Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
File:                     7377350E3E3A151F4CC7127822802AD47B86A5CF.mft (raw, json)
Hash identifier:          pfUOtqooHob5+Vy5w/tZADUqwKslwsBSNqEGPiHALrI=
Subject key identifier:   A9:48:EE:45:59:6A:D3:F6:27:43:27:ED:32:7D:EF:E0:8A:5B:AD:8F
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Certificate issuer:       /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial:       5C6B4E7B58FDFEF340CF34C6CF252FFFF1D0B70A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
Manifest number:          B8
Signing time:             Thu 17 Sep 2026 02:01:02 +0000
Manifest this update:     Thu 17 Sep 2026 01:56:02 +0000
Manifest next update:     Fri 18 Sep 2026 02:58:02 +0000
Files and hashes:         1: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: OU8A/JqlWEHiLMQOXTcJaLj05li9iqcqdLDEsrie8gk=)
                          2: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: CJsi4P7cF17zeVXlJxUuGuNmwdU6F6/z2QybZclUgaI=)
                          3: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: e4jbQz3u5a8FYwAIij+O/hjopDRAVXihtcltRGdiV+E=)
                          4: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: Vvaj0i3/+/Ad91udWk53Oqtn0qejlYZw543f3Ty/YWA=)
                          5: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Hao2KVKZ/SYX9wVFj9FYi2+tYJ4CgtxYRSmxcGvPEds=)
                          6: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OPxPj77Y9Rv3nPwPPsMOHUQMVs3WuJ+hOwcspHs2qG8=)
                          7: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: d1NKSb9zCDz65Zahjy0PaWXg282C7xqtAafmjhthBLo=)
                          8: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: 4T0MkaYeQXnt+7nt+tGVXlJwCuwG3xBT42XqaRTpKC8=)
                          9: 7377350E3E3A151F4CC7127822802AD47B86A5CF.crl (hash: xZKoXMbzi8DSUSlfn+PBzASmtuOcxl9/nU3GtYsLQcs=)
                          10: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: B1+lVC5q4sIsDS/x8/d5eAraCNrj0NOZBU8+Bv2wtx0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
                          rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6b:4e:7b:58:fd:fe:f3:40:cf:34:c6:cf:25:2f:ff:f1:d0:b7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
        Validity
            Not Before: Sep 17 01:56:02 2026 GMT
            Not After : Sep 18 02:58:02 2026 GMT
        Subject: CN=A948EE45596AD3F6274327ED327DEFE08A5BAD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:5f:01:2c:e6:9d:f5:49:f8:3b:fb:98:59:
                    58:9e:a8:d3:d7:e8:9c:01:05:ba:ca:9d:e6:ff:f2:
                    a7:59:0b:54:33:32:4e:33:d8:3e:d5:ad:f1:e6:66:
                    99:44:e1:60:03:a8:58:fc:2d:f6:8e:aa:09:94:35:
                    d0:51:08:10:c9:f0:83:3e:d1:1b:62:4a:3e:20:73:
                    5f:d9:7a:63:f0:8a:fe:6c:07:54:31:33:1c:19:1c:
                    8c:10:59:1d:af:39:dd:e9:b6:0b:93:0a:4e:49:9f:
                    e2:bf:18:ea:96:6e:5f:e7:b2:1c:26:8b:cb:2d:33:
                    cd:be:54:8e:fa:7b:59:e2:1a:f2:25:f5:80:16:7e:
                    e9:e5:07:9c:b0:4b:b2:39:b4:b4:55:16:bb:da:c7:
                    95:d6:82:a9:cf:6f:52:d3:18:f3:9e:10:58:39:77:
                    b4:e6:94:c5:57:07:35:41:4b:82:26:41:89:8f:ff:
                    de:48:9a:44:00:0f:e2:e6:9e:15:39:c1:b8:89:8a:
                    46:d7:f2:2a:dd:b4:fd:9f:12:60:d8:b7:39:4a:cc:
                    55:ca:92:e7:34:05:5c:d7:0a:c9:09:66:2d:85:f8:
                    5c:b7:27:ee:aa:7d:9a:9a:d0:6e:f9:00:d1:2b:b1:
                    c6:38:67:ce:41:1c:17:7b:4b:54:1d:76:36:5c:d5:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:48:EE:45:59:6A:D3:F6:27:43:27:ED:32:7D:EF:E0:8A:5B:AD:8F
            X509v3 Authority Key Identifier:
                keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:64:35:74:cd:2a:eb:a5:93:25:39:1b:e1:53:d3:30:c5:86:
         83:5e:9e:a3:74:45:4f:95:55:45:8e:36:49:e3:26:ee:41:7b:
         c0:5c:b1:d9:10:fc:36:5f:47:e3:c7:9d:b7:76:f8:20:54:b8:
         ce:92:eb:fb:45:02:e7:c8:4a:28:a8:fc:b9:e7:a5:1f:b7:77:
         12:2f:a9:29:0f:6b:c2:dd:81:5e:5b:3c:50:96:5c:9a:df:32:
         76:03:86:36:34:ed:f8:12:fc:39:ed:d7:e9:1e:b7:19:f6:60:
         60:d8:43:36:d7:83:f5:7e:72:73:47:8e:05:91:b7:78:c4:31:
         d5:a6:37:1a:aa:5b:ea:04:9f:6c:df:a2:7a:1e:49:e8:b4:f3:
         23:c0:1b:53:9b:c2:41:d0:5a:6c:83:e4:ba:10:70:bb:6b:7b:
         67:7f:1d:69:52:77:9a:5d:c3:a4:06:e7:1d:a2:f3:6e:00:2b:
         0d:38:70:f5:48:74:51:56:fc:56:d8:e2:68:09:c2:3e:89:1a:
         41:26:60:18:e7:19:14:f3:9f:e2:d6:43:82:f8:d9:a6:d0:f2:
         0e:83:b8:58:c1:82:a4:dd:79:3e:da:14:c5:be:2b:0e:df:03:
         46:b6:ba:52:93:ad:16:db:e1:ad:30:ce:ac:ee:22:91:c2:44:
         5a:53:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:20:10 2026 by rpki-client