Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
File:                     46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft (raw, json)
Hash identifier:          d7HQtnkgCDvwoLaQIAensxUmXe4sPXUr0TakCP9LIF0=
Subject key identifier:   C4:6E:06:06:C3:5A:D5:DD:80:08:9D:E5:82:AC:74:15:7B:65:3D:88
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Certificate issuer:       /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial:       26CE59F0A9CE12E27F5E3DB5374A949F58E5D294
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 19:04:48 +0000
Manifest this update:     Tue 12 May 2026 18:59:48 +0000
Manifest next update:     Wed 13 May 2026 22:13:48 +0000
Files and hashes:         1: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: uXr8DnKi8QtOAVEEstmImQaN4M7bPiEAwEuGTottsCo=)
                          2: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: jcwrytSrVr9iAZjPRv58Wx2zSE/xYS0utsjnTbXZlh8=)
                          3: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl (hash: tGFglxC7MLiV7CGDRqt+5sRVym23p3PfO5RSAC4kPiI=)
                          4: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 8IXeZT2nMIplDuKAy9sTdwidwLtl6QHRFLk7GQI0XlE=)
                          5: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: oJrAXv58oZDMk40W9JRPwNDx1VF9IQdEUdgQPzLFkmg=)
                          6: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=)
                          7: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: 1okkgqoiBVDWBMw8B8fUz+WUWSrHUDprl2WG1iMqp8w=)
                          8: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: P3rNCMyzAiokg7rVA737lP8Lovb0gWKaIdt9sIaalEY=)
                          9: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: WTtSNSnNo9oz9/i7rHt1jxuFUkS6d/teW8M9wk46Nik=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
                          rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ce:59:f0:a9:ce:12:e2:7f:5e:3d:b5:37:4a:94:9f:58:e5:d2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
        Validity
            Not Before: May 12 18:59:48 2026 GMT
            Not After : May 13 22:13:48 2026 GMT
        Subject: CN=C46E0606C35AD5DD80089DE582AC74157B653D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:ff:56:af:e7:b9:32:be:c5:aa:54:c0:6a:
                    7e:63:9a:d0:66:00:5c:28:7e:57:2b:66:21:c9:77:
                    18:fc:5c:14:4a:09:19:f5:af:98:c0:53:16:3a:28:
                    92:eb:4d:97:0d:ff:ad:2f:3f:16:98:50:a8:e3:27:
                    eb:b3:3b:fd:02:8a:1f:7e:a2:3c:57:47:85:aa:ac:
                    9d:d4:c9:02:32:df:f6:ee:1a:61:74:62:03:7f:fd:
                    b7:70:d1:28:13:58:ab:11:c5:45:53:e1:71:76:fa:
                    c9:32:3b:a0:08:32:05:ff:02:d9:28:3c:cd:c8:02:
                    22:db:e7:7f:78:da:47:52:51:5d:a2:b2:91:2b:0e:
                    91:81:d6:08:4c:2c:5f:f2:e1:ec:01:81:8a:d1:3d:
                    fe:da:db:25:53:c6:49:01:21:68:32:6c:94:98:38:
                    4d:2d:a4:f6:10:e5:4b:18:39:33:fe:ae:f1:06:4f:
                    a3:19:fa:0a:cf:c7:b4:df:9a:e4:f3:07:a1:37:02:
                    c8:31:e3:65:c8:e4:c7:fd:34:08:e3:1f:30:40:09:
                    06:87:8b:49:1e:2f:07:2e:e7:8c:f9:11:2a:73:cd:
                    6d:3a:b5:1a:52:6a:ea:e8:b5:6f:95:41:8e:0e:14:
                    f8:19:4c:76:c1:c1:7d:cc:03:00:b3:90:61:a2:d6:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6E:06:06:C3:5A:D5:DD:80:08:9D:E5:82:AC:74:15:7B:65:3D:88
            X509v3 Authority Key Identifier:
                keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:00:d6:4a:12:35:de:b6:e0:6d:bb:ce:11:fc:43:9f:e0:b8:
         6f:e6:27:d1:1b:8c:59:9b:47:d6:bf:84:3d:7f:03:3a:8f:a3:
         2a:ff:84:f7:7c:07:ea:8a:6f:0b:47:ec:3b:13:f1:6d:13:16:
         cb:bb:c6:eb:16:38:b0:db:43:b2:be:04:9b:40:e1:c0:aa:c0:
         ad:bf:af:bb:77:19:8f:d7:97:28:d2:79:d1:bf:80:c5:12:ec:
         b1:e4:e7:f2:35:58:8d:b4:d7:b1:f3:4f:62:38:86:cf:fd:4c:
         1a:24:1a:68:23:68:e1:b2:4c:65:78:ea:8d:78:8a:33:ef:09:
         3f:e0:08:17:22:04:7a:82:d4:0c:45:6d:44:79:3f:c5:32:25:
         47:fd:6d:ab:3c:16:8a:9c:91:15:6f:c8:eb:94:1a:d0:71:dd:
         8a:10:6f:26:3f:c6:05:f0:96:9a:27:74:0f:4c:17:0a:be:c1:
         29:81:07:04:74:53:09:18:16:33:58:81:89:9c:88:8c:57:0f:
         84:e0:f2:0e:b9:5c:57:f7:79:6a:35:56:d9:33:e8:40:67:0f:
         29:1d:aa:1d:c8:03:38:ef:c5:be:65:30:e6:53:e7:e3:6d:4a:
         31:56:b3:86:e2:58:33:c5:91:3a:65:a4:31:e9:5f:a5:fe:0e:
         a9:1c:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:40 2026 by rpki-client