Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
File:                     8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft (raw, json)
Hash identifier:          LCqv+L72+IBLco0PNsRuSU2EdILHp2cXNi5z1WPSfvs=
Subject key identifier:   02:EA:CD:9C:75:0C:B8:14:EC:B2:CE:79:8F:69:F9:F7:D1:0A:6C:42
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Certificate issuer:       /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial:       3433DAB2676B5B82BB823E520E5D64047A1AD2EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
Manifest number:          B7
Signing time:             Thu 17 Sep 2026 02:06:11 +0000
Manifest this update:     Thu 17 Sep 2026 02:01:11 +0000
Manifest next update:     Fri 18 Sep 2026 02:55:11 +0000
Files and hashes:         1: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g7QAve2M16WshAcdg9i1WymFPs4Va3AKdhm/B6BQFgo=)
                          2: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=)
                          3: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jIKXa26EJIti6zoWk205tbdwHju56rwlPhb8cVXzYUE=)
                          4: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl (hash: KFqdEoax9sdIVwp9P1quKi2Q0DGmaY21/7OJ1Ct06FY=)
                          5: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: GYk5hEqp+MhM9Zsf+DSNQ9u0qzXbQ2dCA494BagxRaI=)
                          6: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: Nf366z7083odp7IR4PDkJ5GuIfcHkTji6MKj/a8Q65k=)
                          7: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: fRp9hKSeiIMGeJ+MieNF5m7UkyEfR2UYlACEnVASLW0=)
                          8: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 97BqGszfsrGqjj4tAigv9wxBSBeiY8MNbOvskTpViDQ=)
                          9: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: P5fkn9tS99g2XrUG4Apipk9ejfQyJlucoKHgpqn+9oE=)
                          10: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: N924KFBbNKaGBHgEpFzR4KDlXIesgFTKyMqUFZg/Phg=)
                          11: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: u83G2z/OgRr1JotcRgVSQt+wVg3zOD/8jjA3e23r1pQ=)
                          12: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: OAg2GudHEhCjZV+7yoh21gYo7gVQiw3JjcWhfs55ypg=)
                          13: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: 0fO4VX4oBEcuTGcIjNy9teGp06wO+0vGySKALzd6ILU=)
                          14: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: knn+Cwhk09KfRx4x7E9v1Ql2hZAgWwcY0kUTIDWjIfw=)
                          15: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: +slVwWGgb0HwYSRuQpmqK/dNFl15jSLLNf/wrxcpR60=)
                          16: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: Nvcm7ewLmZjBvUysGt40+sa1XdBbBBSl9mbMoMzL77w=)
                          17: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 36bL5os36IFga3PLdgZOx3pMjOcRY/XQz2W7KvU2LBw=)
                          18: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=)
                          19: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: 2C2Pit223fgKnRI6ERFjjNxpcm112eB/BxZ0rix2ktw=)
                          20: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: XOfBE0M//NVmw1PnMT7CBbLAiZUxR3hp7/NZC6tS6YU=)
                          21: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: Ncz5mFTKd4IE7kNXe9gBUAT0Icl+1z3zQB7YfSDFHBU=)
                          22: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: mWXCbPzsFa1dYvWDE7xWkSjrlwuLQgJdcVPGB0v1f6U=)
                          23: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: dsaz3tTpugC727zdxcdAxgqlfu80uu6D8x5UYRJhWPI=)
                          24: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: QIf4poWU9GclzJvfzow6rDGADrhZNDuHDpOnA1OEJJU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
                          rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:33:da:b2:67:6b:5b:82:bb:82:3e:52:0e:5d:64:04:7a:1a:d2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
        Validity
            Not Before: Sep 17 02:01:11 2026 GMT
            Not After : Sep 18 02:55:11 2026 GMT
        Subject: CN=02EACD9C750CB814ECB2CE798F69F9F7D10A6C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:70:01:84:ae:d4:13:ba:86:13:a5:5c:54:
                    4e:57:0e:d0:eb:b5:bb:5f:23:bd:7d:b5:5a:f0:47:
                    21:11:47:e2:04:fe:d3:76:a5:ee:c0:ea:7d:d3:bd:
                    23:79:52:69:a0:5f:59:e9:bc:e1:cd:b2:14:48:ab:
                    90:aa:fc:97:89:f8:2e:e7:ed:fb:d4:42:47:39:1b:
                    22:c9:3b:d6:a9:7c:39:00:d1:7f:b6:1b:59:8b:90:
                    56:ac:26:bd:41:43:c3:74:33:9f:3d:d6:69:ba:85:
                    2c:5d:e1:ad:41:c9:3d:1a:4f:6c:0e:a3:94:1d:9d:
                    ea:e3:67:03:98:08:37:ed:70:cf:cf:65:35:ac:79:
                    97:da:2b:5e:c9:0e:f6:c4:57:ad:f2:03:08:ae:07:
                    4b:5b:81:1d:30:16:b4:7e:43:92:24:68:c6:a8:f3:
                    65:48:49:9b:6d:b4:2a:47:5f:ec:a9:6d:e7:0a:be:
                    71:17:97:48:35:cf:83:2a:31:b4:aa:fd:bb:37:b3:
                    91:51:37:50:3a:67:1e:ea:02:85:5a:3f:fa:f0:27:
                    79:40:24:fb:18:81:55:36:b3:b1:50:e2:8e:df:ae:
                    89:a1:e4:2d:ad:6b:e7:2f:dc:b0:24:34:44:26:2c:
                    ff:a0:43:9c:dd:c8:44:92:6c:ca:35:7d:02:d0:1a:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EA:CD:9C:75:0C:B8:14:EC:B2:CE:79:8F:69:F9:F7:D1:0A:6C:42
            X509v3 Authority Key Identifier:
                keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:02:79:fa:ff:c8:02:2b:50:d2:5a:95:8d:67:a0:87:1d:ee:
         92:39:62:2a:77:f8:9a:a8:b4:2f:f0:67:a8:b3:03:d3:0a:4c:
         71:78:d2:c1:aa:f2:20:71:4a:bb:d1:1f:70:8b:f4:bb:97:42:
         4a:5a:78:95:6c:1d:76:45:67:0f:fd:32:b0:a3:67:2f:30:86:
         8e:ec:a5:d5:80:55:27:9a:10:e8:46:d1:0f:0e:58:0e:9a:4e:
         ba:e4:d3:70:0c:3f:29:ae:07:af:6f:1e:3d:74:c7:61:f9:aa:
         a1:ab:c8:ea:11:a7:64:d3:6a:16:42:77:a8:5a:52:89:e7:f2:
         a6:57:2f:cc:70:dd:cc:2a:89:93:47:84:ae:b2:36:2f:b9:54:
         52:f1:a8:23:fe:1c:de:f0:79:93:c1:66:78:5b:cd:ab:5a:34:
         22:17:df:8b:0f:20:10:c8:58:e6:a4:f3:35:31:b5:26:e6:b4:
         86:70:99:8e:32:75:1b:8e:0b:d2:0f:88:b3:ce:13:3b:85:91:
         15:1c:f3:24:cd:ea:c1:73:d1:fc:7f:45:4e:23:f6:34:fe:6c:
         1b:68:ee:9e:aa:ce:d6:d0:eb:fa:51:f6:7b:9a:89:fd:be:e7:
         b3:ca:c3:f5:92:d7:47:0a:cd:78:d3:1a:dd:73:81:d6:00:2c:
         5c:10:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:51:28 2026 by rpki-client