Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
File:                     1661480FF274E46E5E74274531EDCB741CA1C734.mft (raw, json)
Hash identifier:          A2tGQqJwfcm0Ohp4Zr6TSarZ8PvzBAAa9yxYGAzK4cM=
Subject key identifier:   79:CB:DE:61:61:1B:ED:D4:BF:32:7D:FA:57:85:BF:52:3D:96:B6:6C
Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
Certificate issuer:       /CN=1661480FF274E46E5E74274531EDCB741CA1C734
Certificate serial:       1139503B23ABF3460895711137D1C817A1D987F2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
Manifest number:          A2
Signing time:             Tue 01 Sep 2026 00:35:02 +0000
Manifest this update:     Tue 01 Sep 2026 00:30:02 +0000
Manifest next update:     Wed 02 Sep 2026 02:51:02 +0000
Files and hashes:         1: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: yeyDp2n0wd57cuHVR90zOnbkcRU0QZljusHdKuOsPt4=)
                          2: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: 8uSlgnTbxGAzWNgbE1BKBFBhMHsG7F+ZnW0oGHCnk8w=)
                          3: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: RJW8cxc5knQFd6ZsJTxIJMJPLrpi1nPKGRB3o32Vvrg=)
                          4: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: IFRJrTg8onKZh/TaH9A8yf1wtYUjMcqN4WYH9m4UY4o=)
                          5: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: 8ZVpWuFxO9temB8Ho9FZTNXvwZzEzY2CqMkIIHYcFZs=)
                          6: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: jf6b7kXVa1dhZZRDA/RPJIPiAhtoDFAim3d84aPTFo8=)
                          7: 1661480FF274E46E5E74274531EDCB741CA1C734.crl (hash: SpOcQkOi4I25IDDRdP5tGPNmP4Qyp6vqGF3dLFfykGo=)
                          8: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: pwGyBzBOtEK35HSrAz+AVA7aiAsnsEM4hcBWRLigb/A=)
                          9: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: D5DehsQ30Cg+nOY8N0HK+YwXqyoPTcKwYKHkFyOMq6Q=)
                          10: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: 5Rh6b8BHsmWIHG3vGb6jLaqPvuwWEBxRJQJuBZZsDT0=)
                          11: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: V75gkBW5l6X/+7vnO9PPI54r4jLFDkXk/84VL8kexoA=)
                          12: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: 6+4UoGWRmOvV9or9CsRz3CTlMpRVAi94wKc1SslyAWU=)
                          13: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: Y0BQZtsB87a9/5oaZfRO5KllrRmXSjrLR0zXbqGB394=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
                          rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 02:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:39:50:3b:23:ab:f3:46:08:95:71:11:37:d1:c8:17:a1:d9:87:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734
        Validity
            Not Before: Sep  1 00:30:02 2026 GMT
            Not After : Sep  2 02:51:02 2026 GMT
        Subject: CN=79CBDE61611BEDD4BF327DFA5785BF523D96B66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:31:f5:e2:a2:3f:b5:a6:e5:3e:5d:e9:84:
                    62:a4:c9:2d:89:18:3c:67:51:9b:13:b4:dd:a9:a2:
                    12:22:87:ff:cb:16:59:87:f4:3f:fd:d3:b6:c2:d2:
                    de:d9:c9:66:a7:32:8d:80:e0:87:dc:9f:79:16:d9:
                    5a:46:ab:1d:9f:04:ae:bd:d1:13:c1:35:c7:ff:68:
                    fd:9d:7f:90:7d:df:fb:e7:ea:44:66:fb:bc:b8:ac:
                    c3:aa:7c:db:1f:e6:54:92:21:1e:05:c6:63:c8:4d:
                    f2:7d:f4:e6:ad:24:44:ff:01:be:6e:ec:d9:55:a2:
                    e2:67:84:93:96:0d:91:a5:49:13:4e:c7:61:1d:fd:
                    89:92:0e:79:8e:2e:9f:c8:24:9f:24:ee:f5:a2:85:
                    23:00:d6:ac:3a:9f:2a:d6:f2:44:2e:ea:17:b9:87:
                    96:12:1f:39:6d:c0:2e:f6:f6:f4:5e:7b:45:86:53:
                    da:f0:5b:70:f2:13:4c:23:cd:21:31:8b:21:3d:b0:
                    12:97:10:bd:36:05:d1:02:47:c7:c4:3c:67:ec:c3:
                    28:be:66:39:a0:c1:bb:aa:18:8e:23:7b:d8:f1:3a:
                    ed:43:8a:b8:08:3e:96:3e:53:97:d1:d7:a5:f3:6b:
                    60:0e:ed:b1:5d:c3:80:e8:30:60:c6:4d:b5:ad:c5:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:DE:61:61:1B:ED:D4:BF:32:7D:FA:57:85:BF:52:3D:96:B6:6C
            X509v3 Authority Key Identifier:
                keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f2:e2:59:77:6f:51:5c:3a:3d:a7:8c:81:af:0f:b3:fd:a8:
         8a:74:7f:06:5a:0b:e3:b4:4f:06:24:40:6c:0a:02:42:16:53:
         fd:10:59:64:28:8c:75:bc:e9:d2:cd:d1:40:92:ad:6d:a3:04:
         6b:d4:ab:a8:dd:78:21:b4:1b:ba:7c:7a:72:e0:07:9a:3d:5e:
         74:ac:40:ee:c5:48:72:e0:3f:53:a5:61:e1:06:30:1a:98:85:
         a5:ea:c9:06:8f:20:f1:7b:86:fa:32:87:27:14:9e:19:4d:9d:
         bf:88:de:4b:25:83:94:48:b2:20:79:e0:8c:42:02:b3:34:5a:
         6a:21:94:82:74:3a:7d:5e:a2:1a:99:d8:52:8e:6a:e6:06:fd:
         01:cb:46:4e:81:2a:36:25:0c:52:62:dd:96:c7:1f:93:e3:58:
         45:68:39:ce:de:3b:4b:2c:a5:2e:85:98:56:a3:5c:d0:28:10:
         92:ba:6e:90:4a:aa:a3:d6:98:69:e3:04:c5:21:b8:f6:98:a1:
         2c:6b:fa:e5:51:67:3a:48:8b:b2:fb:ff:aa:9f:34:a7:65:ef:
         ed:39:ef:6a:2a:b6:aa:8b:f3:e5:1e:1f:b2:0d:6c:48:64:31:
         19:e4:aa:b0:e7:83:e8:04:fc:e7:b0:a4:ee:82:ef:53:77:19:
         f0:07:ca:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:04:41 2026 by rpki-client