Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
File:                     3488252FDADC73654E2AAD815316475C9A5F94D8.mft (raw, json)
Hash identifier:          bltZgX9JJUlG7VueJkX00qjZsiMRHGw+Y8hUGqMiyFc=
Subject key identifier:   62:0E:F2:E2:03:FB:85:C2:8F:0A:8C:F7:76:29:48:DA:EC:BC:CA:21
Authority key identifier: 34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8
Certificate issuer:       /CN=3488252FDADC73654E2AAD815316475C9A5F94D8
Certificate serial:       73F007E31184C207FD2CC889CF3F174961422ADB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
Manifest number:          A6
Signing time:             Thu 03 Sep 2026 01:50:16 +0000
Manifest this update:     Thu 03 Sep 2026 01:45:16 +0000
Manifest next update:     Fri 04 Sep 2026 04:13:16 +0000
Files and hashes:         1: 3488252FDADC73654E2AAD815316475C9A5F94D8.crl (hash: Y9Sb6gMnA6/wpDll2+u71vVddfzEh/3vr6b9fke3c6Y=)
                          2: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: jobGwFNdEOGscb8Suy+yh9BDuSyd+S9zj8PbD+vSbcU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl
                          rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 04:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f0:07:e3:11:84:c2:07:fd:2c:c8:89:cf:3f:17:49:61:42:2a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3488252FDADC73654E2AAD815316475C9A5F94D8
        Validity
            Not Before: Sep  3 01:45:16 2026 GMT
            Not After : Sep  4 04:13:16 2026 GMT
        Subject: CN=620EF2E203FB85C28F0A8CF7762948DAECBCCA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:33:28:cf:a7:d7:12:10:ce:84:a1:97:ac:
                    d0:9c:06:5b:bd:e7:09:b6:4a:57:ef:5d:00:ab:69:
                    a7:a9:4c:0d:77:00:61:e4:33:4d:7e:da:2d:13:5a:
                    ae:68:39:d7:ea:6e:61:95:6a:56:96:a1:21:89:c7:
                    a1:e4:4b:ba:b3:9d:9d:22:5e:4d:82:a6:ff:2d:06:
                    c3:95:e9:9c:a1:b4:3e:6e:de:95:d4:ba:e3:3e:be:
                    20:3c:f5:57:5f:30:2e:1a:c0:3d:6c:1c:30:c2:05:
                    dd:1e:bd:a7:19:55:a3:33:07:dc:80:46:df:45:f3:
                    d5:c3:fc:ad:21:bd:dc:b5:3f:cb:48:a1:73:5e:ab:
                    eb:3a:fc:86:20:a9:25:a5:ce:9d:3f:8b:09:26:05:
                    a0:52:62:ab:4d:9c:c6:87:cb:bd:85:ac:ef:1f:60:
                    4d:77:06:2a:e6:e1:7e:73:b6:7c:8a:72:29:4e:57:
                    08:3f:be:31:59:c2:61:5b:ea:e5:b2:50:9c:36:bb:
                    82:5d:ef:0c:cb:d6:d5:47:26:36:35:b7:58:65:cb:
                    5d:13:a3:9e:7d:d2:6a:87:9c:a2:81:56:4f:ab:5f:
                    2c:db:0f:e0:7b:dc:3a:fa:81:e5:3d:e1:46:e5:c6:
                    55:03:f2:8f:8e:fd:02:05:9d:93:08:ed:84:36:dc:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0E:F2:E2:03:FB:85:C2:8F:0A:8C:F7:76:29:48:DA:EC:BC:CA:21
            X509v3 Authority Key Identifier:
                keyid:34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fa:de:05:00:35:d3:5a:ac:5d:43:dc:4e:64:6a:2c:78:43:
         ed:59:58:77:26:24:6a:97:36:5a:62:fc:0a:3e:fd:02:cb:0d:
         11:a1:7e:2a:b5:9b:49:6f:d6:d2:59:b4:b0:ac:4b:87:5a:dd:
         05:d5:e3:75:df:7f:6f:d9:bf:fb:17:45:9f:86:06:0a:b9:2c:
         ed:47:bf:b0:c0:4d:a8:50:a8:85:0f:e8:04:50:77:ee:d8:09:
         ba:0d:34:23:c3:c4:10:86:e2:7d:ee:63:68:46:3b:71:43:70:
         5a:04:65:32:0e:d9:2e:28:86:31:3e:ec:e3:ba:29:f1:b5:9f:
         16:3d:cf:6f:a1:c2:22:96:85:e8:d4:dd:fe:17:9f:cd:27:c2:
         7e:a6:20:67:ea:2c:a3:ec:66:17:0e:a0:e9:99:45:fd:58:54:
         cf:e7:3d:22:4c:bd:da:1b:b2:82:54:48:c6:cd:aa:80:d7:ef:
         45:77:18:19:51:b9:8d:3c:9a:44:d8:1f:7e:b9:ee:78:f0:36:
         ba:73:4f:e8:08:c0:78:17:3b:b7:0e:1b:89:f7:54:96:f9:c6:
         4b:46:1b:20:af:69:fc:ec:e9:3c:92:9a:88:6a:bd:39:cb:f1:
         01:af:89:f6:af:b3:73:60:f2:ff:12:5d:cc:94:d0:ec:48:bb:
         f1:2d:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 11:35:43 2026 by rpki-client