Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft
File:                     D697630349B220DF8CC6B12F2E1478386BFA976D.mft (raw, json)
Hash identifier:          WBrcBMzt5mE/ONrKQlh5dIg2sGp/cVcyCdX9oBOvcR0=
Subject key identifier:   7E:92:59:D1:8B:B2:2F:F0:45:B4:C7:63:A7:EA:C0:C8:43:B0:FE:25
Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D
Certificate issuer:       /CN=D697630349B220DF8CC6B12F2E1478386BFA976D
Certificate serial:       52533E6BF69BC2C1D36CF13766CF904717891C07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft
Manifest number:          B8
Signing time:             Thu 17 Sep 2026 02:06:09 +0000
Manifest this update:     Thu 17 Sep 2026 02:01:09 +0000
Manifest next update:     Fri 18 Sep 2026 05:55:09 +0000
Files and hashes:         1: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: 6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=)
                          2: D697630349B220DF8CC6B12F2E1478386BFA976D.crl (hash: RO2YFhYCbSHI5AiEW/BNzM7vveq9RfmroX1ac6/1IkM=)
                          3: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: 1CtwSZrdYmNAUlXmKjVFOdbMEpxyH9OiC6UXCxpqUZc=)
                          4: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: CWiHRINpO5Qg8fxSyLkjZNquyJPum3NXHas+YJralQU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl
                          rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 05:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:53:3e:6b:f6:9b:c2:c1:d3:6c:f1:37:66:cf:90:47:17:89:1c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D
        Validity
            Not Before: Sep 17 02:01:09 2026 GMT
            Not After : Sep 18 05:55:09 2026 GMT
        Subject: CN=7E9259D18BB22FF045B4C763A7EAC0C843B0FE25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:ff:c9:c9:94:f0:4f:24:21:28:bf:d3:64:
                    16:9d:77:93:ab:79:bf:a2:bd:63:b3:c8:d8:07:32:
                    d0:24:c8:c8:2e:02:9d:01:ac:b1:97:73:be:fa:02:
                    60:57:22:7c:19:2e:99:ce:d6:3c:82:d6:ee:99:55:
                    54:00:de:d3:fc:ea:12:12:62:59:27:2e:aa:7d:9b:
                    17:f4:89:60:c6:0b:73:c1:3e:2b:44:7f:d6:14:59:
                    ad:f4:1d:87:ba:3b:9c:83:64:3f:66:88:e1:6e:ab:
                    d5:30:71:21:dd:62:bd:43:35:9f:cd:87:b8:eb:b0:
                    b1:17:5d:7d:90:8e:6d:68:82:15:f8:0d:0a:31:8e:
                    a5:82:82:56:e5:cb:84:f5:0a:4f:bb:18:e4:cf:fa:
                    2d:d4:cb:d3:80:a4:5f:37:02:20:e0:04:ff:10:12:
                    80:c5:b6:f8:26:b4:5c:b5:90:b2:94:53:13:f5:33:
                    22:a7:2f:f3:e1:1b:08:e5:5d:3f:31:38:4b:ab:94:
                    73:c6:f5:c6:cc:4f:8d:ef:51:66:db:85:e8:f6:a3:
                    f5:10:58:93:47:4f:22:04:85:f8:80:e1:05:3d:62:
                    4d:d6:fa:9a:1f:3b:97:01:6c:a6:cf:63:1b:af:81:
                    d2:1f:03:73:ec:3c:e9:36:f7:fd:21:4b:f2:aa:4a:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:92:59:D1:8B:B2:2F:F0:45:B4:C7:63:A7:EA:C0:C8:43:B0:FE:25
            X509v3 Authority Key Identifier:
                keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:97:23:38:e7:f4:11:40:f8:2e:e6:5a:09:b8:f3:3c:f5:
         57:b6:cb:97:3b:97:bf:b2:91:85:ef:08:45:cc:02:41:55:68:
         16:32:61:5f:75:e3:24:83:70:cb:64:5c:7e:dc:33:b6:b2:31:
         91:ee:27:f7:ab:40:9d:5c:8f:0a:0c:7f:a2:db:16:cf:e2:06:
         b4:c9:e6:29:71:4b:1e:33:f7:e1:0c:d0:2e:d1:83:1c:c9:41:
         1c:3e:23:2d:10:e9:cc:b7:15:c2:10:c8:06:79:22:74:bc:da:
         88:64:3f:19:e1:31:61:29:07:79:db:17:78:cd:ae:74:9b:ce:
         20:84:a1:c0:fe:b9:02:9e:36:ef:f8:9d:0c:55:5a:a8:d3:12:
         45:c8:95:ae:76:ce:f5:fe:11:7e:7c:4f:c6:ba:cb:90:5f:23:
         bd:93:8c:4f:d1:bf:6f:8b:54:21:5c:28:58:6f:61:7a:4a:42:
         ad:e2:df:41:bd:8c:5e:bb:14:79:4f:b9:32:77:b6:c7:d0:58:
         06:15:ed:83:f5:5f:2a:22:8e:76:de:dc:99:f9:31:c1:9a:05:
         57:40:3c:07:d4:92:25:de:2c:82:e9:9b:67:fe:e9:10:24:83:
         db:f6:09:58:b3:5c:7a:7f:c1:74:50:d6:a4:fe:b1:7c:06:48:
         ca:fa:1d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:56:00 2026 by rpki-client