Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
File:                     354106638019F94606F5ABA3A90FEB87A8A7FA76.mft (raw, json)
Hash identifier:          mUx+CxXraqud4GYmeU1hURL7Em+i5h15GU8lB8k69Io=
Subject key identifier:   A0:57:71:CB:3B:06:80:AC:8A:06:60:8B:61:9D:69:24:19:8D:C9:67
Authority key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76
Certificate issuer:       /CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
Certificate serial:       692EE6E7E44EABCCCAFFF741C9CC55EAD8039ADA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
Manifest number:          A3
Signing time:             Tue 01 Sep 2026 03:07:40 +0000
Manifest this update:     Tue 01 Sep 2026 03:02:40 +0000
Manifest next update:     Wed 02 Sep 2026 07:05:40 +0000
Files and hashes:         1: 354106638019F94606F5ABA3A90FEB87A8A7FA76.crl (hash: I2yVHCypUtryW8zVwgXkB/m+CfjPqblAwjvnV/dT4LU=)
                          2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: ikR4B1sB9IhhiTpM9SD6KX5Vk82b9oPtczvgaIgOyo8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl
                          rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 02:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2e:e6:e7:e4:4e:ab:cc:ca:ff:f7:41:c9:cc:55:ea:d8:03:9a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
        Validity
            Not Before: Sep  1 03:02:40 2026 GMT
            Not After : Sep  2 07:05:40 2026 GMT
        Subject: CN=A05771CB3B0680AC8A06608B619D6924198DC967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:50:d2:47:03:61:2c:61:8f:b0:b4:42:0f:
                    36:1a:3a:60:f9:09:dc:cb:66:ae:55:97:74:42:62:
                    ec:4d:45:ca:83:d1:2f:49:d0:a2:bb:3c:97:7a:07:
                    ef:8a:69:0e:6c:10:f4:ed:a5:c4:d4:8d:75:b7:c0:
                    30:39:7b:28:7a:9d:40:49:96:e6:e9:97:21:cf:f5:
                    55:9d:1b:cd:84:0f:8f:61:8b:40:12:66:33:a2:26:
                    c3:fb:fe:95:ba:78:35:fc:03:cc:ba:da:3a:45:d7:
                    e4:76:8b:74:0e:ae:89:67:48:73:aa:df:6d:02:e9:
                    73:4d:5c:8d:75:89:f3:19:0e:05:81:22:60:57:e2:
                    52:f1:3b:f6:3a:a3:ca:76:94:c6:5d:bc:9a:63:11:
                    8f:22:db:87:c8:74:24:4e:2f:22:18:a2:ac:4a:6a:
                    e4:10:0f:d1:5a:08:dc:01:a1:d6:1c:4d:b1:c7:5f:
                    29:53:4f:15:c6:4c:11:22:43:e9:22:ec:2b:44:b7:
                    4b:fd:e6:93:fe:92:ba:c9:17:1e:a4:87:40:20:23:
                    8b:87:01:bb:80:8e:4e:dd:8a:c8:e7:59:0d:c8:05:
                    f5:73:46:5c:8a:7b:21:3e:d2:d2:92:1c:22:31:a1:
                    43:b1:a0:99:40:8d:2f:e1:6f:b1:8f:c5:95:ab:2a:
                    72:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:57:71:CB:3B:06:80:AC:8A:06:60:8B:61:9D:69:24:19:8D:C9:67
            X509v3 Authority Key Identifier:
                keyid:35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:04:aa:24:95:4f:79:d3:cd:f8:ad:bc:ae:e4:46:a1:99:98:
         9a:ba:40:5e:b2:36:b7:ba:8c:7b:a3:57:cc:f5:f5:0c:18:99:
         f7:fb:a3:bb:de:af:05:8d:e1:cd:00:ac:25:90:43:f1:0a:0e:
         a7:9f:89:88:b7:bb:92:41:d9:90:c7:46:d0:54:c0:d5:2c:3a:
         a2:c4:45:52:24:61:4d:55:0a:a6:41:9f:77:0f:41:fe:5b:73:
         27:b4:cc:07:f4:8e:68:89:34:9c:6e:0a:b6:93:8f:7e:6c:48:
         63:16:27:e2:ba:ba:e1:81:5b:b0:5e:30:38:d9:93:15:c9:20:
         92:8b:82:19:5b:fd:e5:0c:21:17:5e:95:c7:01:de:c0:2f:bf:
         d4:fe:02:3c:38:4c:ce:29:d2:bc:15:99:1b:0f:57:d0:77:b4:
         0d:35:dd:87:d2:fd:fb:99:26:7a:64:37:71:63:2e:b8:2e:fd:
         1d:ff:86:e3:61:73:21:dd:2d:35:9d:9c:62:a6:32:e6:47:49:
         e1:7f:03:26:d3:49:45:60:6e:db:73:e1:8a:15:c0:0b:dd:ea:
         c4:b2:b6:be:19:73:f6:b9:9d:52:79:a7:fc:cd:6a:99:d8:68:
         18:f0:a8:64:75:ac:5f:71:52:2f:d6:01:8a:60:0c:0e:5b:05:
         bf:87:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:21:51 2026 by rpki-client