Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
File:                     E6B678AE8DC843399DF534610764D871D4D698D8.mft (raw, json)
Hash identifier:          jO1YBWX6O6Sa+NNrN60V4HTr5Ev8w9ZLjDD9KcRhwow=
Subject key identifier:   02:C2:4B:67:FE:BF:CF:C6:37:2E:C5:E9:AC:F3:D2:30:1D:DC:C1:F7
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       2A5FC8AF307BA0C090D721BC1C123C721632263B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
Manifest number:          A4
Signing time:             Mon 31 Aug 2026 10:52:41 +0000
Manifest this update:     Mon 31 Aug 2026 10:47:41 +0000
Manifest next update:     Tue 01 Sep 2026 11:33:41 +0000
Files and hashes:         1: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: DpDzPCK3khv6m/KkGe22KTbSHzzD0zpRKERpB4+hT3U=)
                          2: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: R8XsLLiQgeiVikjmq/bw0lBjlifQX0sveTtDTyBFbNw=)
                          3: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: iSYg7oaleP+0hM8Q7VQjTSubDCUgtN9XxBOQbAjqvPc=)
                          4: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: XjCY9n44ulh5fDHo5HrcyNaBmz9apAbxyIML1BofSqw=)
                          5: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: UEjlhJPDkogb1qqoZt4nQF0B03NRjWPLFpd+k3aP3g8=)
                          6: 3230332e38342e3134302e302f32342d3234203d3e20313338303737.roa (hash: YwE5fGvWPY3YshdbLzQTeRk4XV9oJUzj/74z6hxtryo=)
                          7: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: S0w6oPbGGw7ksXZ7pizDlEqFJpkKbKKbzIkgqnZ2JUY=)
                          8: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: hHOpQuaz1NpiD38wKgMW7/sVdao5mcNb1qjoiXtjt2M=)
                          9: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: Dgwgj5jmSf0MitHLxiLeWJGMcOFeVudcVpq/Mh8BAbU=)
                          10: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: n5VI2ALwTByQW6MDpSlHEED2UTLT+bloshp6A2FsEGE=)
                          11: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: +Dqe2NjVz3kFYrpCmrt1Ndb2xcIWymGbxC/ShLcbqm4=)
                          12: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: Z+nNi7ze6kTiTVkT6NIRGLRwkZjNL704bTyzTsqTbiU=)
                          13: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: KKvEA+saL7OCLV4/t/DChshATtE9irWFXkl6IKtk9rE=)
                          14: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: AEVg+7i58qruunXCeLGmzypDAO404wrt2O3S9y5evhc=)
                          15: 3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (hash: jWQefS3Ey1XKZj63Vgm7X9Au391EQXnRCYqwez8oUUU=)
                          16: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 4OT1Vj+gmmnFpwwDPh6x9/kISmTU11bxM2EYiVlOge0=)
                          17: 3131302e34342e3136382e302f32342d3234203d3e20323133363037.roa (hash: DmoH8opGJbRaKyp4x9c9EP7+HF39t1DV3Qhv/2VdzFw=)
                          18: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: gDMW2YhmbSmpH/joH4guJ0u/x2YZTaH6K5yf8b7OKLc=)
                          19: E6B678AE8DC843399DF534610764D871D4D698D8.crl (hash: hxnCdy2MzXuAZxV7JR0ZcNmFVUx1m+CJwC339sPy13k=)
                          20: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: EAVIC7zwho1aCdIDVakXoAbpjUpz2w2Y3LxfSakp/FM=)
