Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
File:                     1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft (raw, json)
Hash identifier:          hMUugnk+5R9Uk52o/HZoPr1/xWQGQAb2Iu3rimrAVhc=
Subject key identifier:   D2:91:6B:79:D5:7A:1E:22:73:32:A5:E3:4C:85:86:2D:D2:17:DA:6E
Authority key identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A
Certificate issuer:       /CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A
Certificate serial:       64B275F32F75189B18D52CD89A7B7E0EBDF4ED37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
Manifest number:          B7
Signing time:             Wed 16 Sep 2026 21:35:40 +0000
Manifest this update:     Wed 16 Sep 2026 21:30:40 +0000
Manifest next update:     Thu 17 Sep 2026 22:30:40 +0000
Files and hashes:         1: 1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl (hash: BeDN+poFZ2NfgDzMAEa/Kye6L9MuxczkCmYWu2z+vPQ=)
                          2: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: 2RFM120BK2x+ijcQiQQFduH+zaBhpG83qp16mYO7vG8=)
                          3: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: 1Xw8ZcmhMagcycv6RIC2nnyQd9l0Ss7PGPzzLHbvNJI=)
                          4: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: uwXs1B2vENHoFPXzX6L0y7II8AePyfh6rZF6h22vRrA=)
                          5: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: oJAKvIjQYUnV4YiPQwgQNfHdtV+ujtVQM+Xex28JGbg=)
                          6: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: MRJCCb3fXe1PqSBXHNtZ+I4+QxuZf0FtTfzRiqIoYFg=)
                          7: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: JVFHSqzVsgqy22qJbtrvNEyG8V0kzJkVnI2PAp64X94=)
                          8: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: NsEUBjEg4RvBD7zitmsA9BrE/lRHRKsCpJUJlO5IUjE=)
                          9: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: 99QIwzzuN/Z0qUxV3WwSxtLTN6hnTR8mitqHt39iQf4=)
                          10: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: 6p/psu31RGuXqE6YHMjc6bPnb3I31ZolmJJogTJhucY=)
                          11: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Ulhe7SBzoKXa0nbHiYWTSM2UW8Ne9l9FUM0Zzr+5Taw=)
                          12: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: 8bY1t1WWG1ycFYAnepDoYlqaZY4Ueot1JfgflfLyzZA=)
                          13: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: r8bhwMyuWK8pro2AJ6O3DeDhHxZkOZDkQzVfsAiQ4HM=)
                          14: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: dioQduQ3RsGsXcF2fvN/JbmBfWyTlyf1+yoiwspl0zk=)
                          15: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: MAqDcQzKsQ7AU2jwczXNTkd2KAp2lSq7hYrm+mz5mbc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl
                          rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b2:75:f3:2f:75:18:9b:18:d5:2c:d8:9a:7b:7e:0e:bd:f4:ed:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A
        Validity
            Not Before: Sep 16 21:30:40 2026 GMT
            Not After : Sep 17 22:30:40 2026 GMT
        Subject: CN=D2916B79D57A1E227332A5E34C85862DD217DA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:ec:fa:67:cd:8c:d8:4d:9d:62:a6:a0:98:
                    76:4c:ac:06:eb:74:22:c3:67:50:ec:28:8e:fe:b3:
                    c3:5a:5d:5e:1e:06:3d:a7:31:4b:7a:d7:ba:13:ce:
                    5a:82:44:69:74:12:00:c1:ee:8f:05:bd:9a:9c:f4:
                    7c:91:31:e9:2e:03:6a:a7:2a:fc:2d:b2:e4:ed:83:
                    65:f9:b6:ab:22:08:e8:4a:e5:a5:91:20:0a:12:44:
                    f8:61:35:0d:b4:b6:69:27:ed:a2:f9:54:aa:f2:22:
                    fe:b5:48:2d:72:f3:4f:8e:24:c9:fd:9e:99:34:ad:
                    4d:9d:bf:14:51:7f:af:ba:1a:ef:d8:73:1b:6f:67:
                    b1:30:3e:b5:79:4d:f7:d8:7d:5e:94:21:66:b6:23:
                    50:f3:06:9a:38:31:c0:e1:ca:80:61:58:9c:d9:fb:
                    a7:a9:e8:f3:eb:ba:9a:60:e0:bb:66:71:e3:8e:a6:
                    e3:e8:58:8f:af:69:53:0c:6d:55:30:fd:f9:66:3a:
                    c3:d6:86:f5:63:9f:01:4c:7d:89:36:6a:49:05:3f:
                    96:ba:37:9d:dd:91:4c:70:7c:7c:56:3b:7a:ff:40:
                    0a:f2:9a:e3:38:53:0c:1b:75:02:74:41:04:4e:c9:
                    7a:e4:44:67:64:d7:26:fc:6e:74:8c:53:ee:4e:44:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:91:6B:79:D5:7A:1E:22:73:32:A5:E3:4C:85:86:2D:D2:17:DA:6E
            X509v3 Authority Key Identifier:
                keyid:1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a3:61:28:f0:dd:27:5a:4f:b1:b6:64:c0:e0:d4:ed:a5:93:
         33:42:03:9d:19:f8:36:54:90:12:59:eb:50:a1:ee:0b:b8:e0:
         72:ae:8a:76:0b:78:10:5b:81:8b:cf:ba:92:87:9b:98:47:66:
         43:9e:cd:57:0c:07:e9:d6:7b:5d:f6:f7:1c:3e:d8:eb:fa:38:
         27:5d:3c:55:41:50:b1:f9:ce:28:ce:55:5b:31:11:fe:b5:02:
         ef:18:cc:72:5c:c2:b2:c5:5d:69:71:08:fc:a4:33:a3:78:9a:
         e8:00:8b:27:f2:21:87:77:c4:d4:11:3c:b7:82:1c:af:b2:b0:
         96:47:99:4b:bc:69:b2:b9:0e:31:be:18:04:8a:b2:34:d7:f3:
         e6:98:22:8f:db:ed:ec:8a:ac:70:8f:2a:6a:0c:cf:5d:d2:0b:
         8d:cf:49:b2:25:21:29:76:1d:99:6e:95:53:1e:c3:74:f0:65:
         bb:2e:33:20:7f:23:bc:14:25:55:95:48:8e:97:47:9a:fd:f8:
         32:56:70:56:fe:13:ea:36:d1:29:d9:4f:c2:6c:6c:89:ec:18:
         9b:f5:f5:d1:e1:93:bc:50:ba:06:07:cd:78:b0:3c:ba:2d:5a:
         db:65:37:06:d9:0d:9e:2b:d0:00:64:d1:2b:40:bd:48:58:3a:
         66:27:df:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:46:33 2026 by rpki-client