Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
File:                     A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft (raw, json)
Hash identifier:          Z0NBAGZEIDGLoCroQZaq7oTr4PsKF6ioSNNI97p6sps=
Subject key identifier:   F9:3D:0E:B8:B0:09:FE:F9:13:F9:11:E8:63:F6:C7:E3:52:9D:7E:B8
Authority key identifier: A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96
Certificate issuer:       /CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
Certificate serial:       2A20D23D30A8B6B845F168FFE6D254AEA732F6E8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
Manifest number:          9B
Signing time:             Wed 26 Aug 2026 02:19:20 +0000
Manifest this update:     Wed 26 Aug 2026 02:14:20 +0000
Manifest next update:     Thu 27 Aug 2026 04:58:20 +0000
Files and hashes:         1: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: BrEAiFV+dHptCn088oRLw0yFHBOD29YxvGJgz6+xTEs=)
                          2: A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl (hash: S4NWGwJ4f3eltMWBIsyv26EqlYJCaeVCCTWaYvTnw54=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl
                          rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 04:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:20:d2:3d:30:a8:b6:b8:45:f1:68:ff:e6:d2:54:ae:a7:32:f6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
        Validity
            Not Before: Aug 26 02:14:20 2026 GMT
            Not After : Aug 27 04:58:20 2026 GMT
        Subject: CN=F93D0EB8B009FEF913F911E863F6C7E3529D7EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f1:42:6b:ed:d0:24:8e:92:d5:eb:19:20:75:
                    31:7d:a4:21:49:1e:37:3a:cc:9b:0d:01:1c:a1:42:
                    44:b4:af:b6:ca:1f:a0:77:58:49:f8:02:7c:82:28:
                    dd:8b:b2:11:f4:56:5a:f0:44:41:1a:32:03:03:e2:
                    f0:dd:bc:b8:9a:f8:53:1d:4c:49:84:59:e0:97:ee:
                    7d:fb:b1:39:2c:bd:7c:c3:3d:04:a4:7b:0b:ec:10:
                    a8:49:c4:5f:f0:44:c2:25:fa:26:bd:dd:41:37:0e:
                    c8:d6:75:14:e5:55:9d:b4:0d:7b:7d:53:e3:e5:4d:
                    21:2e:ad:eb:44:7f:81:60:e1:9e:84:7a:ec:62:76:
                    81:4b:34:8e:23:cb:89:49:40:aa:9b:01:e3:d4:e2:
                    d0:3f:df:82:cb:dd:56:e9:16:d9:ca:e9:89:35:c1:
                    ed:30:4a:ad:8d:05:07:38:dd:21:23:3e:5f:63:46:
                    ee:bf:0e:72:d5:ab:b9:fd:83:0d:4a:e2:85:a7:97:
                    93:27:e3:93:3d:87:d1:2f:6d:ee:4a:2a:90:86:c7:
                    05:85:95:c3:01:37:a7:cc:f0:37:07:ac:3d:d4:7f:
                    70:dc:81:2a:4b:e6:6a:0b:60:05:f3:71:ae:1e:4d:
                    60:00:b1:17:13:54:7f:fe:c0:7f:95:0c:cb:75:be:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:0E:B8:B0:09:FE:F9:13:F9:11:E8:63:F6:C7:E3:52:9D:7E:B8
