Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft
File:                     479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft (raw, json)
Hash identifier:          i18vLVTCqemVTRjPOLYoC2/KVfkzXnFdkbwdj3O2D34=
Subject key identifier:   77:48:3A:97:D5:C8:41:2C:10:51:B0:D3:8C:34:F4:12:D2:CB:90:1A
Authority key identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6
Certificate issuer:       /CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6
Certificate serial:       60CF6DB8C2A4512C435F2746931F5816142C3901
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft
Manifest number:          A6
Signing time:             Wed 02 Sep 2026 19:21:32 +0000
Manifest this update:     Wed 02 Sep 2026 19:16:32 +0000
Manifest next update:     Thu 03 Sep 2026 23:17:32 +0000
Files and hashes:         1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: Cw+u02HjQBz4UCjHcubQmRW6z/LpqGrri/10Si/nkow=)
                          2: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl (hash: jy9jCuhjKCjCRy2aft7qSt3+9AMtz37zD7sMFeYbAws=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl
                          rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 23:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cf:6d:b8:c2:a4:51:2c:43:5f:27:46:93:1f:58:16:14:2c:39:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6
        Validity
            Not Before: Sep  2 19:16:32 2026 GMT
            Not After : Sep  3 23:17:32 2026 GMT
        Subject: CN=77483A97D5C8412C1051B0D38C34F412D2CB901A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:1b:cc:10:3e:db:1c:d3:a9:de:b8:e0:de:
                    f7:54:f7:37:dc:46:44:29:0b:5b:92:e9:24:8e:4e:
                    59:ca:c8:47:ca:37:fb:81:b8:fa:42:e2:4b:42:74:
                    fe:62:1c:b7:c5:82:07:be:67:38:f8:19:6e:ee:d1:
                    78:0f:a3:e1:6b:23:85:e4:40:25:72:ad:8f:ce:05:
                    4a:2e:f7:4f:7e:fa:71:19:20:d0:7f:db:fe:23:51:
                    d2:84:49:a1:fc:a9:67:c3:a4:e4:ae:26:ab:7b:4b:
                    ad:2b:c4:5f:81:17:d3:16:34:e7:57:b8:7a:40:af:
                    1b:be:39:b6:94:09:5f:a2:3a:96:9d:7b:6c:db:d0:
                    73:de:97:38:60:65:75:23:62:45:9b:fa:4c:aa:b1:
                    f0:fd:3d:b4:5f:47:36:41:1f:9a:63:41:6a:56:2b:
                    fd:e0:a2:f3:4b:b2:f7:57:04:2b:1a:81:36:24:52:
                    21:5b:fa:c6:9f:89:35:48:b6:fc:3c:84:b5:53:77:
                    ee:c1:4d:b3:c7:e4:db:e6:46:6e:1d:de:f2:53:b3:
                    9f:54:6b:a7:4c:bc:9d:c1:5d:d0:45:98:8c:fb:c5:
                    5a:0f:ce:b4:0d:9f:04:0e:a4:ca:cd:69:fa:64:0b:
                    0e:88:ab:3d:a9:b3:ae:e8:8b:e4:7d:87:ee:f0:f9:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:48:3A:97:D5:C8:41:2C:10:51:B0:D3:8C:34:F4:12:D2:CB:90:1A
            X509v3 Authority Key Identifier:
                keyid:47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b0:8f:22:ac:35:15:83:43:e8:d1:5c:d8:45:b8:4d:49:0e:
         f7:66:92:2a:d2:ad:b5:9c:5c:5d:f3:86:c5:b8:8e:12:5e:9c:
         57:1e:9e:12:ba:96:c1:bd:44:d2:16:32:69:7a:1d:7f:20:0d:
         45:50:bd:76:08:e4:13:4f:03:08:cd:cb:0d:18:d2:84:24:24:
         6f:17:39:ba:d8:1b:21:f8:e7:9b:a3:4b:28:60:3b:25:95:44:
         de:22:91:35:cc:db:33:58:d9:41:8e:9c:aa:c9:b8:1f:3f:aa:
         d8:f8:b5:a3:c6:5d:5a:0a:6b:47:5f:60:a4:01:5c:72:c4:df:
         93:89:8d:52:2a:37:14:52:9a:dd:1d:a8:a3:50:53:a2:29:05:
         4f:3d:96:89:0b:fb:e0:54:c8:6c:2b:ff:a7:c9:c1:dc:1e:30:
         01:cb:30:ba:52:17:d2:83:e3:67:16:c8:5e:6b:94:20:3f:9a:
         7c:18:9c:2f:da:f2:d4:c2:01:e7:87:8c:2c:63:89:ed:b4:54:
         fa:18:c5:71:62:8c:3d:e1:d5:33:ed:68:a1:9d:d5:77:5a:36:
         23:bc:36:9e:f0:b6:3b:04:dc:a9:6b:b9:c9:e4:f3:96:c4:66:
         da:e2:5f:58:89:77:ad:31:75:dc:d3:ee:ce:da:53:0c:c9:16:
         37:f2:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:47:22 2026 by rpki-client