Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft
File:                     E48354BE9F141988ABFB54173029C4000CF9B18B.mft (raw, json)
Hash identifier:          2mDbJnFiYGmXL1qUx/3p5QFSvAw/VgLhG0dUBzRQTck=
Subject key identifier:   75:1B:96:35:B2:52:68:A4:58:B0:DA:20:32:49:03:D6:32:5F:63:97
Authority key identifier: E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B
Certificate issuer:       /CN=E48354BE9F141988ABFB54173029C4000CF9B18B
Certificate serial:       40C806E5DCA5BF524CC97541B58125DB9F798029
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft
Manifest number:          A2
Signing time:             Mon 31 Aug 2026 13:40:53 +0000
Manifest this update:     Mon 31 Aug 2026 13:35:53 +0000
Manifest next update:     Tue 01 Sep 2026 16:40:53 +0000
Files and hashes:         1: 3130332e3132352e3130342e302f32322d3232203d3e20313534343130.roa (hash: eCyAxg6TMb3y8UNuAa8VAwHZx8s/p2Q+nPiDr2+G5JM=)
                          2: 3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa (hash: c0s6g/0N7Mpt32/FZfwmkqY2FOP2/z8Sv0VSvzKlGpQ=)
                          3: 3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa (hash: ORI8ZzHMIQWit79i41H+hRQktja+THpVFHQP7zI/W24=)
                          4: 3130332e3132352e3130372e302f32342d3234203d3e20313338313030.roa (hash: ojp9gB1BKHELPh6AJXnC9Qiad2EUw2t4WqRumYJpvoo=)
                          5: 3130332e3132352e3130342e302f32322d3232203d3e20323135373237.roa (hash: 03NYkPPLVfBPNGc3GX0j/D9a1kQon+xDAfJQkUY2WfI=)
                          6: E48354BE9F141988ABFB54173029C4000CF9B18B.crl (hash: h4R5O1UDEaFxHsIy3LVxh3Q0E/Eq8HSA0DYLdsOou18=)
                          7: 3130332e3132352e3130352e302f32342d3234203d3e20313338313030.roa (hash: stWnJUHdeZ0lpj6XHoDiqPJcFNoLD1Jb0lqEc/eqrQc=)
                          8: 3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa (hash: F+YbRAk+0CxM0DS0hqXRpMyQpkrAk0n0dHGfND3TquE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl
                          rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 16:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c8:06:e5:dc:a5:bf:52:4c:c9:75:41:b5:81:25:db:9f:79:80:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48354BE9F141988ABFB54173029C4000CF9B18B
        Validity
            Not Before: Aug 31 13:35:53 2026 GMT
            Not After : Sep  1 16:40:53 2026 GMT
        Subject: CN=751B9635B25268A458B0DA20324903D6325F6397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a1:7c:ae:c8:70:bc:9f:ed:dc:03:3a:b6:67:
                    98:38:64:12:47:01:c5:1d:c7:dd:bc:24:71:60:1a:
                    b7:53:af:66:79:ac:24:30:cb:b9:1c:fb:20:09:8d:
                    a7:e5:51:ed:84:a9:b5:24:30:9b:a0:ed:31:91:d6:
                    fb:05:c5:71:46:a3:fa:d1:65:e3:05:f0:7d:b6:33:
                    45:5b:d7:11:79:14:f1:4c:4c:d9:23:56:46:52:fd:
                    8c:75:17:0d:4f:6a:ed:77:99:e1:c2:8c:af:e5:5c:
                    d9:9d:b0:0a:e2:d5:33:9e:e2:a3:b8:77:3a:f2:8c:
                    17:28:9e:33:c8:1f:93:3b:b9:9d:29:66:e6:81:8c:
                    eb:fe:1e:80:2f:ad:3c:91:f9:fd:75:11:05:0c:31:
                    77:83:27:7a:18:f2:5c:e9:9e:b2:09:ee:89:80:05:
                    89:bd:62:f7:c5:c5:fa:6c:9d:7c:ca:ac:4c:96:b9:
                    1e:9d:92:c7:91:6f:b7:2e:42:af:1a:9d:23:bd:f6:
                    c4:1e:90:96:cb:28:75:91:f6:c6:1d:ec:d6:b1:e2:
                    73:b8:5a:8e:2d:ba:b6:e8:c8:58:20:f8:91:8c:ef:
                    48:e5:a8:62:b6:70:f1:53:22:1f:7f:ed:76:76:d9:
                    df:7c:a3:4b:1a:6f:e4:fe:5b:09:ea:af:42:c9:11:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1B:96:35:B2:52:68:A4:58:B0:DA:20:32:49:03:D6:32:5F:63:97
            X509v3 Authority Key Identifier:
                keyid:E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:e6:a9:5f:69:12:59:00:9b:c2:1e:b1:48:1e:43:12:98:
         49:d3:9e:68:a9:d3:c6:25:4e:84:6f:6d:db:9a:2c:9b:8e:de:
         39:64:8c:72:65:05:ec:a2:9f:59:75:3e:b9:3d:8f:80:ca:ff:
         9b:0c:4a:98:60:81:40:73:54:49:75:ee:ff:8d:0d:12:de:17:
         ed:a5:e4:4f:47:7e:a0:b9:46:1f:82:0f:f2:df:62:ef:23:d7:
         37:37:df:65:13:e2:78:4f:44:1c:a9:c2:f9:07:6c:63:c2:44:
         4c:32:d5:1b:96:b8:24:00:67:36:fc:ce:63:a9:44:62:0d:ee:
         3e:a9:a9:c6:a0:61:e9:95:a3:c1:09:f4:48:a6:d1:82:62:61:
         6c:42:3a:98:b5:63:bb:22:6f:a7:08:55:1e:ad:be:76:7e:39:
         ba:b4:04:e3:89:98:75:c8:55:45:75:01:ed:70:8e:c2:01:b3:
         00:03:ba:05:ea:ab:82:d4:05:2e:0e:8c:50:5d:4b:2d:3e:55:
         09:ee:b6:6d:b3:c7:6b:d4:48:26:2e:af:10:fd:70:e6:87:b5:
         15:aa:96:05:00:c3:f0:da:7b:e2:b2:19:42:d9:e3:fe:05:21:
         c4:bb:a6:4d:93:cd:d1:c0:09:f8:7b:6f:be:8e:e9:49:07:09:
         7a:9f:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:46:23 2026 by rpki-client