Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
File:                     860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft (raw, json)
Hash identifier:          KWFsHOCQCWnzyL9M6SmnETNmSvqR1bgWDN+jSoMPq5Q=
Subject key identifier:   00:4D:30:04:DC:DF:A4:FE:D5:CD:02:65:E5:42:0C:2C:3C:F3:70:83
Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D
Certificate issuer:       /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
Certificate serial:       4A99DB19BF03D3B8C419B7CAE01954C6AC83AB9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
Manifest number:          A7
Signing time:             Thu 03 Sep 2026 05:03:58 +0000
Manifest this update:     Thu 03 Sep 2026 04:58:58 +0000
Manifest next update:     Fri 04 Sep 2026 08:25:58 +0000
Files and hashes:         1: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl (hash: u0AClh7w/15ixn+4CjBraW6WfWwrnOep5u3rvEg3hfE=)
                          2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: 0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl
                          rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 21:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:99:db:19:bf:03:d3:b8:c4:19:b7:ca:e0:19:54:c6:ac:83:ab:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
        Validity
            Not Before: Sep  3 04:58:58 2026 GMT
            Not After : Sep  4 08:25:58 2026 GMT
        Subject: CN=004D3004DCDFA4FED5CD0265E5420C2C3CF37083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:cb:a6:ef:8d:92:d9:65:18:e2:48:21:2c:
                    7c:ae:c3:f6:24:2b:81:9f:3e:19:3c:b8:65:39:03:
                    99:73:d0:2f:ba:5a:40:5f:7e:e0:c4:30:d0:84:c0:
                    35:d1:7f:59:d6:3a:c1:28:c2:0a:e9:00:90:38:6d:
                    ec:b6:fb:94:f8:a8:2d:60:01:f1:63:e8:d6:87:42:
                    ba:8e:94:47:b0:5e:b7:98:24:60:23:9a:07:52:1e:
                    20:cb:21:e0:8f:45:1b:06:9c:0b:ff:1e:ad:8e:dd:
                    31:ee:0a:07:10:08:30:b1:31:53:3d:3b:a4:c1:ed:
                    a7:62:57:d6:fc:3a:0e:92:00:95:7e:1f:22:99:af:
                    dc:4c:09:03:63:68:13:6f:4a:1c:18:de:52:2d:3a:
                    a2:da:2e:b7:95:b5:db:9e:82:67:aa:e7:7d:3c:7a:
                    84:8a:25:22:97:c1:00:e5:ae:69:25:d6:43:58:c9:
                    b6:bb:26:f7:79:e0:e4:de:4f:99:af:b1:cd:a5:30:
                    f1:32:e9:c4:45:18:88:8a:a2:ed:43:90:8f:30:c9:
                    b2:93:2e:74:5f:dc:87:71:0a:ca:12:e1:88:af:4c:
                    8f:7f:40:cf:a9:d4:c2:3a:f8:69:d9:f8:e8:cc:38:
                    1f:4f:22:68:e0:40:8f:1e:aa:c8:fc:75:53:89:0f:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4D:30:04:DC:DF:A4:FE:D5:CD:02:65:E5:42:0C:2C:3C:F3:70:83
            X509v3 Authority Key Identifier:
                keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:53:d0:42:82:9b:99:03:81:73:f5:ee:3a:bd:98:5d:b0:
         0e:81:7d:fd:31:a6:3c:ef:39:01:a6:76:62:d0:f6:3b:91:61:
         e4:b9:d3:8e:65:a1:d5:e3:70:28:cc:c7:ca:a8:9d:5e:5f:a0:
         75:a5:43:e6:a6:a2:ff:27:05:21:f3:af:05:05:da:59:e6:10:
         9d:e7:74:02:c4:dc:34:15:eb:63:bc:43:96:8d:bd:b9:d5:46:
         d7:e6:39:5f:3c:84:03:4a:c7:1d:de:31:07:28:c2:75:12:be:
         71:65:88:9e:52:38:ab:2c:3f:e9:a7:93:ce:80:db:58:a1:6b:
         8c:d9:92:0c:ed:b1:aa:1b:60:b7:5b:68:ab:e5:9f:69:42:fb:
         c6:c6:15:c5:9e:55:c7:4b:e7:ca:81:44:3e:9c:d2:75:6c:ec:
         2c:1e:b9:a4:64:1c:53:f7:d1:86:06:b3:da:8f:c2:62:a9:7d:
         8b:66:1d:e8:e8:b5:84:68:9a:76:4c:8f:cb:ca:7e:8f:f3:a4:
         7b:e7:8a:7d:bd:d9:45:f2:d2:51:94:3b:e3:27:77:30:36:dc:
         e6:7c:ed:26:62:d3:ba:0b:70:3c:63:7f:ea:03:46:31:95:08:
         dc:93:07:25:1b:b1:88:69:c3:ed:53:12:3e:17:ae:04:77:aa:
         9b:2d:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:42:55 2026 by rpki-client