                          21: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: olFsAwyIOAGRQu5Xq+Q00jEmusnWakBl1wyW6l3O+ek=)
                          22: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: V/RNPYsKxKgz/wwuGUcHBFCGmp8H/G2MrFtMGtEWP6s=)
                          23: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: 5O7GlJY194SnO8ciNiDYBvW3zLSQrHd5KYDUoQ4Khw0=)
                          24: 3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa (hash: Qlk0oD+wYGVfdAwJsFbQ75XWp7ZZAdoIXaQP7ZyAga4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 11:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5f:c8:af:30:7b:a0:c0:90:d7:21:bc:1c:12:3c:72:16:32:26:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: Aug 31 10:47:41 2026 GMT
            Not After : Sep  1 11:33:41 2026 GMT
        Subject: CN=02C24B67FEBFCFC6372EC5E9ACF3D2301DDCC1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d9:26:2e:77:2e:9d:9a:86:c5:43:c2:03:78:
                    c4:0f:f1:89:e4:84:27:5f:df:8d:12:05:c5:48:31:
                    ec:bb:5f:d8:5e:d6:e9:5b:e5:d4:53:07:43:a0:95:
                    f2:68:bb:2a:2d:b3:57:ea:91:bf:e0:cd:8a:d2:ae:
                    33:d2:6c:58:f5:a8:10:a6:56:75:10:d5:08:ae:f1:
                    d3:50:a8:9f:00:21:40:fb:46:23:13:21:19:2c:d6:
                    6c:ea:bb:f2:71:b9:17:c9:32:a1:13:fe:fe:fa:97:
                    64:cf:d6:7d:b5:3c:d2:08:42:e9:bf:7d:9a:2d:2c:
                    7f:c6:77:f7:9f:24:d2:e4:62:42:aa:2f:7e:cf:0d:
                    d4:3e:6a:1a:4d:bb:a0:36:9b:0e:2e:f2:0b:a0:35:
                    32:b0:d6:7b:3a:18:73:f9:18:a6:37:13:ce:9d:e7:
                    4c:98:04:f0:65:da:d5:c5:23:ba:63:fe:51:fb:41:
                    ae:aa:07:a4:f5:10:eb:cd:ba:33:3c:8f:fb:7b:a4:
                    df:c9:0c:f7:ba:dc:53:f5:cc:85:17:d3:78:3a:f9:
                    d8:3e:cb:d4:90:a7:0d:b0:25:2f:de:9d:89:f4:00:
                    d7:e7:13:3b:01:1e:df:eb:a3:04:3d:ec:d3:f8:46:
                    81:46:29:5e:b3:31:1b:c3:33:96:27:d3:84:e8:c6:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:4B:67:FE:BF:CF:C6:37:2E:C5:E9:AC:F3:D2:30:1D:DC:C1:F7
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:71:75:1b:47:f1:b0:26:57:05:90:6f:ae:60:60:2b:c0:f1:
         94:f8:28:56:35:b3:b7:d9:b1:c5:a9:92:e3:27:0e:98:9e:94:
         35:7c:10:73:15:42:fb:52:34:90:78:fd:bc:67:b1:30:a9:08:
         d8:c5:6d:0b:22:c1:d0:34:4b:f4:b8:b9:f8:26:01:74:6c:62:
         cc:aa:b4:af:7c:fb:57:10:26:0c:fb:02:03:8b:9c:0d:a5:ca:
         77:ce:49:88:9e:23:60:92:1e:98:6e:f2:84:c9:68:c1:18:1d:
         cc:94:a3:6f:50:a2:f0:98:5e:2e:8f:e5:c0:c2:bb:b8:58:79:
         60:bf:c1:ca:d2:66:fa:b1:49:69:12:ea:ef:2b:f9:ff:8e:49:
         3b:fa:86:73:90:0d:87:3d:78:c1:ae:1c:56:c4:74:3f:f1:99:
         6a:23:c2:43:07:0f:9d:25:2a:5c:29:be:2b:d7:50:bd:e5:ba:
         50:01:34:30:83:4e:16:1b:44:ed:21:df:38:25:68:29:d3:6f:
         40:23:72:31:e9:bf:b1:dd:39:6d:10:64:54:2c:02:5b:94:19:
         b8:f9:1f:08:9d:e0:3f:60:c8:e5:de:79:ea:7c:81:a1:31:84:
         b4:c4:f7:fc:b7:21:eb:21:3b:cd:bb:70:34:3e:cb:45:ab:33:
         88:94:7b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:18 2026 by rpki-client