Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
File:                     566E09CA4830024428EFAB32BD4C5C0588342F87.mft (raw, json)
Hash identifier:          UFIaJHLcNygf7Tp8WBzX6bTi7KYN+V5OSuzOg86btvQ=
Subject key identifier:   1E:D7:93:0A:F9:DD:D8:D9:BA:28:78:07:20:41:0B:99:A1:F0:4C:2C
Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
Certificate issuer:       /CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Certificate serial:       114BF11A84C8504F454453ED7D14EC0FD6C71121
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 22:00:05 +0000
Manifest this update:     Tue 12 May 2026 21:55:05 +0000
Manifest next update:     Thu 14 May 2026 00:12:05 +0000
Files and hashes:         1: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: nv4ivE8SW9hoYRCCG42Qh0+UnGFF2lzp7pEbSpYGfVM=)
                          2: 566E09CA4830024428EFAB32BD4C5C0588342F87.crl (hash: +Fu6y8+NpPuQmnYaxytxnqvBPy6aM9TIB2STbZKX9HM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
                          rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4b:f1:1a:84:c8:50:4f:45:44:53:ed:7d:14:ec:0f:d6:c7:11:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87
        Validity
            Not Before: May 12 21:55:05 2026 GMT
            Not After : May 14 00:12:05 2026 GMT
        Subject: CN=1ED7930AF9DDD8D9BA28780720410B99A1F04C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:86:6a:9e:3e:c2:14:a7:da:a1:a2:3e:76:
                    fa:ba:a3:db:f9:5e:02:b4:bb:63:66:2c:1f:a6:a1:
                    92:8d:95:70:99:57:9b:da:45:e9:cd:68:e1:ab:14:
                    0d:12:95:f5:57:53:4d:7d:34:c2:24:03:3a:ec:bb:
                    37:f0:3f:2b:33:ed:88:ca:c2:4b:f2:30:dd:77:64:
                    67:c5:32:82:83:e3:6d:60:31:45:59:8a:65:17:ac:
                    5c:50:92:49:2b:59:f4:b0:f6:11:c6:56:06:a5:20:
                    ac:6d:c1:c6:a0:ef:50:a5:59:a6:54:b0:de:ae:fd:
                    43:1b:fa:59:f9:6e:18:17:17:25:ff:81:e1:9c:b2:
                    89:0d:4c:5f:63:89:db:ca:5b:f3:c4:cd:eb:91:ed:
                    9f:a0:b8:35:d6:75:c9:c8:e7:1c:84:1c:d2:b9:f4:
                    c5:3f:aa:2d:bd:91:55:92:92:be:99:02:75:6b:f9:
                    5e:2e:9e:43:4c:fb:d1:5f:63:c1:e7:9b:dd:64:c4:
                    c5:38:9f:d9:4f:d9:eb:1f:f7:1a:01:2f:ff:4e:ba:
                    52:57:a2:e9:f1:aa:f3:1e:c6:ed:8d:75:0a:fb:31:
                    34:30:c1:22:70:dd:71:06:f9:d2:8e:6f:e5:d3:2e:
                    75:c7:1e:b4:20:74:5e:c1:f2:c6:43:0a:72:b3:bb:
                    aa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D7:93:0A:F9:DD:D8:D9:BA:28:78:07:20:41:0B:99:A1:F0:4C:2C
            X509v3 Authority Key Identifier:
                keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:54:1d:0f:fb:20:9c:ef:e6:37:01:0a:8d:03:27:98:f8:
         5d:c8:c0:02:f9:9f:49:8a:36:07:9f:91:b6:e7:5d:99:d7:60:
         0f:f9:02:13:b1:88:dc:58:12:8a:4f:81:ad:c3:11:e5:cf:71:
         96:d9:f1:11:35:c7:f5:79:8b:24:b5:09:17:ef:1d:80:c1:37:
         1f:7b:a5:ca:14:b4:15:cc:a7:b6:1a:d5:7a:2c:4b:ac:b2:ac:
         07:9d:25:c7:09:e3:d0:bf:0a:4b:f4:d5:ba:21:ea:b4:bd:e3:
         4a:62:35:f9:4c:40:3f:9b:06:a6:85:43:42:57:f8:04:28:91:
         e0:80:23:a2:4e:d5:f3:e1:d8:dc:5a:48:1b:e0:8c:f4:2f:75:
         78:fe:55:27:04:ba:42:ec:f6:b6:c8:08:35:00:34:cd:b3:3b:
         0d:b9:74:2f:58:d8:9a:27:30:dc:8a:df:0a:be:60:21:aa:ad:
         39:64:10:58:f5:d9:b5:d8:b3:93:17:e6:3d:f8:dd:bc:45:0a:
         2f:16:d9:50:96:af:05:61:9e:a5:25:3e:ef:86:33:0f:5f:2b:
         50:d1:e7:5b:bf:a2:58:8f:80:84:33:8a:b9:0d:4f:a2:c7:d7:
         99:0b:0a:21:06:2e:87:a6:51:37:2b:f8:c4:fd:c0:ae:47:96:
         e0:f3:83:88
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEUvxGoTIUE9FRFPtfRTsD9bHESEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2RTA5Q0E0ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4
ODM0MkY4NzAeFw0yNjA1MTIyMTU1MDVaFw0yNjA1MTQwMDEyMDVaMDMxMTAvBgNV
BAMTKDFFRDc5MzBBRjlEREQ4RDlCQTI4NzgwNzIwNDEwQjk5QTFGMDRDMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCol4Zqnj7CFKfaoaI+dvq6o9v5
XgK0u2NmLB+moZKNlXCZV5vaRenNaOGrFA0SlfVXU019NMIkAzrsuzfwPysz7YjK
wkvyMN13ZGfFMoKD421gMUVZimUXrFxQkkkrWfSw9hHGVgalIKxtwcag71ClWaZU
sN6u/UMb+ln5bhgXFyX/geGcsokNTF9jidvKW/PEzeuR7Z+guDXWdcnI5xyEHNK5
9MU/qi29kVWSkr6ZAnVr+V4unkNM+9FfY8Hnm91kxMU4n9lP2esf9xoBL/9OulJX
ounxqvMexu2NdQr7MTQwwSJw3XEG+dKOb+XTLnXHHrQgdF7B8sZDCnKzu6qtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHteTCvnd2Nm6KHgHIEELmaHwTCwwHwYDVR0j
BBgwFoAUVm4JykgwAkQo76syvUxcBYg0L4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzE2YWE1NGYtNzE1OC00M2FmLWIzMzYtYmU0NzE0ODE2ZmFkLzAvNTY2RTA5Q0E0
ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4ODM0MkY4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NjZFMDlDQTQ4MzAwMjQ0MjhFRkFCMzJCRDRDNUMwNTg4MzQy
Rjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz
MzYtYmU0NzE0ODE2ZmFkLzAvNTY2RTA5Q0E0ODMwMDI0NDI4RUZBQjMyQkQ0QzVD
MDU4ODM0MkY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI5jVB0P+yCc7+Y3AQqNAyeY+F3IwAL5n0mK
NgefkbbnXZnXYA/5AhOxiNxYEopPga3DEeXPcZbZ8RE1x/V5iyS1CRfvHYDBNx97
pcoUtBXMp7Ya1XosS6yyrAedJccJ49C/Ckv01boh6rS940piNflMQD+bBqaFQ0JX
+AQokeCAI6JO1fPh2NxaSBvgjPQvdXj+VScEukLs9rbICDUANM2zOw25dC9Y2Jon
MNyK3wq+YCGqrTlkEFj12bXYs5MX5j343bxFCi8W2VCWrwVhnqUlPu+GMw9fK1DR
51u/oliPgIQzirkNT6LH15kLCiEGLoemUTcr+MT9wK5HluDzg4g=
-----END CERTIFICATE-----
Generated at Wed May 13 12:46:46 2026 by rpki-client