Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft
File:                     AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft (raw, json)
Hash identifier:          JOq3gzYX5XRRTTiXHtgUjTioAjcBrpb3wQ1N6y/tIwk=
Subject key identifier:   F4:E5:4C:0F:8F:5A:4A:2C:7D:F7:D1:64:DE:E7:16:1A:B4:82:06:50
Authority key identifier: AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37
Certificate issuer:       /CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
Certificate serial:       7628E39BB95892B92365B24AD154D8662CBB94CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft
Manifest number:          A6
Signing time:             Thu 03 Sep 2026 18:25:15 +0000
Manifest this update:     Thu 03 Sep 2026 18:20:15 +0000
Manifest next update:     Fri 04 Sep 2026 18:54:15 +0000
Files and hashes:         1: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: tD1yHxjZ0j66bJ+DN66nXDU83oVTbucVL4RF+tJBNP8=)
                          2: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: RDOvFNzz7ROaV6kZO6gJyA66/dh82eqn/Lc35nh0ous=)
                          3: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: IB2TICgSff4yJSUSSgF3kThtgWC7lQMHVpDuh17+3aE=)
                          4: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: yL78lQu3kyFHQYQI6cDLG1nKXK0O4QE98ItjWrrAi8Q=)
                          5: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: zr3xNZn6WC15a6rQMkorpvpeU21f6+HSwl15C2ZfIoY=)
                          6: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: nFp9w2oHsKQ17yYOZXKNctJ4tyfP/KDNQ28RwxJQ/Q8=)
                          7: AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl (hash: v6y18993kUZ8G91+fiTOZ4mJjZMSqWR5S+ln62mfYQU=)
                          8: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: n2RcvCuoWSBBk7Q2wacmccdD3jRe5Nf1cFF5qqE+n5A=)
                          9: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: MBpWtzFzVmAP7u3hAToAKtcASLzko7oX/2bZT/TBbZI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl
                          rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:28:e3:9b:b9:58:92:b9:23:65:b2:4a:d1:54:d8:66:2c:bb:94:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD09531F4DB7D9D5040999989126B4D2D9FD7F37
        Validity
            Not Before: Sep  3 18:20:15 2026 GMT
            Not After : Sep  4 18:54:15 2026 GMT
        Subject: CN=F4E54C0F8F5A4A2C7DF7D164DEE7161AB4820650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:09:01:11:03:28:e5:b9:81:8e:02:7e:a6:
                    f1:37:ac:01:e7:ef:d4:f5:b3:df:ae:26:68:1f:d7:
                    4c:fd:05:f2:90:ed:97:53:a9:87:23:bd:87:71:0b:
                    bf:15:1c:1d:97:4d:5c:0d:64:14:8e:39:44:8b:e6:
                    68:6b:09:19:68:cf:b5:f9:fc:0b:08:9f:41:2b:0a:
                    37:5a:4a:15:49:44:fb:47:bf:a2:64:a4:86:71:8a:
                    e7:bc:0e:a5:da:bb:e5:5a:69:f6:ab:9b:81:34:23:
                    f4:f4:7e:0d:40:fd:07:8e:fa:bc:5f:55:8b:8c:ac:
                    15:65:3c:94:cb:10:aa:3a:75:a4:6f:cb:eb:d7:bc:
                    80:38:b4:35:1b:b9:32:bb:1b:b8:95:63:e1:83:fa:
                    bb:75:57:cf:4c:8f:6e:07:4c:94:dd:9e:11:73:bc:
                    a9:ad:3c:15:56:5e:d3:16:8b:ab:db:ae:3f:09:de:
