Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
File:                     E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft (raw, json)
Hash identifier:          /bEFNJ0Kdh78l/pBXgv+XqfUmQRjz8E0NJxBwuUzeqs=
Subject key identifier:   48:27:12:8A:F7:B8:8D:89:AF:78:36:15:79:B1:AD:F6:A2:7B:6F:C1
Authority key identifier: E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12
Certificate issuer:       /CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
Certificate serial:       77F23B84A31D6FED03F7AF0567248D95A4CF002C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
Manifest number:          A5
Signing time:             Thu 03 Sep 2026 11:56:37 +0000
Manifest this update:     Thu 03 Sep 2026 11:51:37 +0000
Manifest next update:     Fri 04 Sep 2026 15:16:37 +0000
Files and hashes:         1: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: WdpYi9xOJp2Ik1RGOa6PotA1dBwWjL6rALxGb9WjneQ=)
                          2: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: n2lJ9bzcnUw6O+w0adArBpP91Kujz+/33ven90vG4LQ=)
                          3: E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl (hash: 07gQr8E9gK45XCoUHnVvE6Wp+Ch4gFlnXbjJgvZpOmk=)
                          4: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: oSx0cFa1nsipfiH0pkhplDWMeAxUpXV7UZUBLF8bNIo=)
                          5: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: PQRif44rE/vHl6KI352lV/5EM+qmOZyEEJRR83eHyBI=)
                          6: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: 8H0ycrYvaT3pEUwMuUYMPkeb6+nIJfK2o58CvS7laFE=)
                          7: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: D9MoAcvsSp+WiO9dOaWrzis15LUcy+CINQir9MZwMpg=)
                          8: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gmD9ajpsyadNWLNIYrlzTIV+UYw18CE56nZqbLaELis=)
                          9: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: rS0I7oveJtn+l4aAAzlWodrD1fslAxWP3f3cXLvaPIY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl
                          rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f2:3b:84:a3:1d:6f:ed:03:f7:af:05:67:24:8d:95:a4:cf:00:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E37B9DE76B8369C86CBDD85F17B4B08DA3903912
        Validity
            Not Before: Sep  3 11:51:37 2026 GMT
            Not After : Sep  4 15:16:37 2026 GMT
        Subject: CN=4827128AF7B88D89AF78361579B1ADF6A27B6FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:14:60:81:c1:92:6e:c8:6e:62:e8:6e:80:
                    a3:c0:5a:93:18:a5:cb:63:28:97:e6:8b:99:98:eb:
                    5b:d7:6b:70:4d:c7:5b:6c:c0:2c:d2:f5:ff:75:a0:
                    85:9b:11:bd:07:fd:75:af:ac:d3:5b:e5:2d:04:bc:
                    86:a0:f4:77:64:ee:2f:f8:bd:03:40:b2:16:6c:48:
                    05:87:b8:8a:0c:73:2d:d3:bf:0b:da:96:c5:b5:1c:
                    06:01:1f:41:22:2a:ab:25:83:3d:e5:02:ab:3a:1f:
                    6b:b3:e6:f7:08:3e:7f:30:f1:91:ef:04:5c:34:ce:
                    04:fa:d7:cc:d7:44:e4:4e:c8:12:0c:44:c2:c4:68:
                    b4:60:5b:cb:14:0b:d4:a6:03:fa:84:7f:3d:93:e0:
                    dd:a3:f9:8a:5e:44:7d:ce:5a:99:d8:ce:c7:8a:b8:
                    bf:8f:d8:c1:5e:d5:90:d7:97:62:26:aa:cf:b6:ab:
                    79:f4:0d:3d:86:cb:dd:3a:a8:fd:89:75:cb:bc:da:
                    3f:82:5f:89:19:22:ff:23:70:c6:e9:15:fb:d2:9a:
                    4d:ec:ef:52:52:87:e1:91:45:1b:32:52:59:6e:16:
                    fd:d9:93:0a:df:76:01:2e:2d:38:be:9f:0f:e7:45:
                    65:8f:03:f6:7b:e9:ed:b7:7c:e0:3a:73:d0:87:b5:
                    cc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:27:12:8A:F7:B8:8D:89:AF:78:36:15:79:B1:AD:F6:A2:7B:6F:C1
            X509v3 Authority Key Identifier:
                keyid:E3:7B:9D:E7:6B:83:69:C8:6C:BD:D8:5F:17:B4:B0:8D:A3:90:39:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/E37B9DE76B8369C86CBDD85F17B4B08DA3903912.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:86:3f:95:96:a6:f5:eb:fa:03:ec:aa:20:18:46:d3:23:
         91:02:f0:e9:6c:49:e1:22:24:fd:a2:b2:99:38:be:cc:3e:fe:
         b3:09:3b:f0:35:f3:f6:d6:d4:b9:37:91:85:26:b9:50:11:87:
         2c:62:a6:62:5b:c4:23:b5:04:ad:ca:47:7b:d2:7d:3b:99:72:
         27:6a:fd:58:be:92:26:b9:bd:ff:d9:58:df:29:f2:28:b7:11:
         ae:7f:7e:af:e1:25:7b:26:ef:09:44:4f:e2:26:9e:89:f1:b0:
         92:49:07:80:66:9b:55:23:87:26:0e:86:2b:ed:08:67:ce:61:
         c7:d6:3a:1d:e0:fe:fc:3d:a4:23:e0:dd:20:89:5e:85:67:52:
         52:b5:e3:1c:19:86:4d:16:29:e9:99:5c:9b:eb:48:cd:33:4a:
         88:83:e4:c7:68:5e:44:e4:56:d9:9c:32:36:5a:66:81:b7:d8:
         f9:9d:a4:b2:4a:e2:ef:50:cf:76:98:e7:35:48:18:14:6e:d1:
         b8:19:ce:71:7d:65:eb:31:6c:14:48:7e:c9:1a:67:99:6c:2e:
         fd:18:18:35:39:7a:e4:a3:05:86:64:1b:ba:23:89:cd:b5:df:
         6b:ba:56:87:e6:53:24:0f:77:40:94:fe:e8:7b:f9:bb:7f:88:
         59:85:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:58:35 2026 by rpki-client