Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
File:                     AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft (raw, json)
Hash identifier:          KpYDBL+XmPeuNsBMIYMttdlxhbs6xdSLB5rwDbPcl/Y=
Subject key identifier:   CE:BD:8A:5B:34:34:3F:46:26:9A:DA:2B:A8:16:66:F4:B5:07:81:38
Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB
Certificate issuer:       /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
Certificate serial:       2346FE3B2EE6A13C8A33751C9661E522105A5287
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
Manifest number:          A5
Signing time:             Wed 02 Sep 2026 11:02:05 +0000
Manifest this update:     Wed 02 Sep 2026 10:57:05 +0000
Manifest next update:     Thu 03 Sep 2026 12:03:05 +0000
Files and hashes:         1: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: od92otk1ZBfK/DphT8D9p9Tw3yqgeInTJA8T3zh0m9Y=)
                          2: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: q33gUCSA+x8ZeBcPhedwaAdIwEj0Ce99+sYJUQuSC9s=)
                          3: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: l6rGkO8MgVJkambdkAclMvjE+aQSvltuGia3hhd605M=)
                          4: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: yyYOlJ0fwzxGoTlSm81JuoIInjVRI/GeCaxTrgVohIA=)
                          5: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: Ee7WWGSltwyaFMHxIIgEvgkLf4dnjnHrFVC5UDqWks8=)
                          6: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: S3aT7VcLJ0ssRGTP1ygDwW7+AIQVYKqNTkFjIYTg3fg=)
                          7: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: aXgaQBkXNr3WgkNnT1bbV4Z/rSlPnLbxkffq9PBogAU=)
                          8: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: dHemt/X+4p/vn34sn9wPgB+Rsu5EmHnVv8RmTO5DvKE=)
                          9: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: 7CW/WrucWkwMy6n5L6l1Fl9wsuT6MqzAnA/bZ5ATe84=)
                          10: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: fZTmTy6g2R28mCtJrpoBFkv/RRFL2DWAt0Cexpbh3bM=)
                          11: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl (hash: BZakbdm92/qfG3DhyuRCRuYq6QhU74WwDjWmFDgWSt8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl
                          rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 12:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:46:fe:3b:2e:e6:a1:3c:8a:33:75:1c:96:61:e5:22:10:5a:52:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
        Validity
            Not Before: Sep  2 10:57:05 2026 GMT
            Not After : Sep  3 12:03:05 2026 GMT
        Subject: CN=CEBD8A5B34343F46269ADA2BA81666F4B5078138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:42:48:9a:d3:c4:1a:ee:eb:e6:76:97:b2:
                    ee:4a:68:42:83:8c:4a:3a:7e:dc:82:4a:f4:e7:db:
                    ea:d8:64:a9:8a:ba:44:dc:05:bc:2b:a9:23:52:6d:
                    1f:51:2d:61:81:ce:4b:21:56:a9:ee:7d:57:d6:d2:
                    b1:be:5c:cd:f8:88:be:82:64:18:82:cb:2d:eb:2e:
                    fd:8a:68:ad:ab:8d:72:20:7e:be:94:37:c9:ce:04:
                    5c:4f:e9:0e:fb:e7:cf:ae:31:94:92:49:72:00:58:
                    da:01:78:29:03:93:7c:97:5a:99:55:0b:a7:d8:56:
                    91:15:2a:01:6c:db:18:c1:c1:e2:6e:a0:69:dc:eb:
                    5d:39:42:2c:cb:a2:25:58:5d:5c:68:62:05:58:11:
                    39:fa:56:ad:a7:31:ae:48:45:81:39:a8:7a:2b:5b:
                    ae:2c:0b:70:21:69:bc:28:bf:16:58:82:4a:af:5f:
                    45:f8:96:eb:de:a9:c3:8f:73:02:f9:16:75:4d:76:
                    6d:82:e7:5e:95:d7:f9:dc:8f:38:9b:39:69:01:c1:
                    52:1c:7a:f4:77:70:56:65:64:76:92:72:d4:2a:3f:
                    f6:fa:89:9d:cc:8c:d4:59:bc:ef:aa:68:83:a7:c0:
                    cb:73:bd:be:5a:19:24:45:b4:4b:df:d5:e1:45:53:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BD:8A:5B:34:34:3F:46:26:9A:DA:2B:A8:16:66:F4:B5:07:81:38
            X509v3 Authority Key Identifier:
                keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3a:e7:b7:f3:1b:05:5b:c5:0b:50:61:f4:5b:8c:f4:41:03:
         06:e7:bc:28:e9:ef:b7:ad:61:0a:1f:d1:04:a9:80:83:1f:1b:
         bb:b4:75:27:e5:17:74:50:db:a1:2a:42:a0:54:5e:a2:bd:39:
         63:c9:7b:03:f7:7b:ed:6f:66:e8:44:75:c9:5b:35:60:31:6f:
         a3:b6:af:e4:1c:e8:79:5b:2a:61:8f:8b:7f:aa:51:7a:b0:f3:
         e2:17:29:41:e2:06:52:9e:fc:7c:c8:54:c1:05:3e:a7:f4:b9:
         fe:34:d6:85:39:b6:80:23:6b:ec:3c:8b:16:e6:96:6f:4e:e1:
         83:43:9c:9a:60:61:70:fd:17:3b:de:bb:62:8a:fd:d4:38:2c:
         8a:2d:3d:6b:b0:40:e5:55:13:11:29:69:d6:ff:bd:4b:6d:34:
         50:ff:de:82:c9:1a:f6:4a:bf:17:d7:cb:98:7d:f0:e2:57:40:
         40:80:53:f9:f5:a4:3a:05:12:b7:28:6f:1a:a5:1f:22:d0:84:
         6c:a2:e3:b5:d4:20:7d:25:df:52:eb:31:b6:4b:d8:a5:af:8a:
         3d:42:d1:0d:f7:82:71:cf:13:2a:cc:ff:b5:92:64:93:76:e9:
         6d:75:dd:91:1c:38:45:e6:67:e5:eb:6d:aa:ba:06:5e:14:28:
         3f:e5:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:10:43 2026 by rpki-client