Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
File:                     913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft (raw, json)
Hash identifier:          V4NEqFZ+xtaV27xjJkdrZ+oM23+pJfaAEtkzKlh8SJM=
Subject key identifier:   13:56:DD:0D:CF:9A:63:36:C1:4D:15:65:C9:86:08:3F:AF:E3:D0:91
Authority key identifier: 91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41
Certificate issuer:       /CN=913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41
Certificate serial:       38C17EA0204EE966E0BA446DF30803176E123336
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
Manifest number:          A3
Signing time:             Tue 01 Sep 2026 02:27:02 +0000
Manifest this update:     Tue 01 Sep 2026 02:22:02 +0000
Manifest next update:     Wed 02 Sep 2026 05:16:02 +0000
Files and hashes:         1: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: KARQhCrE6x4QilAtBVcaX71G9RZ5SUbJQcCY3G68Dvc=)
                          2: 913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl (hash: ClTJu37uKZRzD3xvbnmTN1MfHfdZNB/hierW+Mg3agA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl
                          rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 02:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c1:7e:a0:20:4e:e9:66:e0:ba:44:6d:f3:08:03:17:6e:12:33:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41
        Validity
            Not Before: Sep  1 02:22:02 2026 GMT
            Not After : Sep  2 05:16:02 2026 GMT
        Subject: CN=1356DD0DCF9A6336C14D1565C986083FAFE3D091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:50:cf:3f:00:e9:ca:ca:b0:74:4d:5c:9e:
                    56:90:5f:97:2f:02:f1:31:28:8e:c9:9c:09:4e:c9:
                    7c:5b:1d:d6:27:68:a5:7b:95:e7:b7:0c:8e:b5:59:
                    b2:39:7b:3e:af:07:b0:76:94:f3:69:20:77:48:40:
                    49:c8:28:4f:f8:f4:7a:ec:f0:8e:18:dc:90:d4:21:
                    f9:ba:e6:1f:d2:7e:ee:2d:fd:36:42:ff:40:2e:44:
                    83:87:7e:e0:fb:10:59:03:9e:53:4c:ce:87:5e:1b:
                    a1:88:c2:ba:6f:7a:9c:cc:dd:a7:54:a7:4e:2c:62:
                    7e:a5:25:6f:00:85:99:27:b6:23:7c:a1:c4:57:7d:
                    85:9f:a4:66:f1:d6:7f:0e:6e:c1:84:86:60:37:c4:
                    5c:fc:ab:b6:c0:57:af:bf:ba:47:50:da:57:b2:0e:
                    d3:ff:a3:9f:9c:6c:da:96:c9:0e:84:0e:ee:80:5a:
                    6a:8f:f1:31:9a:52:7f:1a:ea:54:2c:a1:4e:8d:28:
                    72:e9:43:2f:1c:ad:d0:9c:ec:d6:6d:bd:e8:60:dd:
                    0c:11:6a:ba:c7:e7:16:31:16:be:ba:b4:c0:35:f7:
                    27:7c:ae:2e:c3:36:c2:fb:cb:39:44:38:f9:99:21:
                    a5:5f:b7:5f:9f:7d:19:51:a7:76:4f:6d:bb:00:06:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:56:DD:0D:CF:9A:63:36:C1:4D:15:65:C9:86:08:3F:AF:E3:D0:91
            X509v3 Authority Key Identifier:
                keyid:91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:95:5e:42:52:4e:ab:76:f2:44:2b:a3:75:91:45:c9:4d:8f:
         e8:01:46:b2:31:e2:d7:8e:90:03:ca:10:43:85:ec:cb:58:fd:
         5d:fa:48:9b:4f:ac:34:fc:ff:28:cb:ae:27:31:0f:a7:b2:db:
         64:8f:1f:48:69:14:f6:43:c2:8b:94:a1:74:c9:22:af:a3:c2:
         0b:31:60:e1:45:bb:e4:c3:45:24:8c:18:5b:68:74:0c:0f:0a:
         d5:52:4a:2d:d0:c3:5e:82:4a:ac:d1:8d:18:ae:15:f9:53:84:
         e2:cf:59:a8:79:a7:b1:14:6d:55:f2:d8:5f:47:73:42:fa:f9:
         36:d8:ee:8e:be:d3:b7:d1:60:9a:47:b1:ac:64:a4:b3:67:34:
         9d:f5:e4:e3:3a:13:f2:60:69:15:44:66:8d:33:b9:8c:11:5e:
         1a:67:98:85:b6:b7:79:a8:44:64:72:2a:de:a6:84:37:fb:88:
         dd:4b:c1:b0:18:57:a1:06:ef:5c:ef:14:a5:08:66:69:ed:9c:
         22:35:93:58:9e:d0:ad:f9:b3:eb:be:4e:7e:c0:b3:cc:21:80:
         67:ad:26:7e:0c:62:d9:10:e4:cb:8b:2d:11:56:56:ce:64:65:
         d7:62:85:80:61:e1:07:e8:26:d9:e5:f2:39:d3:75:92:5e:64:
         a6:36:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:21:42 2026 by rpki-client