Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
File:                     AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft (raw, json)
Hash identifier:          LtyKdoJYysAD/WjWX1wB92SLBl4iP03CZpfSQYxUy8Y=
Subject key identifier:   67:18:85:9D:90:BB:B1:AC:1E:99:C5:E4:46:2B:05:DB:0C:60:62:A8
Authority key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB
Certificate issuer:       /CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
Certificate serial:       3AEA06CD497CC6D14C49E39AD86C5E3BB2BE71B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
Manifest number:          ED
Signing time:             Mon 26 Oct 2026 09:33:52 +0000
Manifest this update:     Mon 26 Oct 2026 09:28:52 +0000
Manifest next update:     Tue 27 Oct 2026 13:08:52 +0000
Files and hashes:         1: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: od92otk1ZBfK/DphT8D9p9Tw3yqgeInTJA8T3zh0m9Y=)
                          2: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: aXgaQBkXNr3WgkNnT1bbV4Z/rSlPnLbxkffq9PBogAU=)
                          3: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: S3aT7VcLJ0ssRGTP1ygDwW7+AIQVYKqNTkFjIYTg3fg=)
                          4: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: l6rGkO8MgVJkambdkAclMvjE+aQSvltuGia3hhd605M=)
                          5: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: Ee7WWGSltwyaFMHxIIgEvgkLf4dnjnHrFVC5UDqWks8=)
                          6: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: fZTmTy6g2R28mCtJrpoBFkv/RRFL2DWAt0Cexpbh3bM=)
                          7: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl (hash: ozyhQ4i7KDfJe2MfxoIi7zKcngELPWeHwXQ6Wj0RZwY=)
                          8: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: 7CW/WrucWkwMy6n5L6l1Fl9wsuT6MqzAnA/bZ5ATe84=)
                          9: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: q33gUCSA+x8ZeBcPhedwaAdIwEj0Ce99+sYJUQuSC9s=)
                          10: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: yyYOlJ0fwzxGoTlSm81JuoIInjVRI/GeCaxTrgVohIA=)
                          11: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: dHemt/X+4p/vn34sn9wPgB+Rsu5EmHnVv8RmTO5DvKE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl
                          rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 12:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ea:06:cd:49:7c:c6:d1:4c:49:e3:9a:d8:6c:5e:3b:b2:be:71:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB
        Validity
            Not Before: Oct 26 09:28:52 2026 GMT
            Not After : Oct 27 13:08:52 2026 GMT
        Subject: CN=6718859D90BBB1AC1E99C5E4462B05DB0C6062A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:71:9b:6c:ca:ab:55:bb:ef:ae:5a:a4:85:
                    05:1e:b3:d0:68:fd:fc:fc:84:f9:66:61:da:4a:ae:
                    04:b2:a0:b6:27:a1:34:c9:de:22:95:42:0f:05:03:
                    58:67:46:08:7d:9e:1e:b8:42:ea:78:e3:a8:ef:48:
                    7c:a8:1a:84:d1:18:35:2a:29:58:b3:ee:a1:db:88:
                    e6:61:94:d6:8f:46:60:60:4d:02:07:fa:91:8b:ca:
                    04:5c:71:b1:f9:37:3d:ae:e7:3e:40:d4:15:05:a4:
                    98:3c:88:11:81:d2:91:64:59:62:f1:6a:6d:8a:d6:
                    c4:a3:b0:b8:ab:1c:6d:6a:46:e4:8a:5a:6c:35:3c:
                    fd:ca:38:d8:3b:13:6a:45:a2:6f:f9:b7:55:6d:17:
                    f7:87:2f:36:e8:4d:39:d0:83:65:9a:1f:7d:aa:f4:
                    5d:5d:d9:f3:56:4e:6c:ec:76:90:3a:63:6c:1f:fc:
                    03:b8:e1:ea:37:8c:57:8b:65:18:21:da:c4:ec:75:
                    24:f4:d4:5e:ab:0e:bb:dd:4b:0a:cd:5c:4b:b1:fc:
                    1f:91:77:8c:8a:49:75:d3:f3:6c:29:51:ae:8f:9b:
                    cd:59:2c:1b:a6:a2:4d:79:db:8f:53:bd:36:45:8a:
                    e7:f6:b7:18:8a:88:cd:7c:af:d0:83:39:4a:6e:87:
                    8c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:18:85:9D:90:BB:B1:AC:1E:99:C5:E4:46:2B:05:DB:0C:60:62:A8
            X509v3 Authority Key Identifier:
                keyid:AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:db:5e:2f:77:67:31:d7:15:00:dd:3d:23:20:50:f8:1f:65:
         82:87:ad:b9:79:06:79:92:3d:49:a9:47:22:5b:1d:53:1c:51:
         ff:6a:32:41:a1:fc:31:fe:10:77:7e:e8:4b:ea:cc:32:73:0e:
         85:63:22:77:12:44:6f:a1:2b:df:d7:ae:48:17:cd:75:3f:ce:
         19:1e:0b:47:4a:5f:2e:19:62:cc:bf:0d:55:71:20:38:25:b8:
         c3:95:90:fa:00:aa:71:61:e4:40:9b:be:57:46:55:c7:8d:dc:
         5c:b7:5b:ea:4c:a2:63:18:3b:8a:1e:52:ca:6e:81:41:aa:a6:
         d6:0b:51:e4:bd:e0:99:82:bb:02:79:8f:b9:21:5e:13:27:ac:
         1f:71:5b:37:18:d1:f2:42:94:ea:62:8f:eb:06:68:bc:03:15:
         84:61:c5:5c:35:61:d0:a5:76:52:ff:88:1d:0e:21:00:69:11:
         dd:ef:04:5e:59:2b:09:74:5d:a3:75:9a:41:fb:16:bb:33:66:
         64:b4:ff:71:61:83:d8:64:a1:31:67:5c:47:0e:4f:1f:79:9f:
         53:2a:51:09:19:2b:3e:42:14:61:a1:bb:01:2c:b5:25:10:12:
         9e:d3:1d:61:41:68:24:73:3a:5e:9b:e6:ba:53:df:6c:15:e7:
         db:fb:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:03 2026 by rpki-client