Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
File:                     D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft (raw, json)
Hash identifier:          fHHue1goHOE+CBFRyY8DBNiXjm/UbZp/NFS2jyml9T0=
Subject key identifier:   FB:39:CA:1F:BD:CC:4F:C3:01:03:A5:E2:D0:66:5A:BD:7A:4B:90:F6
Authority key identifier: D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A
Certificate issuer:       /CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A
Certificate serial:       2A7D7BBA67207F954BE8B81E4411A080E62C8A73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
Manifest number:          A7
Signing time:             Fri 04 Sep 2026 03:36:00 +0000
Manifest this update:     Fri 04 Sep 2026 03:31:00 +0000
Manifest next update:     Sat 05 Sep 2026 04:20:00 +0000
Files and hashes:         1: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: 1bpFIvgYDWuL7Cg2M0uTafrSxAsJRzJnUZ4W6gSO7ZY=)
                          2: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl (hash: G9sklBsfbcznBvItp34pNeFu2vZaPRuhhKNs7oMqYX8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl
                          rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 04:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7d:7b:ba:67:20:7f:95:4b:e8:b8:1e:44:11:a0:80:e6:2c:8a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A
        Validity
            Not Before: Sep  4 03:31:00 2026 GMT
            Not After : Sep  5 04:20:00 2026 GMT
        Subject: CN=FB39CA1FBDCC4FC30103A5E2D0665ABD7A4B90F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:2e:8d:02:08:a1:ad:9f:45:a3:d7:36:fc:
                    02:76:cb:f0:42:e0:3a:9e:a4:b5:c9:8d:72:d5:52:
                    e5:55:36:d0:bb:0d:0a:03:ab:0c:68:f4:79:b0:69:
                    d1:c1:7a:b2:53:91:c1:2f:b3:03:44:03:32:d2:8d:
                    a7:ea:2b:7a:63:3d:c6:02:7d:d2:57:39:24:13:81:
                    da:54:f1:77:c6:7b:3b:04:5d:61:53:be:f9:de:25:
                    72:16:7e:e7:52:bf:59:8b:b8:16:fb:77:02:be:a8:
                    7c:85:c4:0a:83:65:eb:98:47:69:a7:02:45:ed:7e:
                    17:3d:a8:82:a2:60:e8:c3:22:0a:d3:5f:ee:3f:3a:
                    80:84:39:aa:82:9d:31:4e:3e:9f:59:43:c3:4f:d2:
                    76:a4:fa:e0:71:f7:22:65:5a:31:5c:03:fa:e1:f1:
                    dd:86:d9:55:83:5f:cf:6b:57:dc:ba:2e:37:9c:e2:
                    31:6a:4d:63:12:5c:76:07:99:79:3b:8c:a1:b4:3e:
                    57:cb:0f:15:9a:af:28:6e:d9:7f:53:b3:56:1e:cb:
                    4b:10:96:12:d3:4a:4d:95:78:db:56:4e:33:35:ec:
                    43:96:53:5c:f9:6d:20:9c:70:74:65:8e:bb:c5:8d:
                    3f:a3:59:6d:60:9f:25:ec:a8:64:1d:6a:3d:b6:82:
                    c5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:CA:1F:BD:CC:4F:C3:01:03:A5:E2:D0:66:5A:BD:7A:4B:90:F6
            X509v3 Authority Key Identifier:
                keyid:D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:58:fd:30:b4:e1:3c:27:34:a2:65:a0:60:a2:28:5f:8b:10:
         35:f8:ab:a7:2e:10:23:e7:67:e9:ff:55:6c:cf:c9:19:d8:69:
         b3:ce:c6:b6:c2:1b:d1:39:66:b1:13:83:ee:03:b3:4c:cf:66:
         85:82:8b:b7:b4:9e:a6:fe:9a:7b:3c:47:ae:69:fc:d1:b3:5a:
         5e:6a:fc:e8:f1:fe:f4:df:9c:2f:4f:62:6a:e9:2f:87:8e:f9:
         09:88:ba:88:c0:13:51:b6:08:fa:de:10:72:32:b6:de:fd:52:
         ef:ba:15:fd:11:65:2d:69:d8:9f:b5:43:c8:87:99:28:58:05:
         08:11:dc:4b:8e:3b:76:1f:24:16:33:69:2a:44:62:fc:1f:31:
         0e:e4:ef:6b:7e:84:2e:75:49:b9:1f:84:09:3a:66:61:1f:dc:
         e4:e5:04:f1:df:53:ed:c1:7a:78:c7:4e:4f:bf:36:e9:e4:4e:
         73:b8:f1:fe:19:10:34:95:c9:cb:9a:b9:b7:a9:22:15:9e:f6:
         07:f1:f2:1c:57:ec:0d:31:0a:10:ac:ea:c2:80:23:40:43:97:
         52:a6:7a:7d:bf:85:2f:0f:98:92:6a:e4:9a:5e:25:9f:7d:56:
         8f:aa:8e:90:5f:20:43:35:76:e1:c7:f2:b1:a4:ea:ab:af:a4:
         7b:85:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:15:18 2026 by rpki-client