Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
File:                     AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft (raw, json)
Hash identifier:          /tU4bP3sXQZv2zssb3c27BuzOOo/Q3jMmI1EoO27oZc=
Subject key identifier:   AA:D0:C7:E4:45:4A:E6:B1:C4:DB:10:7D:E2:44:A9:0E:E6:F4:86:4D
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Certificate issuer:       /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial:       6DBF6B5123EED617DB46E898467825B0F4EFB119
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
Manifest number:          EA
Signing time:             Sat 24 Oct 2026 07:58:49 +0000
Manifest this update:     Sat 24 Oct 2026 07:53:49 +0000
Manifest next update:     Sun 25 Oct 2026 09:24:49 +0000
Files and hashes:         1: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: UF7aCyE5FESxwGGWBM/poN89N17rR7jv22FSOfKjvlk=)
                          2: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: Cz0RsKoVkeeB1IsUqTtQO8T5aC2XyKwMvob94kUO7oA=)
                          3: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 9bsIgvpn+nDqB1JkEO35LZUnAXe5IvhJf7x4sHOoJLY=)
                          4: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: PK17dkljk3cirdVkAhnzBVlvFjbQaBFW384JrVTU5eI=)
                          5: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sfzwSxhwf93yzsApW5cK5kJn4eNAyyEFWMZjQtMY6Ok=)
                          6: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: 0nmqU55YZ3VtV1W8dEUj6+BAJuQ389WNc46VpzYQeA4=)
                          7: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=)
                          8: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: SsEkvpd7Ya0vJcTfzCdLVaBKw02BlHsoNedgx56rz7o=)
                          9: AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl (hash: aQA/LHYX3HTMJ93EnWvSTMjMV80Tiul5d6gtL0eY10k=)
                          10: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: xtIac8VAw15L09WUieeUSir9eYOGXhXfymWhdgL7e/Y=)
                          11: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: ry1zcsxyp5rx5aqnNqVzN9RbPAzFPE5OKy5fVA/tBsY=)
                          12: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: bzgmeNk+RTlBoGqusN6v8fvRVhXp8YED5fczTfvL+Pk=)
                          13: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: Azh7PmQbddqZUxJOxiTwYESOb0WkJfacl3QlGxSp7Ls=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
                          rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 03:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bf:6b:51:23:ee:d6:17:db:46:e8:98:46:78:25:b0:f4:ef:b1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
        Validity
            Not Before: Oct 24 07:53:49 2026 GMT
            Not After : Oct 25 09:24:49 2026 GMT
        Subject: CN=AAD0C7E4454AE6B1C4DB107DE244A90EE6F4864D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:00:61:42:54:df:5a:62:f1:a9:d3:01:b2:bf:
                    3f:26:02:87:e7:78:34:03:5c:5e:45:cc:4a:40:fd:
                    85:69:09:17:a9:3a:59:15:8d:34:41:50:b4:da:55:
                    c7:f5:70:66:8b:04:3c:a0:61:d6:d1:43:54:4a:8c:
                    79:e9:db:9e:7a:d8:e5:20:4b:dc:2d:5f:1b:8f:52:
                    bf:05:04:5e:c0:90:4c:72:c7:bc:7e:50:c5:f8:50:
                    06:16:2e:21:c2:f5:ad:84:1c:bb:3c:32:35:cb:77:
                    1e:d8:89:86:65:c8:e0:75:b7:5c:dc:df:27:fa:17:
                    29:42:4f:e2:e5:8e:09:99:5a:20:92:a7:34:71:f9:
                    91:65:d7:bc:f3:b8:57:2b:39:a4:25:fa:6d:df:ee:
                    88:c0:53:85:05:45:b1:1f:b1:df:8c:56:59:f7:ca:
                    28:59:80:6e:a7:82:e2:a2:54:85:d0:0f:b1:69:02:
                    30:d2:bd:f9:cc:31:3f:b8:2e:99:a8:e6:3f:cd:2a:
                    31:94:36:2e:b4:7b:7d:28:31:95:78:7a:e4:39:21:
                    fa:af:cb:a2:6a:22:fd:74:f4:f9:42:21:2e:e1:8e:
                    3e:4c:21:80:52:66:ff:87:9d:fd:ff:9d:c9:30:3f:
                    0a:ea:67:7e:f7:3b:71:e6:d3:4f:16:f6:18:d4:37:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D0:C7:E4:45:4A:E6:B1:C4:DB:10:7D:E2:44:A9:0E:E6:F4:86:4D
            X509v3 Authority Key Identifier:
                keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ad:e9:63:1d:ab:af:b5:6b:4c:33:3b:63:53:93:7c:7d:60:
         bb:27:03:3d:87:b1:57:05:e4:dd:9e:a1:e3:ba:e1:25:0a:5c:
         14:83:39:fc:ba:d0:c0:42:26:3c:2a:4e:8e:0d:b4:76:77:24:
         5a:6c:bc:70:61:08:22:5f:23:19:31:a3:6f:62:4e:67:f4:02:
         bd:ad:2f:b2:98:e5:eb:dd:7b:bc:25:a5:03:45:73:55:fb:24:
         bd:04:6a:a7:ae:50:c4:b9:93:a8:dc:38:dc:68:60:19:6e:48:
         f1:77:91:5e:ff:44:e6:76:33:bb:86:84:84:89:64:12:d8:79:
         83:a4:79:bc:a7:f1:bd:2a:9a:12:e8:68:4c:59:05:1a:d4:f6:
         22:87:da:c6:47:22:5b:75:66:34:a0:76:38:e5:74:e5:89:ab:
         b5:b3:76:81:78:55:b5:e3:db:eb:a7:33:c9:f2:56:dc:26:dc:
         49:04:a2:cb:3e:e7:31:17:95:81:f3:44:b2:eb:c3:c2:11:30:
         48:ca:f8:e7:7b:05:be:ff:d0:4e:17:f0:f1:46:34:c1:22:22:
         35:ec:48:4b:b8:d3:83:87:06:b6:0d:50:8d:24:ee:5a:d2:bb:
         b6:86:f1:ce:a0:59:10:13:3b:11:2d:02:26:37:e7:48:74:08:
         33:9e:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:38:14 2026 by rpki-client