Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
File:                     153D132907038920D30874D8E1EA33161B940EA6.mft (raw, json)
Hash identifier:          zw0bW2NR5ttkKiy3sReKUbcINtKy/cJPjR9f5Tb6OMI=
Subject key identifier:   A4:A7:A1:CE:4A:FD:AB:05:17:2B:CC:68:72:D6:D2:4E:63:1D:19:DB
Authority key identifier: 15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6
Certificate issuer:       /CN=153D132907038920D30874D8E1EA33161B940EA6
Certificate serial:       2D3FDAD3BA0E51AFA3F33AF9183C034A83260E5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
Manifest number:          A7
Signing time:             Thu 03 Sep 2026 12:57:41 +0000
Manifest this update:     Thu 03 Sep 2026 12:52:41 +0000
Manifest next update:     Fri 04 Sep 2026 14:58:41 +0000
Files and hashes:         1: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: pulqmJflTAxdM7jOySuU657i95+QOMozLp6rdyTPI6U=)
                          2: 153D132907038920D30874D8E1EA33161B940EA6.crl (hash: ujoyYotn/Zouobxsnwu+nCJV/emB9eYLXnReM/IF5AQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl
                          rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3f:da:d3:ba:0e:51:af:a3:f3:3a:f9:18:3c:03:4a:83:26:0e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153D132907038920D30874D8E1EA33161B940EA6
        Validity
            Not Before: Sep  3 12:52:41 2026 GMT
            Not After : Sep  4 14:58:41 2026 GMT
        Subject: CN=A4A7A1CE4AFDAB05172BCC6872D6D24E631D19DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:b7:04:78:b7:12:64:e5:ce:57:75:2d:53:
                    90:ca:17:fd:87:73:01:2f:54:01:84:e6:2d:e8:59:
                    2f:de:f7:5a:6e:34:5b:64:0b:d5:99:50:32:da:d3:
                    66:2e:eb:45:0f:5a:59:17:58:e7:34:43:cc:90:00:
                    4e:b4:d4:1b:46:84:3b:ec:2e:3b:df:9d:12:e2:77:
                    06:94:f4:e7:5a:04:a9:49:2f:c2:3e:7b:df:29:09:
                    d2:d4:24:82:a1:af:d4:47:13:c6:a6:1d:15:d7:3b:
                    4a:cc:e1:99:17:1a:67:dd:bd:0a:f7:c6:7e:0c:42:
                    1c:23:1d:ea:92:b3:d0:41:e1:55:be:85:44:85:f7:
                    91:a9:6f:d6:19:cd:3c:36:8a:23:a8:68:db:21:a3:
                    8e:d4:5c:db:74:40:53:7b:52:aa:e7:10:be:e3:8b:
                    87:d9:5b:0b:e1:09:76:a9:74:3d:a7:93:92:c6:b9:
                    8b:1c:09:1b:09:00:f6:4c:07:16:18:9d:bd:a3:ae:
                    ab:f5:88:e9:59:fc:31:99:81:e0:29:85:fd:ee:cc:
                    fb:e1:44:7a:2b:fe:e0:a3:b6:a7:2c:b6:c5:85:f3:
                    1b:d1:24:97:1f:69:1a:5a:30:6f:b4:ba:4f:11:4f:
                    73:b1:93:43:15:36:1a:0b:1d:85:f2:03:71:f4:29:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:A1:CE:4A:FD:AB:05:17:2B:CC:68:72:D6:D2:4E:63:1D:19:DB
            X509v3 Authority Key Identifier:
                keyid:15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c8:e7:3c:ef:1d:5d:9e:4d:13:b7:03:6f:d7:8d:46:cd:b5:
         b5:01:d2:a7:93:03:1e:9e:2f:aa:61:0a:c5:3f:ce:a4:72:89:
         0b:fd:dd:77:21:b7:87:3b:73:32:d7:65:81:e1:6c:13:6e:06:
         76:15:ef:9a:10:bb:cd:db:ad:2f:be:34:3b:ab:56:50:44:7a:
         aa:20:87:92:3b:b6:d4:1d:bc:39:de:62:ed:f6:22:24:99:4c:
         3f:2d:d2:26:34:a9:c9:1f:fe:90:4e:f2:f6:47:33:27:1a:7a:
         44:eb:ec:cb:f0:2c:6f:e0:cc:04:0c:9f:94:15:4e:ff:74:f8:
         ce:19:4e:10:01:06:67:69:c5:ec:b5:5c:2b:f4:8f:2d:eb:cb:
         b1:f8:03:5d:11:58:68:4e:4e:9d:01:68:d4:ac:4c:ea:b1:7b:
         4a:6e:46:31:67:29:db:a7:9c:cc:5e:16:3c:5f:be:d5:8f:bd:
         5b:42:39:56:aa:5a:bb:ce:21:d9:b4:c5:b4:a7:5d:b1:94:e4:
         d7:76:40:c7:5f:89:3e:e3:86:8e:94:bc:7b:10:4c:05:7b:e8:
         05:64:ae:c8:fc:79:7b:d6:03:60:75:1a:ba:ce:ee:9c:ac:cd:
         82:8f:b5:8c:38:8b:4a:65:29:53:c8:82:f2:0c:b4:ae:95:82:
         4d:0e:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:14:19 2026 by rpki-client