Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
File:                     FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json)
Hash identifier:          Bmzw4VJgbNgq9Jvec0vTaIkAgsc1hJ01v1RMgAvGUoo=
Subject key identifier:   B9:F9:AA:62:77:B7:A1:C4:04:BD:04:A5:CB:87:6E:44:08:8C:31:9C
Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
Certificate issuer:       /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Certificate serial:       604BFA82DAF21E73796686E86E4744F63B6D3D07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
Manifest number:          A7
Signing time:             Sat 05 Sep 2026 01:12:01 +0000
Manifest this update:     Sat 05 Sep 2026 01:07:01 +0000
Manifest next update:     Sun 06 Sep 2026 01:18:01 +0000
Files and hashes:         1: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=)
                          2: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: iGQFxGRjLWtVetqO8gXsFN1ZvV/0NOjkFBk1KGug6mk=)
                          3: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=)
                          4: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=)
                          5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
                          rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 01:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4b:fa:82:da:f2:1e:73:79:66:86:e8:6e:47:44:f6:3b:6d:3d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
        Validity
            Not Before: Sep  5 01:07:01 2026 GMT
            Not After : Sep  6 01:18:01 2026 GMT
        Subject: CN=B9F9AA6277B7A1C404BD04A5CB876E44088C319C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:69:cc:c0:ab:c8:f6:6b:fc:8d:ec:f3:32:
                    05:f0:f0:3c:c0:3c:7f:d8:b5:5a:79:83:59:9f:f0:
                    64:ef:50:f7:e9:8e:d8:9d:b2:33:54:a9:bb:83:e1:
                    3e:a6:ae:71:a9:76:fa:7f:a9:38:53:ca:bb:d0:5f:
                    ce:c4:65:b8:20:8a:5d:dc:88:22:36:13:3a:39:06:
                    29:70:43:17:73:b2:54:87:1f:d9:2c:0f:52:77:8b:
                    b0:01:37:c4:be:1c:2b:52:01:b5:06:4d:24:7d:27:
                    51:63:54:99:d7:12:3f:52:bd:a0:12:12:3c:ba:03:
                    74:0f:b8:57:f2:c9:4c:ac:e3:c4:c6:47:69:16:f0:
                    60:c2:ee:39:1f:d8:a1:8e:cd:89:33:e1:4e:34:1c:
                    70:66:36:f8:03:42:7b:82:e8:f9:8a:65:c5:79:2a:
                    f4:f8:6d:a8:d8:3c:19:2f:21:9a:ee:bf:00:8d:91:
                    94:b6:51:f5:e7:a6:b1:ca:d5:a8:b4:46:c2:2c:8a:
                    c6:ce:e7:34:1b:ac:d7:b9:3c:6e:a9:4f:51:7c:22:
                    a5:84:76:b2:72:9b:0b:79:11:88:91:ad:ef:58:9c:
                    03:c7:53:dd:a0:d2:8c:6b:14:5f:28:53:80:ee:ba:
                    7a:47:50:c8:fd:ab:eb:dc:ff:9c:8e:76:45:0b:68:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:AA:62:77:B7:A1:C4:04:BD:04:A5:CB:87:6E:44:08:8C:31:9C
            X509v3 Authority Key Identifier:
                keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:3e:a3:2a:cd:c4:81:16:dd:64:da:bc:30:ae:f8:ae:62:
         20:c1:37:4f:bd:a6:12:e9:06:36:b8:78:39:26:5c:72:2b:17:
         88:f2:10:f0:d6:15:6f:8e:8b:72:e4:d1:74:1c:e3:b9:e1:7d:
         ae:6e:65:d2:16:6b:00:ea:78:72:81:bc:df:f3:bc:1e:f0:eb:
         08:c4:af:87:d9:af:21:b9:ca:db:9e:9f:10:ca:2d:53:cd:9d:
         ee:83:8d:ab:39:fe:cb:35:03:40:1b:65:48:ac:de:a6:83:2f:
         60:35:57:50:80:c0:58:c4:5d:bf:ad:98:3e:ec:92:4a:eb:ce:
         60:e0:a5:17:c1:87:d1:c0:29:b2:6d:67:eb:84:aa:de:f2:e2:
         98:4b:56:8e:20:a1:7d:27:71:36:3c:0f:c9:c9:84:42:a2:d3:
         f7:e0:c9:ce:d1:ed:90:41:ba:2a:5a:5e:06:a7:40:d5:f0:56:
         4d:f4:6d:3b:b2:a9:5e:02:5b:62:87:74:6d:7c:cf:b9:c4:74:
         9a:6a:0b:a8:41:ea:ca:25:51:d6:f1:cf:7e:58:b9:95:28:96:
         ea:d9:f9:65:24:5e:7c:8e:a6:97:6f:e7:16:b3:92:dc:d2:ec:
         53:8c:6e:24:6b:e6:d6:ff:cf:0b:35:49:b6:ca:b1:4d:05:49:
         ec:1f:29:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:34:36 2026 by rpki-client