Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
File:                     F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft (raw, json)
Hash identifier:          hfbx3TgMpTY7O1XbC0GAKI+Fjbe5/6NVSMmB37hoGqY=
Subject key identifier:   AF:BB:B3:45:53:90:C9:23:A0:18:28:86:B2:2A:B2:5F:30:CD:CC:6D
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Certificate issuer:       /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial:       769A7CC32284D8ED491B1B495315981DC1AD807E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
Manifest number:          A8
Signing time:             Thu 03 Sep 2026 11:41:25 +0000
Manifest this update:     Thu 03 Sep 2026 11:36:25 +0000
Manifest next update:     Fri 04 Sep 2026 14:44:25 +0000
Files and hashes:         1: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: OvSsEeapnu+/oiKYJIcMYudEmuSdyI2NmSImX5jHoH4=)
                          2: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: ZWNoTl3f/QBfpXE45HAww//4eS88vFgydiSHbe0zdhA=)
                          3: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: TN3/E7Y5c/nedOyTgYgff8HK90H5iShgi5mk+WZX5nw=)
                          4: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: Q18y495vHxKdcsVM96pc/tUI9Fl6GfmbLs035wir/JU=)
                          5: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: kKPyA87cBNNbll+wZXw03s3L6LbkLTPgrzdBootFsHQ=)
                          6: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: Fg6XcYLXwzdBTEEbtVqZPj3EQucOEbeogJk1AzgGxAQ=)
                          7: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: zrBSW8GC94FsmSWPx82P8/uTVF2HgCkoo/2hN3b+4hM=)
                          8: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: V8AjpSzdxp8GDyMCHA7YtvW4QSVvG85ynWbgCsAEXEs=)
                          9: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: /XQUhdaX/lnH/4pSzymUR8gU8PBZoGnTr2RxGh6dJJI=)
                          10: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: BS5YihTbZaw+pKOipVulLJrh9jJr2QhVUAXi4IwAkiI=)
                          11: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: X24eGimplx9OKKA54SDn3PccRcDMInDYSFbqOhNXsRk=)
                          12: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: bcUDOpCB0dNiYwZx7hB9TNsT/6Q2Z4ktB8wuICtWZXQ=)
                          13: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: t5lI2fSBgF1Qk+xi/wexkm174c0g31j+0DtjwN72lnc=)
                          14: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: apqtipmn5kmXtB7pKv4YlNHER/Ifv3+XPDXaeex3R9k=)
                          15: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: CnBcLvoSDxEWtZrVDvNMamVH18oi4O/jyEx1Mt/oRO8=)
                          16: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: iFasMrZpPZhCJqBPOEUsMWSE1IL6XiDkC/rJS8HVQTo=)
                          17: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: v5Ut+HnAU8B++keMYhHXiHiE6JJw8p9vB3wAUzitQ/s=)
                          18: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl (hash: iETH6sDp1FjmViMgh00IZFqO/1GA2oJz50rlLOr6Z/g=)
                          19: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: ZMKJ6qvXBCnIGQclOHQhPWyyMM8hgD3nw2GXMro25Y4=)
                          20: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: bS5P/W+hj7so9J/fGjANaNnPonvylnMwWx29PNvc6E4=)
