Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft
File:                     7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft (raw, json)
Hash identifier:          xzrmqI/cB9qiyQJoNqQUz8pelcmtvzK5J+US5tw5anQ=
Subject key identifier:   73:A8:B3:6D:71:8E:6E:E0:FA:97:82:80:80:82:B7:6C:3B:C4:39:67
Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14
Certificate issuer:       /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914
Certificate serial:       396C745E9B465FA5C70FD777F951051118F134F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft
Manifest number:          B8
Signing time:             Thu 17 Sep 2026 04:59:34 +0000
Manifest this update:     Thu 17 Sep 2026 04:54:34 +0000
Manifest next update:     Fri 18 Sep 2026 06:41:34 +0000
Files and hashes:         1: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=)
                          2: 7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl (hash: X8dXISOTMguG7GEskhoEfhEaRJSmk6cbWbPs9HSIXgI=)
                          3: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: xliXiEUEZwSaL+L9KbxePpEFEAbRpcaYYQQzzGHYr2w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl
                          rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 04:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6c:74:5e:9b:46:5f:a5:c7:0f:d7:77:f9:51:05:11:18:f1:34:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914
        Validity
            Not Before: Sep 17 04:54:34 2026 GMT
            Not After : Sep 18 06:41:34 2026 GMT
        Subject: CN=73A8B36D718E6EE0FA9782808082B76C3BC43967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:01:33:1d:86:a9:cf:33:ac:21:f2:8d:63:
                    54:42:73:55:c4:14:58:c6:ba:f5:19:3a:6e:bc:df:
                    b2:a6:60:c5:0c:d1:47:a6:b7:40:93:a7:85:b2:be:
                    8c:8f:01:5f:38:03:07:d4:70:2d:25:7a:b0:70:9b:
                    8b:f8:82:53:ba:60:d2:8f:f1:7f:b7:09:72:b0:5a:
                    a9:73:f2:86:69:e2:7c:23:6c:33:58:6a:d4:c4:62:
                    ae:6a:ba:d9:cf:71:6d:4f:34:80:34:a9:1f:91:6a:
                    2a:2b:ef:c6:42:ae:21:dc:cb:0f:5d:9c:b3:a8:30:
                    74:f4:45:52:29:c0:49:48:0a:f1:e8:bd:c6:a0:44:
                    b0:dd:60:e5:94:97:f7:f2:7b:59:0a:7b:ef:bb:85:
                    04:df:f0:dc:54:43:5a:1a:f0:9d:3e:68:3b:30:33:
                    5a:2b:16:57:f4:29:36:22:66:ef:16:2e:b3:af:8a:
                    1e:39:8d:54:b0:10:37:c6:49:73:79:3f:fc:3b:61:
                    08:aa:90:2a:bb:62:df:9d:d6:5a:07:4b:02:4d:61:
                    62:7e:85:8f:e4:b9:fc:84:75:93:1a:07:50:69:cc:
                    c6:87:7e:b2:35:f9:36:71:bd:ac:cc:4f:fc:db:74:
                    6f:53:4c:88:25:a6:ea:14:fe:79:79:61:ef:af:17:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:B3:6D:71:8E:6E:E0:FA:97:82:80:80:82:B7:6C:3B:C4:39:67
            X509v3 Authority Key Identifier:
                keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:ae:e5:7f:25:7f:03:b0:89:55:5c:35:c3:63:f6:9b:3a:
         8a:9e:0a:c5:e1:68:27:eb:27:19:10:86:48:49:7e:03:81:88:
         a2:52:ea:2e:4c:aa:b7:f9:0d:3f:b3:a9:7a:c1:32:c2:e3:50:
         8a:93:87:5a:fa:2c:82:ce:b3:48:e0:e2:0f:b1:57:bb:a3:fe:
         f1:f3:98:1b:06:14:0a:aa:de:ad:e1:7d:7d:ff:4d:6a:3a:08:
         e3:3e:ec:cf:78:68:49:55:e8:c5:8b:b3:86:23:60:e8:ce:52:
         2e:af:0b:02:17:ba:95:f2:93:e6:5c:ad:24:f3:9c:3e:8a:ec:
         12:da:5c:f9:55:63:ad:fe:c7:ab:6a:48:89:16:7e:c9:08:d9:
         72:ac:67:be:81:81:0f:d7:33:8c:27:a9:90:ae:4e:24:f2:3c:
         7e:bd:9e:4c:31:20:d9:b1:f8:54:c6:11:a8:a6:99:d8:3b:af:
         33:e5:99:64:cc:e1:e9:4d:fe:1c:8f:61:5a:9c:72:60:14:19:
         df:c9:3d:12:13:f7:b8:bd:a2:59:64:d1:d9:86:a9:d2:4e:ce:
         c1:e0:41:61:39:f9:89:28:04:25:84:df:ec:1c:08:c4:f7:3f:
         97:9e:0a:55:66:b9:d5:31:46:d7:9b:0e:f3:1a:3e:00:e0:60:
         fc:18:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:16:11 2026 by rpki-client