Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft
File:                     914D306354D2880E2D8000A84096A7D0FD93DB6F.mft (raw, json)
Hash identifier:          tHvxMk9V5bs+DZIpYIMShH93j3r2Y5hCFmD0crXZqHI=
Subject key identifier:   A7:45:A8:C9:D1:0B:D2:DD:62:E8:0B:D6:AE:62:79:BA:C0:6D:0A:CA
Authority key identifier: 91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F
Certificate issuer:       /CN=914D306354D2880E2D8000A84096A7D0FD93DB6F
Certificate serial:       69DC073BE3042DB93EDF1A785264AB299AAD4E6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft
Manifest number:          A4
Signing time:             Thu 03 Sep 2026 03:47:28 +0000
Manifest this update:     Thu 03 Sep 2026 03:42:28 +0000
Manifest next update:     Fri 04 Sep 2026 05:03:28 +0000
Files and hashes:         1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: kuGnEQzcoDJhm5rFlzTvBCAiLMXXIFxC7mIG7REa29w=)
                          2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: uK0BRaW/xJFX4xoOs5c+Wr7pOkzcDPXliVBiSDQWuQY=)
                          3: 914D306354D2880E2D8000A84096A7D0FD93DB6F.crl (hash: 7L9RPBkJcmVZ9U0EHTMHP+w26ybA1mfUbct27I2I8H0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl
                          rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 05:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dc:07:3b:e3:04:2d:b9:3e:df:1a:78:52:64:ab:29:9a:ad:4e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914D306354D2880E2D8000A84096A7D0FD93DB6F
        Validity
            Not Before: Sep  3 03:42:28 2026 GMT
            Not After : Sep  4 05:03:28 2026 GMT
        Subject: CN=A745A8C9D10BD2DD62E80BD6AE6279BAC06D0ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:6e:50:3a:e2:80:6b:13:af:fd:90:f0:fd:
                    1e:ca:f2:ce:e5:94:53:98:ad:5b:9f:51:a1:10:54:
                    d1:ad:b3:e2:21:5a:9a:c5:ab:6f:47:7a:60:8b:f8:
                    06:b8:8a:5b:87:72:2b:e0:d0:eb:bd:27:39:fe:89:
                    bf:61:d6:32:8e:bf:67:fb:44:8d:3a:f6:bf:7e:58:
                    e0:a7:13:57:a1:24:51:af:66:c3:cc:62:91:0f:b3:
                    ae:f3:ac:49:c3:3f:94:1f:7e:88:33:04:50:cf:13:
                    0e:54:02:32:a9:3e:36:8e:09:92:54:0a:b3:1f:3a:
                    dc:e4:11:6d:20:90:94:e1:9c:b9:a6:ac:91:0d:15:
                    cc:1d:4f:48:70:cf:09:aa:4c:f9:40:4c:20:43:21:
                    40:5f:5e:b9:0e:ca:d1:71:df:56:f5:4b:49:0c:3e:
                    cb:b5:e0:53:f8:13:02:2d:ca:e4:1c:00:ab:64:70:
                    e1:f4:fe:6a:1e:89:ae:cf:24:67:11:90:2a:58:58:
                    3d:22:f7:0c:2a:19:dd:8e:89:32:43:52:7f:f7:b7:
                    49:4f:4d:10:86:34:4f:df:df:c3:2a:70:68:6a:3f:
                    e5:bf:b5:88:92:30:69:4e:ee:a7:45:a4:df:19:f6:
                    e3:d2:0c:7d:f5:aa:c0:fc:f1:ad:78:5e:9a:03:05:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:45:A8:C9:D1:0B:D2:DD:62:E8:0B:D6:AE:62:79:BA:C0:6D:0A:CA
            X509v3 Authority Key Identifier:
                keyid:91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7f:59:92:c4:8c:35:e7:a1:95:18:38:96:15:f5:79:51:9c:
         9b:e8:05:e6:8d:87:13:55:bb:bd:a1:ce:85:90:a8:1d:8d:dc:
         2a:2c:fe:e7:ab:3f:c1:6a:7c:24:31:57:e0:29:5d:46:fc:43:
         2b:bb:3b:4b:62:f6:c2:ba:a5:4a:da:1f:7a:42:be:66:80:ae:
         78:4d:25:f7:9d:5d:56:d8:26:37:32:59:03:99:80:3d:fc:09:
         5c:f0:bf:4c:66:8a:2f:1a:31:1c:ab:9b:01:31:e8:b1:09:a4:
         b5:73:78:84:68:f6:4e:a9:00:d2:0b:98:eb:48:51:c5:d8:54:
         8c:e1:43:0d:e8:fe:37:ad:44:92:7e:f7:1f:67:74:c2:62:32:
         d6:ec:89:92:00:d7:03:83:02:01:63:3e:12:4f:6e:b0:79:76:
         21:56:9d:b5:c8:0e:21:07:3c:fe:75:e4:8e:36:cd:00:68:29:
         36:30:e9:b9:fd:da:c2:a2:df:f9:8c:fb:e3:e0:4c:18:78:05:
         84:15:51:70:7a:2f:8d:4e:19:30:d6:10:ae:8f:40:d1:22:d9:
         68:c2:ee:d4:09:5f:c8:9b:3e:6b:21:e7:43:94:68:0d:df:e2:
         5d:30:e5:d4:6d:56:f3:9b:14:fa:a9:e4:de:78:fa:48:93:7d:
         47:42:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:47:04 2026 by rpki-client