            X509v3 Authority Key Identifier:
                keyid:A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a7:42:04:48:9e:6f:6d:cc:c7:6b:95:97:23:ad:36:8d:46:
         8b:4c:36:40:1e:00:25:eb:a1:b5:ea:2b:08:37:83:c9:07:37:
         1e:e9:be:26:58:e7:46:0c:30:a1:a4:fc:0e:f8:7d:67:48:48:
         69:d4:52:db:61:06:ae:e6:a5:f1:a5:eb:50:d6:2a:77:ea:1a:
         b0:14:2b:2e:bd:1d:64:58:d0:39:eb:a0:91:16:12:e8:23:c6:
         89:02:ff:71:8e:e9:20:79:58:0c:a5:9c:4c:42:fa:aa:fe:02:
         82:0d:fa:e0:89:c8:b8:d0:e8:00:e4:05:0e:96:96:58:40:b4:
         80:77:65:a6:ba:a0:70:f4:b6:a6:47:7f:a2:63:4a:12:b3:04:
         c6:f8:df:c3:f8:70:5e:26:48:e9:4c:48:4b:68:bd:51:56:af:
         64:c6:50:9d:bf:7e:1f:98:0a:ee:28:d1:21:29:86:74:fc:0d:
         d4:e0:5f:bc:a4:0c:61:0b:cf:08:06:e1:6f:ca:31:0d:f4:91:
         ff:ab:3b:c6:a0:5b:36:7a:92:f5:ba:8e:0d:2b:25:aa:89:f7:
         04:de:aa:a5:c0:2c:a2:35:b6:d0:22:2f:05:32:17:8e:53:56:
         6e:05:56:94:3c:22:66:4f:d5:5e:59:37:96:38:54:4c:41:62:
         bb:d3:af:5a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKiDSPTCotrhF8Wj/5tJUrqcy9ugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJDQTI2MzZEOTBFQ0VFMDMwODAyOTRGNThEOEFCOEEx
QjM0OTk5NjAeFw0yNjA4MjYwMjE0MjBaFw0yNjA4MjcwNDU4MjBaMDMxMTAvBgNV
BAMTKEY5M0QwRUI4QjAwOUZFRjkxM0Y5MTFFODYzRjZDN0UzNTI5RDdFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf8UJr7dAkjpLV6xkgdTF9pCFJ
Hjc6zJsNARyhQkS0r7bKH6B3WEn4AnyCKN2LshH0VlrwREEaMgMD4vDdvLia+FMd
TEmEWeCX7n37sTksvXzDPQSkewvsEKhJxF/wRMIl+ia93UE3DsjWdRTlVZ20DXt9
U+PlTSEuretEf4Fg4Z6EeuxidoFLNI4jy4lJQKqbAePU4tA/34LL3VbpFtnK6Yk1
we0wSq2NBQc43SEjPl9jRu6/DnLVq7n9gw1K4oWnl5Mn45M9h9Evbe5KKpCGxwWF
lcMBN6fM8DcHrD3Uf3DcgSpL5moLYAXzca4eTWAAsRcTVH/+wH+VDMt1vlWRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+T0OuLAJ/vkT+RHoY/bH41KdfrgwHwYDVR0j
BBgwFoAUosomNtkOzuAwgClPWNirihs0mZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWNhY2NmMjYtODM1NC00OWM4LTk5OGEtMGE0NGE2NGViOTA5LzAvQTJDQTI2MzZE
OTBFQ0VFMDMwODAyOTRGNThEOEFCOEExQjM0OTk5Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BMkNBMjYzNkQ5MEVDRUUwMzA4MDI5NEY1OEQ4QUI4QTFCMzQ5
OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNhY2NmMjYtODM1NC00OWM4LTk5
OGEtMGE0NGE2NGViOTA5LzAvQTJDQTI2MzZEOTBFQ0VFMDMwODAyOTRGNThEOEFC
OEExQjM0OTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG6nQgRInm9tzMdrlZcjrTaNRotMNkAeACXr
obXqKwg3g8kHNx7pviZY50YMMKGk/A74fWdISGnUUtthBq7mpfGl61DWKnfqGrAU
Ky69HWRY0DnroJEWEugjxokC/3GO6SB5WAylnExC+qr+AoIN+uCJyLjQ6ADkBQ6W
llhAtIB3Zaa6oHD0tqZHf6JjShKzBMb438P4cF4mSOlMSEtovVFWr2TGUJ2/fh+Y
Cu4o0SEphnT8DdTgX7ykDGELzwgG4W/KMQ30kf+rO8agWzZ6kvW6jg0rJaqJ9wTe
qqXALKI1ttAiLwUyF45TVm4FVpQ8ImZP1V5ZN5Y4VExBYrvTr1o=
-----END CERTIFICATE-----
Generated at Wed Aug 26 12:17:55 2026 by rpki-client