Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
File:                     90B9450AA39B9CD9586085EFA9EF7887EE613759.mft (raw, json)
Hash identifier:          NKMQcGwOAQJ+zYW3cBCmb+FgUaWw+fmgZmk+HExlIUg=
Subject key identifier:   99:E4:AF:58:80:28:F4:F8:B2:FC:43:06:A5:6C:72:60:B5:73:BD:9F
Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59
Certificate issuer:       /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
Certificate serial:       147727CA8A3F18A9CFD0E393D956E7748AAF7E95
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
Manifest number:          A6
Signing time:             Thu 03 Sep 2026 04:02:43 +0000
Manifest this update:     Thu 03 Sep 2026 03:57:43 +0000
Manifest next update:     Fri 04 Sep 2026 07:28:43 +0000
Files and hashes:         1: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: i2oBSFPKpVqeh9es/WJHy0i/TdHRHJL5ycGj+adtwXc=)
                          2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: J0+iHCZ4UXpTu9FbQSO8iPWMu0E+Lc3DRVGjSSCxGxw=)
                          3: 90B9450AA39B9CD9586085EFA9EF7887EE613759.crl (hash: Cb6PDEnpABqu0hJsuz+6ZodFOYIP25Xx5vxdWB7eLc4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl
                          rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 07:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:77:27:ca:8a:3f:18:a9:cf:d0:e3:93:d9:56:e7:74:8a:af:7e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
        Validity
            Not Before: Sep  3 03:57:43 2026 GMT
            Not After : Sep  4 07:28:43 2026 GMT
        Subject: CN=99E4AF588028F4F8B2FC4306A56C7260B573BD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:f7:e4:3c:c8:58:c3:d5:5d:d1:ac:18:da:
                    ec:dc:f0:a2:0b:3f:62:43:83:ca:d6:de:0e:fc:88:
                    ba:f9:00:93:2e:e5:bd:51:c9:06:89:9c:da:78:c3:
                    46:11:9b:6e:e3:98:a3:79:e9:6e:28:48:98:31:c2:
                    0d:cf:14:90:46:bf:ed:6b:50:18:5f:83:d4:04:5e:
                    fa:02:46:ad:e8:48:81:12:99:2e:8a:38:8e:a8:72:
                    27:21:c8:85:9e:61:7e:66:81:b9:2f:d2:b4:e0:0b:
                    a1:6b:e1:a7:c8:60:88:8a:02:fa:e0:8c:8a:b7:30:
                    22:37:4e:08:7f:f2:b8:52:39:85:01:10:63:a8:0f:
                    a9:1a:04:a4:95:7f:cb:91:00:b2:f0:7d:e9:81:fd:
                    e9:b7:a8:14:d2:e0:97:48:3b:c9:27:fa:13:c9:9b:
                    43:50:ed:e6:73:d3:5c:e7:e9:3d:04:53:d8:fd:74:
                    a7:cb:77:54:cc:d2:87:1c:ea:4b:ea:ca:a6:03:ef:
                    eb:e0:26:2e:d2:4a:a2:0e:17:17:11:67:ba:a5:67:
                    91:01:8a:2a:0c:fa:42:10:bc:e8:b6:5c:49:d6:06:
                    b8:26:51:21:57:f1:62:b7:27:a1:74:d8:b9:49:9e:
                    08:4a:0e:19:e4:12:37:f8:a3:f6:a5:8a:af:03:98:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E4:AF:58:80:28:F4:F8:B2:FC:43:06:A5:6C:72:60:B5:73:BD:9F
            X509v3 Authority Key Identifier:
                keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:3c:cb:5d:c0:30:62:a0:0d:b3:d1:0e:e8:25:fc:67:98:
         bf:98:5d:01:76:33:98:9c:8e:20:38:9a:08:6b:47:b7:96:37:
         89:09:dd:18:71:f6:ee:24:89:25:70:a3:fd:97:a7:eb:09:52:
         b2:0c:7e:b4:70:36:e7:8a:f5:f7:c6:cc:f0:ae:6b:f0:48:d1:
         22:c6:f3:6d:12:54:2b:26:e5:8f:4a:f7:ea:78:1d:97:c4:9f:
         03:3c:3b:50:32:f0:20:8e:b5:85:3b:77:db:19:43:ab:e2:37:
         0c:81:c7:fe:dc:61:8a:7d:12:9d:ad:30:59:db:8a:b8:08:9b:
         c1:c1:73:30:23:61:51:63:4d:a9:fb:7c:26:b5:c7:39:a8:db:
         21:63:45:85:5c:3d:77:a7:d1:a7:6c:42:09:b2:ca:85:ec:45:
         22:dc:a8:4c:3e:91:aa:bf:16:6e:b7:3e:b0:d7:3b:9b:1e:17:
         11:ba:ae:7b:cb:80:2b:5a:72:cb:35:b5:b3:3d:4f:43:77:53:
         21:c0:86:c2:8b:8e:78:1d:14:2a:0d:93:7c:5d:79:82:de:98:
         48:ef:00:0a:85:0a:dd:57:e5:49:4b:72:e6:68:c7:12:6e:29:
         29:0b:ac:0c:f8:87:7c:d5:87:14:b9:64:3f:8b:69:48:a0:04:
         c8:94:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:21:26 2026 by rpki-client