Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
File:                     1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft (raw, json)
Hash identifier:          8JD3q0ORAFRd39zzOjgpG8iE9xADLwKNCBL4St/+yLQ=
Subject key identifier:   9A:FE:77:72:F8:E9:E5:8E:88:63:6F:89:1B:61:D0:77:B7:45:2C:3A
Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A
Certificate issuer:       /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
Certificate serial:       55E6783D28B0C87E5DA755830A318371C79A83F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 14:54:31 +0000
Manifest this update:     Tue 12 May 2026 14:49:31 +0000
Manifest next update:     Wed 13 May 2026 16:48:31 +0000
Files and hashes:         1: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: 3Pur9J/K8W30/vvGHGXc6KHgwQgQ4wEAxcFN1o16NNI=)
                          2: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: a4IK1VqkQFifgbVqGFjspnePVTV/YkKjfKoaIwFfqZw=)
                          3: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: /fa1hwZEt68IrXwKEonGaCZwd1oMYZDyXJq4KeJo86E=)
                          4: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: an5beHJBQCXe1O6nJramlD3hI7Qm5QXG3JLpnD/aNxM=)
                          5: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: a6L02/ltQd6+ySj9pYMUEWkvYU4L6ZYKU3OEQlZp5vg=)
                          6: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl (hash: an/Ftfo1SIwQlr0ZfSmjh9P5O/T4qHnGzJqE5v+XQww=)
                          7: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl
                          rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e6:78:3d:28:b0:c8:7e:5d:a7:55:83:0a:31:83:71:c7:9a:83:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A
        Validity
            Not Before: May 12 14:49:31 2026 GMT
            Not After : May 13 16:48:31 2026 GMT
        Subject: CN=9AFE7772F8E9E58E88636F891B61D077B7452C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:c2:68:b1:71:0a:b5:08:c4:2b:19:ca:30:
                    61:0a:9c:a8:3e:22:2b:71:fd:74:79:05:95:bc:df:
                    94:0f:af:59:29:3a:68:4a:c6:89:e8:70:1c:87:7b:
                    f1:5d:e2:bb:2a:02:35:38:70:c8:5b:d0:4c:dc:ca:
                    fe:5c:b2:ae:7f:1b:0f:a3:5a:fc:39:ae:8b:0a:e4:
                    15:e4:5f:df:de:6c:f5:72:55:19:c5:5a:3f:69:d1:
                    18:54:4f:75:e2:dd:28:a4:1e:8c:3d:c9:34:87:53:
                    9a:45:fe:b4:0d:4f:b8:c7:d4:a5:1c:76:68:2a:86:
                    d1:d8:7f:18:27:0c:00:b8:2f:fc:24:e0:6d:b7:7c:
                    77:33:a7:4b:08:9a:77:69:8d:bb:61:ed:e1:06:c4:
                    62:dc:d9:82:ad:86:ea:ce:02:10:1b:fb:b2:e9:d6:
                    49:80:1d:07:12:6a:b8:5c:2f:ff:10:01:c6:1d:33:
                    0f:4b:a1:71:4c:91:30:c6:09:55:b8:6d:ba:ee:dd:
                    44:61:d7:81:d0:7b:11:71:ad:24:93:f3:df:0d:b0:
                    ba:ce:7e:4c:f4:fe:7c:28:ca:dc:f5:53:57:50:4b:
                    8d:56:d8:95:c5:f3:5a:e6:b2:8f:ea:04:b0:09:7c:
                    b3:1c:05:49:90:dd:e0:8f:c6:04:49:56:5c:e3:93:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FE:77:72:F8:E9:E5:8E:88:63:6F:89:1B:61:D0:77:B7:45:2C:3A
            X509v3 Authority Key Identifier:
                keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3e:91:3e:aa:fc:e0:4e:2a:43:76:fd:88:d1:cc:a9:cf:f9:
         2b:6b:df:b7:d6:4d:08:99:a5:2f:b0:90:a3:be:64:45:8d:21:
         ee:63:67:70:23:2d:ca:b7:29:3b:e5:30:ee:b5:b6:44:a5:f8:
         66:1c:82:ef:04:2d:1d:74:11:30:61:81:5e:00:16:50:46:fb:
         01:dd:c0:e4:4e:c6:09:83:fd:b0:73:dc:ad:bc:fe:8f:d7:b0:
         d5:bd:ad:18:73:72:7f:7a:dd:0f:a6:d6:a9:01:88:76:21:ae:
         0f:ac:01:b5:ab:8f:c1:24:25:23:7f:86:cd:e6:6f:1c:c9:57:
         64:10:43:fa:1e:9b:35:bd:dd:5b:78:ae:a3:32:03:3e:d8:d8:
         c6:e4:b8:93:01:22:ae:98:3f:53:9d:5c:4d:1f:77:05:08:39:
         95:3b:2a:58:04:28:e5:70:f9:de:75:9b:11:4b:56:ec:e4:c7:
         c3:f2:c0:b2:bf:9d:c0:f8:e4:57:c4:4e:6a:bc:c3:69:64:4f:
         ce:bd:45:2d:bd:79:e8:10:9b:9c:93:ca:e3:ba:0d:6a:26:18:
         73:cf:4a:cc:0d:16:54:6a:3a:f0:28:68:3c:86:27:65:1a:d4:
         ae:07:ab:c3:c4:53:da:4d:56:80:68:c9:e6:fc:c5:bd:f0:05:
         86:7c:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:20:33 2026 by rpki-client