Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
File:                     B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json)
Hash identifier:          hVLp283BG7wiAoi11szpIio5TynPxNocg+/CPZb678s=
Subject key identifier:   3A:95:64:5C:49:D9:E3:62:4D:8E:D1:A0:30:C6:46:CB:82:E2:05:80
Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
Certificate issuer:       /CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Certificate serial:       46C37638A970EEEFD182ED82F230DE12F98C12F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
Manifest number:          A4
Signing time:             Wed 02 Sep 2026 16:48:22 +0000
Manifest this update:     Wed 02 Sep 2026 16:43:22 +0000
Manifest next update:     Thu 03 Sep 2026 17:38:22 +0000
Files and hashes:         1: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: 8tXYpEEqH+pBIgNvIbcPQNEmokLbayLPE/zzWbN44Nw=)
                          2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
                          rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 17:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c3:76:38:a9:70:ee:ef:d1:82:ed:82:f2:30:de:12:f9:8c:12:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3
        Validity
            Not Before: Sep  2 16:43:22 2026 GMT
            Not After : Sep  3 17:38:22 2026 GMT
        Subject: CN=3A95645C49D9E3624D8ED1A030C646CB82E20580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:d6:7b:0d:41:d9:5d:59:49:57:02:0c:3e:
                    39:3f:c2:2d:4c:c2:8e:4c:41:7b:a6:78:d4:f0:ad:
                    19:d0:fa:d2:d5:da:df:e1:02:60:a8:31:64:26:55:
                    03:9e:10:1e:84:fd:c2:f1:70:c8:86:be:45:9d:0b:
                    9d:1d:8c:01:72:8a:eb:32:20:23:ca:60:2d:b5:1f:
                    eb:9b:97:e8:39:ec:2f:17:eb:d9:b0:9d:73:1f:8a:
                    e8:7d:57:bc:71:c6:74:6d:ec:17:21:0f:84:03:bc:
                    59:3e:8c:af:14:37:bd:1a:8c:4e:cf:0c:72:75:d4:
                    4e:4f:6d:e4:f9:b9:ce:ee:c7:ca:8f:dd:4b:f6:5d:
                    dc:b1:49:0b:90:05:b8:86:85:84:85:c9:f7:11:e9:
                    c1:15:55:cb:06:91:0f:42:49:e1:b6:82:6b:6b:f1:
                    9a:3a:6b:70:de:a6:96:e2:ce:4f:0b:ff:35:db:d7:
                    80:a5:13:ae:31:66:4d:47:5b:89:82:cb:cf:3e:81:
                    28:a2:dc:8e:8a:94:94:0c:8e:75:43:a0:50:29:b9:
                    8b:98:58:43:34:72:31:00:02:b5:a8:31:37:32:e7:
                    39:b5:cc:d3:72:e2:ab:e9:d5:2b:4a:74:14:62:fb:
                    b2:8a:57:cf:3d:59:d5:ca:d7:e5:2e:ad:67:a7:fa:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:95:64:5C:49:D9:E3:62:4D:8E:D1:A0:30:C6:46:CB:82:E2:05:80
            X509v3 Authority Key Identifier:
                keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:43:64:8c:64:1d:bf:58:b8:b0:5f:fe:d2:63:ad:5c:1a:
         85:b5:9d:f1:c4:a0:cd:e8:4a:4f:c7:85:50:4a:77:14:0c:e9:
         07:a7:19:2c:74:03:c2:da:b0:a4:ba:ed:a8:e3:bc:37:f4:f2:
         b2:be:56:57:64:d7:06:99:e9:27:2f:01:ce:a5:f7:f6:b3:18:
         13:a0:81:2d:f5:46:b8:14:51:70:1f:03:1f:1c:57:f5:6e:f3:
         61:2b:1d:cd:c4:9e:a0:63:fb:64:c1:84:4f:cf:1a:07:98:f4:
         8c:ab:50:ec:f6:f1:fc:47:56:c3:77:a4:4b:37:99:96:7c:db:
         78:9a:61:32:90:0c:22:52:ff:7a:64:d9:3b:47:75:9a:84:71:
         5b:ea:b4:2d:97:a7:4e:5d:33:30:b1:7c:a2:92:80:9e:9d:94:
         04:bd:44:da:22:72:f6:3b:55:d9:1f:b1:2b:13:67:b9:61:f1:
         61:af:eb:d8:fa:30:b1:f7:ac:d8:24:24:bb:d3:fb:c5:f5:18:
         42:20:bf:18:d6:fd:77:14:6f:2d:9e:73:20:68:c6:c4:f9:04:
         d5:df:82:b3:7f:8c:51:8c:f3:a4:81:01:7f:a5:cb:7d:c4:98:
         97:1f:05:34:f1:a9:60:76:6a:b8:62:ef:b4:be:37:cd:de:15:
         f4:b4:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:32:30 2026 by rpki-client