                          21: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: XYH3WtUdslBTF725L3cOP4xs8XuxcDg3daKQgahU/wE=)
                          22: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: hVG5QJJlsbYPr5L1RCfsG/I/X2H5aI8Xq7RBOYv0G3o=)
                          23: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: esq0SPO+hAIrG7YQPAU2RMpBG0FEhngieVqoN2H1Z00=)
                          24: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: svAi0R5XEu9X4Ys1yfCbCgtQxluGGulsPQVUUn8ta/o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
                          rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9a:7c:c3:22:84:d8:ed:49:1b:1b:49:53:15:98:1d:c1:ad:80:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
        Validity
            Not Before: Sep  3 11:36:25 2026 GMT
            Not After : Sep  4 14:44:25 2026 GMT
        Subject: CN=AFBBB3455390C923A0182886B22AB25F30CDCC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:9f:4c:06:db:d8:e0:0e:3e:30:aa:75:50:
                    f0:0a:e5:75:2f:3e:e9:f7:19:01:5e:da:b2:18:18:
                    6a:8d:68:69:f9:eb:45:c6:c8:f8:b9:8d:73:69:1b:
                    24:a0:29:00:b6:0c:d0:51:68:c7:10:dd:3d:30:d0:
                    91:81:04:b9:75:6f:50:ae:af:c6:c3:99:02:16:51:
                    91:7d:42:8e:91:34:15:d6:a4:4f:a6:3f:61:6d:11:
                    0d:9f:29:3b:15:e0:bf:f1:85:d1:35:fa:96:1a:4e:
                    bd:be:0c:7e:7b:52:ae:1d:69:ed:c2:93:5c:ec:86:
                    e2:3f:8b:9d:4d:93:d1:18:40:9c:2f:46:ce:e8:a1:
                    8b:2e:13:23:b0:06:a7:5e:cc:66:63:e1:df:51:b1:
                    74:47:b3:91:b4:db:cf:0b:22:21:7d:26:ec:af:58:
                    9c:77:09:07:08:b3:e0:f4:9f:3e:27:c1:7e:93:9c:
                    a1:d4:d4:73:ff:02:a4:98:ae:0a:0d:59:2e:67:5a:
                    5a:78:51:a6:f4:71:47:fa:83:7e:16:87:43:34:cf:
                    07:e9:b8:04:26:4e:83:c4:3d:1f:39:98:46:cd:06:
                    05:7f:24:74:0c:16:cf:58:dd:af:84:c9:02:92:a8:
                    d9:e8:8a:89:bd:50:0b:24:97:0c:cd:ca:23:54:31:
                    36:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BB:B3:45:53:90:C9:23:A0:18:28:86:B2:2A:B2:5F:30:CD:CC:6D
            X509v3 Authority Key Identifier:
                keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:16:4e:2f:36:af:e4:f9:8e:b6:38:ac:98:67:62:fe:47:3b:
         f7:a0:a5:70:74:86:bc:6f:14:e0:2f:23:2e:be:ba:82:71:48:
         99:4d:47:31:b4:b2:64:82:bb:61:65:ab:82:5b:6c:8f:0b:80:
         56:54:f6:49:8c:4b:86:97:8e:a1:15:c5:cb:c3:16:b4:4b:89:
         c8:fa:cc:61:e2:b2:1f:a4:ba:cb:63:83:f2:8d:98:10:56:63:
         19:4c:61:d1:90:e4:96:9f:b3:d3:e3:ef:86:5b:ee:d8:b3:8b:
         f6:07:5b:7d:14:2a:03:fa:9a:3b:1e:47:c0:bc:ec:4f:90:3f:
         91:24:cf:80:27:dc:6b:14:4f:e3:81:e3:8b:36:0c:60:11:6b:
         16:ec:44:8e:fd:ca:87:bd:0d:09:4b:0c:5e:a9:6f:c5:32:45:
         82:a6:5a:cb:39:5b:f7:cf:08:ef:78:fb:71:80:08:2d:d5:9b:
         aa:2a:1b:23:cc:21:9e:4f:8d:a2:75:41:0f:6e:68:7c:4c:0d:
         b2:66:6e:92:4f:0f:51:ee:30:6f:53:ec:ce:70:13:8d:38:8c:
         bc:92:a7:49:62:d1:2b:4e:f4:c6:de:2b:df:9a:ed:20:b8:69:
         51:1e:02:a5:e0:1a:1f:06:77:38:aa:2a:4a:25:bb:f2:5d:11:
         42:0a:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:38:43 2026 by rpki-client