Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft
File:                     ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft (raw, json)
Hash identifier:          TWJ2LOC2x/AYaRGwGmwSFEqrFJY6lu+fUJMvIDg3++4=
Subject key identifier:   EE:BB:E4:39:5B:A6:1D:68:67:DC:B1:64:6C:A3:F6:DE:2A:83:F7:2B
Authority key identifier: AC:AD:70:32:16:F2:0D:D2:C1:7C:8C:4B:49:6C:15:FB:8A:97:E0:C4
Certificate issuer:       /CN=ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4
Certificate serial:       25FD745CF952EC5D6852B2D8B6AB93D5F96824B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft
Manifest number:          A6
Signing time:             Thu 03 Sep 2026 16:01:36 +0000
Manifest this update:     Thu 03 Sep 2026 15:56:36 +0000
Manifest next update:     Fri 04 Sep 2026 17:29:36 +0000
Files and hashes:         1: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: 1k96+Wotm4Ir6kCd4Ellmv2UfwUxlr7lNnq7NxmV9aE=)
                          2: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: dwLR/sZJjCsYmWuW/mu1Dsf/vpmK+IkG4xbR1BkuvJo=)
                          3: ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.crl (hash: g3MfoqPxQokE5E2pyvVdZ+hgA+2lfN/nWDkHMfuGeoE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.crl
                          rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fd:74:5c:f9:52:ec:5d:68:52:b2:d8:b6:ab:93:d5:f9:68:24:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4
        Validity
            Not Before: Sep  3 15:56:36 2026 GMT
            Not After : Sep  4 17:29:36 2026 GMT
        Subject: CN=EEBBE4395BA61D6867DCB1646CA3F6DE2A83F72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:3b:ea:e0:ff:52:5c:df:9a:7a:be:25:fc:
                    17:4d:cf:be:3c:42:b5:b1:0b:d4:06:d4:f6:75:07:
                    94:bb:1d:c3:a8:c1:86:86:5a:12:cc:ca:19:62:19:
                    de:65:95:66:98:5a:65:90:3a:fe:0b:37:96:56:11:
                    fb:b2:86:0f:31:2a:d6:b7:11:ee:25:ca:77:90:56:
                    d3:46:77:d5:66:53:ae:23:26:2d:ec:cc:96:75:68:
                    cf:5f:75:a1:ec:65:ea:ee:29:d4:dc:de:11:68:63:
                    b4:c8:54:96:86:b0:b2:bf:8d:95:16:a7:41:85:1a:
                    07:52:c1:71:7f:c2:ae:f2:be:56:48:74:30:a4:2d:
                    58:b5:a1:68:db:eb:50:f9:12:fe:18:84:05:4c:58:
                    e7:a4:58:0b:ed:3f:44:dc:32:e6:65:7b:28:f9:3e:
                    85:a5:58:6b:fc:08:09:b0:7e:74:19:0c:da:6a:f9:
                    69:b8:da:b1:ca:5f:f4:8d:e7:9f:43:27:1e:bc:1d:
                    c7:cc:94:d1:f9:2f:c3:9f:9c:a0:7b:76:57:ef:4b:
                    7d:c0:d0:5a:a6:bd:35:9e:70:f9:0e:3f:d6:c9:8d:
                    4e:5b:28:30:f1:da:01:7c:e3:97:7e:6a:4d:28:d2:
                    ad:70:0d:bb:d7:2f:f9:8b:70:f9:76:52:00:8f:d3:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BB:E4:39:5B:A6:1D:68:67:DC:B1:64:6C:A3:F6:DE:2A:83:F7:2B
            X509v3 Authority Key Identifier:
                keyid:AC:AD:70:32:16:F2:0D:D2:C1:7C:8C:4B:49:6C:15:FB:8A:97:E0:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c6:3f:36:ee:0f:d7:bf:e9:f4:58:84:4c:99:99:6d:b4:71:
         fe:9e:4d:8f:dc:6f:06:2b:2b:05:6a:6a:84:23:1d:ff:e1:9a:
         4a:1b:8a:4b:8a:e2:20:b3:73:ad:a6:8f:dd:ac:89:d7:a9:0a:
         2e:7b:64:07:d4:85:a4:90:eb:9e:5f:54:96:57:61:19:f8:3e:
         ba:26:9e:fa:a9:9f:fc:9c:ef:d0:6c:7c:b5:88:b9:00:5a:dd:
         4a:6f:79:b5:a6:c6:7c:66:e5:69:50:cc:70:e0:1c:e9:11:9e:
         fe:0a:fb:7e:3f:2f:94:54:94:17:1d:23:63:4c:eb:fb:94:0e:
         a2:88:b6:48:b9:d7:b3:4a:8c:47:57:37:fa:ef:d3:89:7f:6c:
         24:82:ff:93:94:2f:0b:f6:8b:46:ca:fa:e6:61:fe:a7:f4:42:
         46:05:b8:69:2e:87:48:e9:19:27:65:9d:5f:61:bd:7e:69:72:
         7a:26:a1:d2:7f:b1:84:af:9a:d8:79:93:90:ba:dd:f0:e1:fc:
         15:ef:ae:74:81:39:30:b6:1f:0e:74:ce:d8:94:8f:6d:2b:bf:
         6d:ec:57:82:3a:3a:c4:a4:c0:ec:ad:e9:d7:c0:69:53:3b:e4:
         20:04:c3:1a:8d:04:d7:6b:4a:88:15:5f:60:27:42:67:bf:c9:
         c5:df:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:07:24 2026 by rpki-client