Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
File:                     A795AFC3ACE68FD4EB18D45F48148F669260F261.mft (raw, json)
Hash identifier:          TSSB7lylRl5Qub1/y5oPJjQw8kAaFNELMOsc6tqmsdo=
Subject key identifier:   AF:D1:07:0E:6E:F9:39:51:A6:6E:20:62:35:C6:15:B9:76:D0:67:08
Authority key identifier: A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61
Certificate issuer:       /CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
Certificate serial:       20A956C181F4110265B8A759006C652130338DFB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
Manifest number:          B8
Signing time:             Wed 16 Sep 2026 20:59:52 +0000
Manifest this update:     Wed 16 Sep 2026 20:54:52 +0000
Manifest next update:     Fri 18 Sep 2026 00:20:52 +0000
Files and hashes:         1: A795AFC3ACE68FD4EB18D45F48148F669260F261.crl (hash: f4/XgtNnnZfHcuHPPbaEf9fh7dxeQmL1yzs6RK+Tx7I=)
                          2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: pmHLxMdkC8jCCynXCQwBWuDUZCyBP7BmUKKeGNQ6X6A=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl
                          rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 00:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a9:56:c1:81:f4:11:02:65:b8:a7:59:00:6c:65:21:30:33:8d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A795AFC3ACE68FD4EB18D45F48148F669260F261
        Validity
            Not Before: Sep 16 20:54:52 2026 GMT
            Not After : Sep 18 00:20:52 2026 GMT
        Subject: CN=AFD1070E6EF93951A66E206235C615B976D06708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:ef:d9:9c:92:3e:83:f8:63:b9:15:c5:61:
                    cc:fa:82:92:f1:3e:da:8c:55:fc:d4:eb:e9:65:a8:
                    54:06:a4:1c:11:f0:16:ac:0c:db:88:0c:fc:ab:5d:
                    95:6a:c0:9f:ec:db:00:68:0f:ed:90:bc:9c:9f:22:
                    89:d3:a5:51:f1:02:81:d2:5b:14:52:72:13:ae:fd:
                    1a:ed:b2:bf:8a:94:42:7d:42:d8:f2:74:c8:02:a6:
                    c9:94:34:d9:d7:05:c8:9f:f1:3e:eb:29:2d:4e:1d:
                    6c:f0:ba:aa:21:8a:71:67:59:06:eb:97:5e:8d:15:
                    ba:5f:39:0b:84:4a:ff:5b:ce:24:91:00:0f:dc:69:
                    af:d9:32:69:a5:f6:a5:38:4d:f1:89:16:3e:37:55:
                    5b:cf:d6:3f:fc:43:72:3e:da:5e:db:b4:51:8a:7b:
                    92:aa:30:6c:b2:b3:a4:a4:59:8e:e4:15:86:4c:b0:
                    7e:a0:d3:0c:cf:a0:44:ce:b7:1a:68:a0:0d:00:27:
                    a8:71:4b:da:27:bc:70:16:4b:7a:a3:7b:16:16:7b:
                    62:58:fb:e0:dd:9b:c9:99:82:9a:0f:d2:ea:82:07:
                    a1:6c:1f:b0:f7:1f:dd:d4:ce:d5:e7:f9:3d:49:cb:
                    53:c5:b0:95:0d:ab:2e:dd:6c:86:a6:e4:81:2d:dc:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D1:07:0E:6E:F9:39:51:A6:6E:20:62:35:C6:15:B9:76:D0:67:08
            X509v3 Authority Key Identifier:
                keyid:A7:95:AF:C3:AC:E6:8F:D4:EB:18:D4:5F:48:14:8F:66:92:60:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A795AFC3ACE68FD4EB18D45F48148F669260F261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/A795AFC3ACE68FD4EB18D45F48148F669260F261.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:52:f1:89:c3:c3:93:26:d2:5d:b2:7f:c4:25:05:80:28:f4:
         b7:72:44:f2:cb:ac:e7:d2:a5:50:a7:6e:44:db:ce:a9:a9:e9:
         3d:63:6b:a4:53:54:79:c4:98:34:f6:07:f0:d4:94:e3:c5:9c:
         4d:32:fc:0a:0f:ae:02:d8:69:b0:13:b3:fc:47:2e:4e:57:3d:
         7e:8d:6e:53:e1:b1:48:f7:bd:79:fd:25:e9:73:13:41:6f:bb:
         db:16:1f:ab:c7:a4:8f:71:6a:b6:c1:a7:b0:b3:58:85:c9:50:
         8b:11:f3:89:31:0a:16:dd:27:5e:e3:c7:63:b9:05:3f:bf:5e:
         0b:8a:0c:18:9a:ea:02:a7:55:e3:3a:34:3c:a1:ed:1f:23:cb:
         f1:0f:ff:e6:b9:80:9d:b9:57:93:b6:fb:f8:3c:e2:81:52:65:
         79:7e:71:92:9c:2e:66:c3:a1:bd:ae:9e:0b:7f:83:6e:46:8e:
         7a:76:53:c3:db:df:60:95:d7:65:8f:11:da:08:12:fd:09:d0:
         75:5c:93:d0:8c:67:72:08:00:7c:73:e6:10:ac:bc:d3:fa:00:
         9e:a9:45:0c:c9:4b:f2:a3:90:61:42:78:90:e3:80:65:3c:61:
         3e:04:db:fa:27:35:42:2d:28:95:07:a2:4c:6c:6b:a8:90:29:
         b1:8f:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:18:42 2026 by rpki-client