Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
File:                     2BD3626FA7C4C8A787225E35241AD5992151D359.mft (raw, json)
Hash identifier:          6C7+WuykXpY11dMT24cV3jMt2/sjC/7Nc7Dr8fX9bL4=
Subject key identifier:   91:AC:05:AC:5C:25:0D:B1:17:F4:03:62:EB:27:6D:20:68:52:00:45
Authority key identifier: 2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59
Certificate issuer:       /CN=2BD3626FA7C4C8A787225E35241AD5992151D359
Certificate serial:       1E6BFFEC77515E09F5D198AB9530C8D5A1EF81A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
Manifest number:          A6
Signing time:             Wed 02 Sep 2026 11:58:11 +0000
Manifest this update:     Wed 02 Sep 2026 11:53:11 +0000
Manifest next update:     Thu 03 Sep 2026 15:44:11 +0000
Files and hashes:         1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: Lts+nDghqdeOjHPLJupIS91t89Hz46DHGxSYyuVdlFI=)
                          2: 2BD3626FA7C4C8A787225E35241AD5992151D359.crl (hash: BaBJaUkXeBbkn5Dzv5A09dbqqvz27u6hvQK7zIClUXw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl
                          rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 15:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6b:ff:ec:77:51:5e:09:f5:d1:98:ab:95:30:c8:d5:a1:ef:81:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3626FA7C4C8A787225E35241AD5992151D359
        Validity
            Not Before: Sep  2 11:53:11 2026 GMT
            Not After : Sep  3 15:44:11 2026 GMT
        Subject: CN=91AC05AC5C250DB117F40362EB276D2068520045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:ae:1f:6e:db:d5:37:2e:5e:d3:2d:e4:9f:
                    81:46:36:84:ea:1b:68:9b:3c:16:11:ac:bd:6e:ed:
                    be:d7:cd:63:c8:f4:d9:fb:40:16:a2:23:fe:40:ac:
                    b4:7b:53:64:28:2f:91:6e:25:08:c9:15:95:e3:48:
                    15:9b:0b:30:66:09:0a:e1:9c:9a:f9:b4:0b:50:9c:
                    db:12:33:f0:73:d6:84:9b:0c:cd:72:cd:88:de:5d:
                    96:5c:6c:90:c1:21:5e:59:c8:29:2c:fd:ae:82:1c:
                    f9:ae:f1:82:3e:b6:b8:94:e6:89:54:0d:b5:f7:18:
                    8a:c5:05:e8:ff:1e:e7:74:30:4e:86:e3:04:55:6a:
                    73:7c:ab:83:5e:78:99:bc:74:b8:8d:e6:c3:83:b7:
                    d9:ed:57:37:d3:0f:cc:7a:9e:f2:e3:75:21:6d:e4:
                    d9:05:58:49:eb:12:cb:15:52:cb:b2:53:fa:2d:75:
                    de:18:0c:2b:49:09:a1:d6:12:c7:91:d0:02:b5:9e:
                    d9:2f:5e:c7:12:16:1c:39:82:02:12:11:4a:55:ab:
                    09:00:74:e6:df:70:c7:56:7c:03:98:cf:c5:42:96:
                    fe:c8:d5:0c:3e:b7:9a:0f:9e:bc:91:79:96:13:14:
                    34:f5:fc:99:00:18:69:03:57:d2:73:c8:89:11:c0:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AC:05:AC:5C:25:0D:B1:17:F4:03:62:EB:27:6D:20:68:52:00:45
            X509v3 Authority Key Identifier:
                keyid:2B:D3:62:6F:A7:C4:C8:A7:87:22:5E:35:24:1A:D5:99:21:51:D3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2BD3626FA7C4C8A787225E35241AD5992151D359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/2BD3626FA7C4C8A787225E35241AD5992151D359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e9:a1:b4:35:29:98:76:f3:63:df:47:23:3d:17:9b:98:d9:
         0e:8b:fd:c7:95:34:09:10:db:65:e0:b8:99:0e:61:03:62:ee:
         2d:c6:99:60:ef:cf:dd:6d:ef:ac:6e:64:3b:a5:51:d7:63:4e:
         ba:19:c0:b6:87:71:8a:f0:8a:b2:3f:86:94:7e:47:8b:ba:fe:
         c5:8b:1c:fd:19:4d:42:b1:f0:43:98:37:7f:fe:6d:0c:f7:5b:
         76:52:0c:26:2b:39:1f:a0:ed:70:52:55:cb:a2:27:53:a0:91:
         f3:3a:88:4b:18:a7:e2:aa:75:17:8c:94:ea:02:b9:c4:97:7d:
         71:d8:0c:cb:4f:07:28:bd:01:5f:db:83:b0:f6:f7:73:81:11:
         86:5f:9c:d2:0f:c7:5f:e4:ec:6c:ec:1e:26:21:30:71:f4:ab:
         2d:0e:80:70:91:cd:a1:8e:da:0e:db:6e:45:f3:46:c9:66:ef:
         a7:e9:ab:51:45:c8:a0:37:e7:48:ee:7b:93:d4:5e:a3:2d:f4:
         51:4b:fc:cc:6e:74:a3:8e:87:85:c1:cd:21:81:04:d4:e2:bd:
         10:48:ac:af:8c:89:16:81:53:e1:54:95:4a:c2:da:23:f0:af:
         2c:d4:8e:6d:26:e5:f0:cb:40:58:7e:f1:bf:84:73:a8:81:73:
         01:67:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:21:14 2026 by rpki-client