Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
File:                     0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft (raw, json)
Hash identifier:          wMS6HqZvfMtea8s8Ty0VrxubRlfDHofw4NfysOd8gr0=
Subject key identifier:   C6:99:44:6E:E2:A9:85:20:07:B1:07:6D:4D:FB:5A:1C:7B:E7:D5:D2
Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
Certificate issuer:       /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Certificate serial:       6289BE76D16DC637A84E305A9948DA1F0BD253B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 07:23:43 +0000
Manifest this update:     Tue 12 May 2026 07:18:43 +0000
Manifest next update:     Wed 13 May 2026 09:55:43 +0000
Files and hashes:         1: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: YEcfoQjDpMi0GF8b5kmh9JJ3H1tnO76M1gzrmxVWaMc=)
                          2: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: k7wAQ0uD+feQhS7bp4KkJxo3uZUwNKoeGm20CJyRgyc=)
                          3: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: 4mD9TjqePo/yOB3/Fiwn7z8Fd4y7bA97GyieYO2qTlw=)
                          4: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: 6afeRIJnDM/uUZHogbKxMoXG/M34lmpUP/58vATJWAM=)
                          5: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: /Mgyo9ff3zy6arAcZsb+8DNgEw9iCUEDLwcPq3vZVTM=)
                          6: 0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl (hash: CajJeLsce97Acqsro43AW4M2+3pFFVUVK6LIVjWmWG0=)
                          7: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: MyQFtjJqg7ZYwpERzdoDmD5jzoRErmzO01EIiv31fWg=)
                          8: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: G9sq4ErGZj+4CsLlGYQ96xB1AH1Q/5k7LHe36UaA1Pw=)
                          9: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: sfhfAHrl757lamU4yGIl09WzhCGt6COimj3NHeX2Rnc=)
                          10: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: prcWJfhlUErzmRWR1H7hkcJb4s+PiXSVs4vIyO1/46s=)
                          11: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: HPMtJkG9vBmkfKDdQcScUoOmdbP+traQt1X9CJZPJyo=)
                          12: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: ooDWixoDrf/cdih9Rb8FLtagmcLYMAGnpLpX2ocgURU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
                          rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:89:be:76:d1:6d:c6:37:a8:4e:30:5a:99:48:da:1f:0b:d2:53:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
        Validity
            Not Before: May 12 07:18:43 2026 GMT
            Not After : May 13 09:55:43 2026 GMT
        Subject: CN=C699446EE2A9852007B1076D4DFB5A1C7BE7D5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:b5:74:5b:bd:69:3a:fb:d1:71:3c:29:95:
                    83:1f:64:65:1a:ac:78:8a:88:a0:9f:37:10:c5:09:
                    43:aa:ee:d2:3f:71:87:a4:b4:08:c8:33:88:9f:8f:
                    80:2a:98:e9:b9:da:f8:b8:80:ab:ba:e0:31:87:da:
                    7c:63:8f:8b:b5:41:15:78:a7:d2:89:07:8a:1d:d3:
                    4e:35:cd:f5:8b:e1:f9:f2:55:7f:1d:86:73:60:8c:
                    b0:4e:91:ea:79:34:5f:80:9f:99:4d:df:51:f1:1d:
                    1a:b0:e7:d4:91:d2:f9:4f:ac:c5:e4:89:99:a3:11:
                    d3:f8:28:03:6c:22:f7:bf:eb:f1:a1:ef:9e:60:e1:
                    16:18:2d:df:d2:24:07:54:2b:e4:c3:1e:67:4c:a1:
                    0a:ec:c0:f7:b4:38:6e:90:2d:d5:aa:36:c3:a8:e5:
                    01:33:5c:31:cd:54:8e:5f:08:6a:fe:9f:b2:8d:0b:
                    e3:75:9d:0d:a1:c0:ea:ac:0e:82:16:66:6e:09:7e:
                    7d:14:ae:ed:25:ba:35:d0:9b:0b:9e:d0:16:ce:43:
                    22:19:d2:31:c4:7e:5e:13:00:84:24:57:f3:96:db:
                    dc:18:ea:f3:1c:c1:73:ee:85:7e:22:0d:1b:4f:98:
                    5f:f8:ba:aa:fe:dd:59:ed:b8:eb:c0:81:e3:fe:61:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:99:44:6E:E2:A9:85:20:07:B1:07:6D:4D:FB:5A:1C:7B:E7:D5:D2
            X509v3 Authority Key Identifier:
                keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:47:6f:ff:53:b6:a3:fc:86:3f:2f:6f:f9:32:98:e3:b4:
         84:86:88:1b:e5:c0:49:59:0b:45:61:bb:48:2c:6f:a7:68:07:
         7b:6b:3b:31:64:59:67:34:c4:35:21:03:bf:86:32:4e:fb:ec:
         9a:d8:00:f6:fa:d7:4f:9d:70:cd:4d:53:f6:91:19:b4:a8:ad:
         14:d5:4d:1d:f1:91:2d:85:ab:20:42:66:56:b2:32:f5:ca:0b:
         10:1b:90:71:14:2f:ab:42:f2:92:3b:92:20:9a:53:75:5a:4d:
         18:2f:e6:38:a7:98:39:3e:cd:92:d8:a5:ba:9c:85:f2:3c:af:
         df:bf:ba:2a:63:d1:6a:bc:89:16:a2:e5:37:d9:ba:48:ba:55:
         d0:79:8b:be:17:21:0a:94:9c:42:22:df:6d:58:2f:45:40:85:
         b0:a7:8e:0d:c5:97:c5:81:b4:7c:64:da:84:cf:1b:c9:e3:9c:
         2b:6f:88:63:c3:2b:33:2d:38:0b:6e:ce:c9:af:52:51:61:5b:
         6b:08:0f:49:a6:5c:36:60:e2:a9:75:61:fa:ad:be:be:95:8d:
         0d:b9:2d:a1:51:47:b9:0a:f4:e4:82:f1:8e:84:a5:7c:5c:49:
         cf:0d:a6:52:0f:8a:a0:47:78:a2:0a:c2:e6:14:e1:be:06:fe:
         19:18:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:09 2026 by rpki-client