Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
File:                     340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft (raw, json)
Hash identifier:          stCL/OcfdKQFDjAiiIMRyoCyLb/Ct461F3tk0HzIQBE=
Subject key identifier:   E1:16:27:8F:62:30:ED:04:85:2D:8D:EF:B2:65:A8:E2:0F:34:BD:03
Authority key identifier: 34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F
Certificate issuer:       /CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
Certificate serial:       0A20B1F25E0E0FA1E903A17F011994A5B536ADE5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
Manifest number:          B7
Signing time:             Wed 16 Sep 2026 15:17:58 +0000
Manifest this update:     Wed 16 Sep 2026 15:12:58 +0000
Manifest next update:     Thu 17 Sep 2026 16:52:58 +0000
Files and hashes:         1: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: QuJkYaezAKdTxcWr+l4aySjRA4vLncuY75qiXrBgtBM=)
                          2: 340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl (hash: aHPj0PSY/9XeKrutbJx+61zAXwndrkkmXk+p4tuHLaM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl
                          rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 16:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:20:b1:f2:5e:0e:0f:a1:e9:03:a1:7f:01:19:94:a5:b5:36:ad:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340A9D577B868F9D853E54BF9FEA79E66E32C49F
        Validity
            Not Before: Sep 16 15:12:58 2026 GMT
            Not After : Sep 17 16:52:58 2026 GMT
        Subject: CN=E116278F6230ED04852D8DEFB265A8E20F34BD03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:a4:5b:ef:59:a7:39:12:c4:26:6a:25:de:
                    94:8a:15:f9:72:52:02:83:5f:86:30:b0:fc:c5:2e:
                    6d:ef:fa:43:86:b1:67:7b:4f:b2:df:ce:3c:71:5d:
                    6a:7b:33:a1:6e:ad:5a:38:4b:85:63:a4:f4:3f:1d:
                    71:45:16:d4:21:4f:bb:97:91:fa:6f:37:be:32:9c:
                    1c:71:d4:52:1e:41:02:b2:60:81:3a:6f:43:71:6a:
                    1f:fa:b6:7b:0f:17:18:d6:50:7e:21:39:65:22:da:
                    40:84:7d:d9:a7:25:a0:c4:f1:df:e6:95:f6:1d:bd:
                    cc:89:28:2d:68:00:cb:0d:80:3a:b1:a7:5e:df:d0:
                    e4:72:28:65:51:f3:4c:9f:ec:45:e6:5e:93:73:da:
                    0d:94:18:86:d7:e9:04:03:04:c0:70:19:36:6a:9b:
                    06:92:40:f1:97:1b:64:cd:fb:7f:f8:d6:5a:da:57:
                    41:a5:2c:d6:96:02:3d:5d:a8:a3:01:22:6b:28:6b:
                    b4:0a:b7:80:8d:6f:2e:1c:3e:4f:42:c1:a4:da:57:
                    eb:46:50:1e:64:43:c1:55:c1:76:5b:dc:92:07:72:
                    e3:26:a6:26:02:30:79:f6:44:0d:10:6c:8c:af:90:
                    d5:ad:06:ed:24:03:7b:2c:02:0f:e0:03:17:cd:b4:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:16:27:8F:62:30:ED:04:85:2D:8D:EF:B2:65:A8:E2:0F:34:BD:03
            X509v3 Authority Key Identifier:
                keyid:34:0A:9D:57:7B:86:8F:9D:85:3E:54:BF:9F:EA:79:E6:6E:32:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/340A9D577B868F9D853E54BF9FEA79E66E32C49F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:a5:83:c7:ce:b4:56:8a:71:fe:e2:d8:a5:7e:75:dd:fa:
         25:6f:54:ea:9d:a4:b6:81:fa:6f:a6:ca:1d:83:0e:e0:45:34:
         27:59:f8:a5:e2:5e:88:b3:f8:fd:1f:68:ea:d2:8e:95:88:eb:
         4e:d5:5f:c2:b4:42:97:c4:0e:1e:14:57:53:47:3a:77:1f:b3:
         36:54:37:01:67:4f:83:35:1a:7a:91:cd:90:53:24:5b:ba:12:
         05:ec:79:ac:13:60:f2:6c:8c:19:5a:9e:69:a7:11:9d:9d:6b:
         74:b5:71:c9:60:91:03:2f:d9:d3:ee:52:4f:20:3c:65:e0:08:
         d4:cf:c4:ba:8f:74:45:f5:d8:00:f9:65:fa:96:27:42:43:ca:
         22:d6:e9:e1:c2:7a:87:90:c2:2e:c8:82:62:3a:1e:c2:9d:e7:
         98:22:94:94:33:5a:51:e3:1e:6e:9b:21:c4:1b:ec:f4:47:8f:
         d4:6b:65:d9:c4:e9:b4:c7:f8:a7:95:4f:36:1a:f7:51:c4:2a:
         05:b6:99:fc:47:8a:e3:e3:ce:24:ec:f1:83:ef:66:f4:77:84:
         61:54:d3:ce:ec:d1:4b:6b:cc:76:ae:34:68:3e:86:2e:fa:d5:
         f0:e7:44:1e:81:82:d6:ed:2e:77:3e:8d:e5:6b:d0:f9:ac:a2:
         ae:d3:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 06:37:40 2026 by rpki-client