Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
File:                     66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft (raw, json)
Hash identifier:          NzrXx2Nhs6s1YklcxT0cLS0VxoweFEm+pCS/1G8uqu0=
Subject key identifier:   8C:71:AA:B5:C8:AD:CD:44:F0:F3:AC:76:A3:E0:DC:27:EE:78:BA:23
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Certificate issuer:       /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial:       33CFB915AF869B8795D37AF119560162BDEE4F11
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
Manifest number:          0E
Signing time:             Tue 12 May 2026 04:03:42 +0000
Manifest this update:     Tue 12 May 2026 03:58:42 +0000
Manifest next update:     Wed 13 May 2026 06:25:42 +0000
Files and hashes:         1: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: 8VioNKBine3nnTO3lIrgZ5P0mwfqaztVY9eBTGZLZpY=)
                          2: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: G3d5+PJ4RwaH3+49YAXZuwZHSBMw/JF+ioQ5xyAVwXk=)
                          3: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: kxIOYoC0XrMoUIa2RKDIrOUk61PTYC6D0smdwPW+OqE=)
                          4: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: Di5sToIdYtfOw42F6tH8eEgf1Tlo/6HAUCPyhJe7z9s=)
                          5: 66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl (hash: ZXNcQbbvOEUPT7Q0vpuhc+3nHp7hZNu4Vk5DtzXQb9I=)
                          6: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: n/ZVRJi6yb8Dz2Mvlmk9fIXtW9fAfV0qot64+DO2GBg=)
                          7: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: i5cJhoPHd05iRQrt+c8hD0fxUqa82L/0uVmpW5FyRsM=)
                          8: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: ayJGb85mEsw6hkCd3R4N6T60EHmEHaE0N2aTdVYDJwU=)
                          9: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: NaIbUIEcHg996UwcSPOlGfP3YqUKyIHzjC1cqpknTE4=)
                          10: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: kNgOuGZXLAFUYxR2TmnqvvHmRiKcIBei3j7WTSaZzZ4=)
                          11: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: EPaxFk59J+mAhJJZI0UXN15r/MDP8erRFtwyeOK2Jyc=)
                          12: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 8DBxlpB4P7TBKUnRSvj1q12ltJkx0DrbCvm4btLrod4=)
                          13: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: cq5fJGcOxUi8WO0+4dKMsKLXIWSZjZoNabBBMuQjlGY=)
                          14: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: UQULiH/rzGZ+Qot5L6bTSG/ZqsqiXoMUdx2Z+g8DPd4=)
                          15: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: r6gC26YZfyRCXBqtBxM90HpZHycKXfj7CtQcMDuzkHs=)
                          16: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: cOXnXn1Tgv14XhXe0FNGT6IvDCa8su0BXcORjmSihek=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
                          rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 06:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:b9:15:af:86:9b:87:95:d3:7a:f1:19:56:01:62:bd:ee:4f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
        Validity
            Not Before: May 12 03:58:42 2026 GMT
            Not After : May 13 06:25:42 2026 GMT
        Subject: CN=8C71AAB5C8ADCD44F0F3AC76A3E0DC27EE78BA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:eb:e6:37:24:fc:6a:33:5f:35:51:75:a3:
                    5e:e4:2a:be:3b:ed:5f:de:ac:a9:b3:80:83:fa:d1:
                    b7:53:4b:57:c8:b5:72:a5:8a:5d:2c:3e:6a:e7:82:
                    6d:84:c6:6e:27:5d:96:95:05:66:39:38:58:ed:7e:
                    fa:ea:f7:b3:fd:97:35:89:5b:cf:21:3c:36:20:26:
                    86:03:16:5d:73:bb:52:90:a0:ec:6e:f8:ee:de:91:
                    20:4d:1f:f6:d7:b7:34:91:43:9a:55:59:db:6b:e0:
                    94:ca:dc:d0:7d:ae:bf:82:1d:19:10:72:32:aa:40:
                    ed:85:df:b7:e6:90:20:71:8c:be:97:f7:c2:c3:71:
                    6e:e1:1f:af:c3:31:8a:c2:c6:0e:6d:25:15:aa:80:
                    0d:35:c4:97:72:65:ea:1b:86:b9:91:4b:6e:06:97:
                    4f:91:19:e2:6e:b2:cf:fa:23:cc:b2:1e:39:56:fb:
                    f6:3b:03:c9:1e:c2:be:ab:bf:06:e1:3d:c1:e6:b5:
                    3d:1d:82:df:97:52:be:81:1a:4c:37:8f:66:34:10:
                    e5:fd:fe:c4:9c:e5:a9:e5:54:80:bf:83:1e:4c:58:
                    29:09:ec:a1:23:e4:40:e9:02:f0:b0:93:29:c2:c4:
                    f3:24:00:fd:b7:75:2d:ff:df:d4:92:76:89:05:66:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:71:AA:B5:C8:AD:CD:44:F0:F3:AC:76:A3:E0:DC:27:EE:78:BA:23
            X509v3 Authority Key Identifier:
                keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b2:0e:8b:50:b7:8d:92:67:91:c7:53:f1:aa:be:00:97:9d:
         fd:ad:b9:de:77:3d:11:ce:b3:ed:c9:67:63:25:e1:5b:e1:74:
         0a:b3:fd:65:7b:05:8f:fa:c9:6e:e9:5e:97:1c:3d:ea:50:aa:
         98:c9:b1:2f:02:17:2f:94:43:a9:33:02:7e:8d:6c:e6:da:86:
         e3:c1:a7:b7:67:08:a5:7f:55:ca:9c:79:15:a6:75:7f:62:b5:
         24:14:25:0b:3f:57:1e:9e:9d:ef:08:f9:86:b8:fd:02:ad:8c:
         56:2d:b3:95:8d:84:29:ac:1c:9d:24:be:f5:53:5d:7b:74:cf:
         d5:3a:dd:48:07:6c:e1:e8:2e:78:c8:f7:b1:64:71:70:58:fa:
         df:67:69:4b:6e:df:85:67:f8:36:e9:bd:35:9b:20:ad:00:85:
         99:ef:f7:38:08:97:64:2f:1d:39:de:3b:59:00:68:5c:26:86:
         e5:98:d1:04:49:de:be:c7:f2:cd:1f:a3:88:eb:a4:b8:67:45:
         d4:bd:c1:5b:46:80:12:e5:53:28:2f:31:6c:23:6e:ad:2b:fb:
         e6:5c:3f:d7:2c:13:66:6b:7c:5f:fa:5d:55:db:cd:2e:41:36:
         81:cb:78:98:68:6f:08:33:02:8a:91:af:dd:65:de:6b:e2:be:
         e9:e7:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:59 2026 by rpki-client