                    fc:16:e3:ec:09:18:10:65:b5:04:de:fc:b8:84:2a:
                    9b:97:de:14:f1:06:8d:07:69:3d:84:97:61:1a:73:
                    1e:ea:1b:be:f5:d6:94:f3:aa:dc:30:f2:8f:a4:3f:
                    9e:53:3a:af:47:ff:c8:cd:c4:ce:3f:7a:13:fc:e6:
                    b3:ee:62:70:35:81:83:32:63:89:a5:cd:0a:0f:7b:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E5:4C:0F:8F:5A:4A:2C:7D:F7:D1:64:DE:E7:16:1A:B4:82:06:50
            X509v3 Authority Key Identifier:
                keyid:AD:09:53:1F:4D:B7:D9:D5:04:09:99:98:91:26:B4:D2:D9:FD:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/AD09531F4DB7D9D5040999989126B4D2D9FD7F37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a8:20:09:cb:63:bf:fb:12:55:86:73:98:56:ec:12:a4:f7:
         a7:2a:fb:10:ba:a0:77:ed:16:07:ac:6e:00:5c:a2:79:f4:8b:
         b1:b8:40:45:9c:3e:46:6b:22:97:f1:1d:41:f0:29:fb:e2:3b:
         92:0c:63:ba:48:99:18:3d:50:14:2f:cd:09:f9:b7:b7:ae:c1:
         fc:f3:ed:16:2c:1e:a5:de:4e:6b:e8:06:cc:2a:17:ff:5b:d7:
         a8:07:0e:c5:50:f8:2e:54:42:a7:b5:fe:56:5b:e9:61:14:c1:
         1a:de:e8:13:9b:dd:6d:fc:5c:ad:4e:f0:f0:a7:f0:4d:4d:d2:
         ba:ec:9e:cd:26:9f:81:fe:2b:69:e8:a8:e4:5c:6c:c0:47:a4:
         c8:06:3f:f8:db:5a:31:98:ff:2f:88:e9:3c:71:f0:ad:75:e1:
         be:81:18:dc:a5:1e:eb:f3:a1:c6:fa:79:c2:c1:99:c8:2d:51:
         2d:14:95:7e:83:0d:77:d2:87:e7:59:d2:a1:95:ad:ac:48:08:
         41:17:0e:11:21:00:ea:17:0b:bd:12:52:2a:02:52:a5:7e:d1:
         10:4f:29:1d:58:a9:b5:19:a1:54:c9:6f:a5:d1:10:ab:09:e6:
         ad:09:d5:58:36:97:5b:50:37:63:42:85:ac:5b:c6:cc:2c:0f:
         d7:a3:98:d2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdijjm7lYkrkjZbJK0VTYZiy7lM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0RDJE
OUZEN0YzNzAeFw0yNjA5MDMxODIwMTVaFw0yNjA5MDQxODU0MTVaMDMxMTAvBgNV
BAMTKEY0RTU0QzBGOEY1QTRBMkM3REY3RDE2NERFRTcxNjFBQjQ4MjA2NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxwkBEQMo5bmBjgJ+pvE3rAHn
79T1s9+uJmgf10z9BfKQ7ZdTqYcjvYdxC78VHB2XTVwNZBSOOUSL5mhrCRloz7X5
/AsIn0ErCjdaShVJRPtHv6JkpIZxiue8DqXau+Vaafarm4E0I/T0fg1A/QeO+rxf
VYuMrBVlPJTLEKo6daRvy+vXvIA4tDUbuTK7G7iVY+GD+rt1V89Mj24HTJTdnhFz
vKmtPBVWXtMWi6vbrj8J3vwW4+wJGBBltQTe/LiEKpuX3hTxBo0HaT2El2Eacx7q
G7711pTzqtww8o+kP55TOq9H/8jNxM4/ehP85rPuYnA1gYMyY4mlzQoPe0WbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9OVMD49aSix999Fk3ucWGrSCBlAwHwYDVR0j
BBgwFoAUrQlTH0232dUECZmYkSa00tn9fzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGVmZThmOWItOGMzNC00MzQyLWEwZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0
REI3RDlENTA0MDk5OTk4OTEyNkI0RDJEOUZEN0YzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRDA5NTMxRjREQjdEOUQ1MDQwOTk5OTg5MTI2QjREMkQ5RkQ3
RjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw
ZmUtY2ExMDc1ZmJhNWZmLzAvQUQwOTUzMUY0REI3RDlENTA0MDk5OTk4OTEyNkI0
RDJEOUZEN0YzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG6oIAnLY7/7ElWGc5hW7BKk96cq+xC6oHft
FgesbgBconn0i7G4QEWcPkZrIpfxHUHwKfviO5IMY7pImRg9UBQvzQn5t7euwfzz
7RYsHqXeTmvoBswqF/9b16gHDsVQ+C5UQqe1/lZb6WEUwRre6BOb3W38XK1O8PCn
8E1N0rrsns0mn4H+K2noqORcbMBHpMgGP/jbWjGY/y+I6Txx8K114b6BGNylHuvz
ocb6ecLBmcgtUS0UlX6DDXfSh+dZ0qGVraxICEEXDhEhAOoXC70SUioCUqV+0RBP
KR1YqbUZoVTJb6XREKsJ5q0J1Vg2l1tQN2NChaxbxswsD9ejmNI=
-----END CERTIFICATE-----
Generated at Fri Sep 4 04:00:20 2026 by rpki-client