Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
File:                     3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft (raw, json)
Hash identifier:          Hod6PjtsNqf+Sne5BStBEC+qUu8beq2gln+3/ZVSKNU=
Subject key identifier:   EE:38:47:B1:B1:B1:4B:A9:37:78:54:BA:FD:5D:C8:A0:1D:38:51:FD
Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5
Certificate issuer:       /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
Certificate serial:       42734E1585B656FD49E196492FF0ED1AFC1F67B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
Manifest number:          8C
Signing time:             Fri 14 Aug 2026 07:29:28 +0000
Manifest this update:     Fri 14 Aug 2026 07:24:28 +0000
Manifest next update:     Sat 15 Aug 2026 10:20:28 +0000
Files and hashes:         1: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: s1aR5khIH0XJ6oiD7CdhPXEq4FMhwYeqfSj1qAtdtp8=)
                          2: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl (hash: 92/5V9ZBM9b02YnZTiUABn0RV2buiGifTRqVESrLDGU=)
                          3: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: VUDQpItd+3mQ5FEfCwJZEx6NgUwPRML1HHBOxBoEKaQ=)
                          4: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: BTtVqrQ3GrSqxbnSLNvAGyR9geHV66mQRLtc+yOJ48k=)
                          5: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: qy2wfZHRdLfbkgw90ebnyPI4997KQ+iwXU8qrVLm8HY=)
                          6: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: LghNes9jQ+3fERFGIYDHSXbbc4nSMYy8cw//lu9REdQ=)
                          7: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: Tjj+OKDjiFtagqUQK1BdjUoLQb0lOV71psKcaxKiSjc=)
                          8: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: KTTzfIOZDP+sCVCw8zzqOhb2CjIcT0YOn1P5NcQm3jI=)
                          9: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: doOzsTzSE36mgoSIEk74sHNoCKgIA+A/ijb08tABwGQ=)
                          10: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: S1uWt6Gd7lDlIkiaquvYF6It5VJtoeKCsNPdN2cYPYo=)
                          11: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: PbuDJSAQXqe+YbQYZ8YEK8+HHcBku/MMl/4ow2T+fZM=)
                          12: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: v0zolYiVBPX0V+L+LtqJkU2q6rbdcBpLF4u+nGbvKcY=)
                          13: 3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa (hash: 4glWDbg2cthHWl40jAdpTpvdVV83NH6qF/yYaREdwKA=)
                          14: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: ZmGgo3jaHXdx58TAmRSTnCCto4KpyY5aAzsNgTuNtrg=)
                          15: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: UGlFvxlrSD3eWOHFR+RqkvAQb3F8Wtbfd776kf/FNfc=)
                          16: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: xOmSeDJ7iA+Tnkm5H4X22K/meaXh6wCiDIBdj1esOYs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl
                          rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 09:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:73:4e:15:85:b6:56:fd:49:e1:96:49:2f:f0:ed:1a:fc:1f:67:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5
        Validity
            Not Before: Aug 14 07:24:28 2026 GMT
            Not After : Aug 15 10:20:28 2026 GMT
        Subject: CN=EE3847B1B1B14BA9377854BAFD5DC8A01D3851FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:cc:a2:06:79:55:4f:e8:10:10:bd:e8:7e:
                    88:d9:24:eb:d0:a1:a6:b9:6a:5f:16:73:02:c4:d0:
                    ac:b5:cb:d1:c0:c2:c0:32:05:38:61:43:14:da:27:
                    68:0b:af:a3:27:f9:07:39:a1:ec:ba:a9:ae:29:ac:
                    93:54:e1:50:92:79:48:b6:b9:40:f5:14:7a:2f:5c:
                    3a:ed:7e:30:07:68:43:9f:2a:6c:ec:28:9e:32:d8:
                    10:96:6e:33:fd:bb:dd:c5:82:7e:1a:35:0b:15:b9:
                    48:0a:9a:77:d0:35:20:59:4b:9f:65:25:c7:30:fb:
                    a6:2e:6a:ff:b9:e0:2e:b1:10:a7:f7:c7:a1:a8:68:
                    27:4e:c6:74:95:e9:8f:02:b0:40:32:16:a1:b5:cf:
                    9f:73:9e:22:7d:cc:58:5b:7f:2d:d8:6e:5f:8f:3a:
                    87:fa:bd:ec:24:c0:94:47:81:a8:f9:de:09:6b:de:
                    68:d6:95:8c:4b:53:4c:b2:a7:0b:36:3a:82:a8:61:
                    70:a3:2b:3f:5a:88:85:0c:21:9c:47:b3:57:35:f4:
                    9f:9c:af:54:e5:c0:61:10:fc:f1:5a:01:4b:46:86:
                    bf:61:a6:c3:cd:d6:bf:13:7d:b0:ad:9f:d0:e4:9e:
                    2c:98:6f:b6:cf:d8:04:35:82:10:98:8c:c3:3d:db:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:38:47:B1:B1:B1:4B:A9:37:78:54:BA:FD:5D:C8:A0:1D:38:51:FD
            X509v3 Authority Key Identifier:
                keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1f:06:35:b0:63:67:43:17:19:a1:a9:bd:3c:66:03:a6:75:
         f5:8b:9b:72:e7:9c:f7:d0:00:d8:7e:0d:bb:93:b5:30:a0:2f:
         51:6b:fd:b9:d6:4f:79:02:06:26:01:62:81:30:6d:bc:43:b2:
         43:35:e7:d6:b8:57:31:0a:62:6a:87:08:ae:f1:44:9a:cb:eb:
         78:16:a2:3d:94:ce:93:7f:d9:ff:24:98:f6:0f:ca:b2:cf:dd:
         10:5e:a6:2e:af:ad:1a:87:1a:ae:a0:ed:46:08:17:9b:8a:47:
         0b:27:84:59:b8:77:a9:88:de:32:a9:94:c5:c8:93:ce:79:99:
         44:79:16:52:82:f7:14:bc:cf:f6:c0:56:fa:b0:74:61:be:44:
         80:94:98:9a:ee:ef:e0:19:ba:eb:73:24:26:a8:ca:ae:44:fa:
         16:80:b6:f1:61:e4:55:6a:ba:aa:eb:89:e3:8e:27:83:1e:56:
         c0:4c:06:50:8c:98:77:39:38:36:5b:ff:31:69:40:33:d2:2b:
         e5:21:93:86:18:a4:ae:45:42:16:0f:aa:e2:c2:18:1e:54:df:
         26:87:f6:85:1a:ed:a6:9f:13:19:78:fb:77:24:67:b1:5f:75:
         44:3a:4f:be:48:3f:58:93:d5:fd:80:55:b5:07:66:b7:e3:03:
         b9:41:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 15:16:03 2026 by rpki-client