E:C4:DB:2E:02:3D:6D:F7
Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
Certificate issuer:       /CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Certificate serial:       2E2B7A769408159A60B529908F7454447D6C71EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
Manifest number:          C5
Signing time:             Fri 25 Sep 2026 04:10:27 +0000
Manifest this update:     Fri 25 Sep 2026 04:05:27 +0000
Manifest next update:     Sat 26 Sep 2026 05:36:27 +0000
Files and hashes:         1: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=)
                          2: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=)
                          3: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=)
                          4: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=)
                          5: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=)
                          6: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=)
                          7: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=)
                          8: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: Qsfgy7QKgzvUKJ+Agk2m77i9RQ8GElptH8X/GkJs4EA=)
                          9: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=)
                          10: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
                          rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 05:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2b:7a:76:94:08:15:9a:60:b5:29:90:8f:74:54:44:7d:6c:71:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F
        Validity
            Not Before: Sep 25 04:05:27 2026 GMT
            Not After : Sep 26 05:36:27 2026 GMT
        Subject: CN=6F826206C2FEF2558D869BC84EC4DB2E023D6DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:33:75:f7:5d:10:76:77:03:9a:9a:5d:b9:
                    52:d4:b2:de:5f:d0:6e:4d:9e:08:62:cb:2c:d9:f2:
                    0b:63:11:48:ee:e7:56:f3:42:02:b2:a1:61:ff:88:
                    e3:1b:0d:28:f1:5a:5b:47:8a:27:45:73:b0:48:a9:
                    fc:8a:52:f5:74:41:41:e8:cf:10:4d:0e:63:39:a8:
                    8d:e2:90:b2:0d:87:67:b9:26:be:f7:01:1f:73:90:
                    b5:4d:ae:d0:76:e5:3f:52:73:5f:14:c9:c6:25:50:
                    3a:e8:4d:a8:48:4e:11:b6:84:8d:a3:bb:fb:33:a4:
                    03:22:7d:40:ac:19:e6:33:10:d0:44:13:e8:47:e5:
                    b6:77:43:e0:29:fb:6b:8c:64:e4:ca:10:9c:cf:e6:
                    cb:81:16:a6:bb:77:db:6d:0c:7d:7e:92:44:e3:81:
                    76:f7:64:c4:c4:62:4a:54:ff:94:27:a6:bb:76:45:
                    41:7f:ac:70:46:3e:b3:54:57:f5:67:c0:64:19:09:
                    7c:35:d6:23:32:a4:03:fe:0c:ac:77:99:ec:81:22:
                    b8:f2:36:6e:7d:4b:84:5f:99:66:5a:ed:25:77:b9:
                    2e:49:b0:a5:97:eb:57:33:79:5b:7a:a0:b1:53:b9:
                    eb:33:f2:8a:da:e6:c2:79:d9:37:47:f3:0f:de:f7:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:82:62:06:C2:FE:F2:55:8D:86:9B:C8:4E:C4:DB:2E:02:3D:6D:F7
            X509v3 Authority Key Identifier:
                keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:ff:f2:ae:f6:5a:36:fe:23:eb:b1:58:53:c0:45:0a:d3:
         b4:52:aa:59:04:55:38:a5:a8:e6:9c:15:de:07:ad:3f:fc:cf:
         76:39:63:40:37:7f:e8:cf:a6:da:2a:58:0b:31:9d:e3:b5:c6:
         0a:f9:24:e7:b8:09:39:0e:bb:5d:b9:6a:55:a7:a9:4d:1c:8a:
         da:fc:e4:6a:5d:18:d7:39:f6:05:fd:1d:8c:c5:ee:e7:9a:f2:
         75:36:8a:c4:46:3b:27:58:94:62:ac:83:b4:27:06:1b:7c:d1:
         74:54:de:3b:50:4b:84:3b:45:28:24:c9:e7:a4:2a:b5:84:54:
         67:cf:7e:ba:78:b7:fd:9e:bb:66:22:b5:9f:65:fb:fb:02:84:
         26:9a:9e:60:10:8e:d2:7b:35:3c:54:33:a5:dd:dc:18:9f:6b:
         97:15:9a:a8:18:33:04:27:d8:bc:cd:73:fc:50:4d:c7:83:63:
         a1:67:28:ae:8a:3c:77:c0:e9:b1:3e:0e:db:49:c9:34:82:07:
         7d:66:4f:02:7f:f2:d9:99:a3:09:14:3e:01:53:1f:ee:32:a0:
         f1:88:a7:a0:c1:a9:3a:dd:9b:fd:7f:45:0e:73:94:66:38:4f:
         f1:8d:97:86:a2:e2:d2:20:6f:6a:d5:9e:e7:6e:8a:ec:82:9c:
         2e:7a:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:51:51 2026 by rpki-client