Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
File:                     7A8D4233922872A894E30E54D6874BEB416AD1DF.mft (raw, json)
Hash identifier:          FmQN9EEg3jDOpUR2iHwYEVtho/xFZ1/arwceqElPUq8=
Subject key identifier:   CB:DF:74:00:6C:4F:FF:6D:E5:45:35:49:11:A8:EC:DE:72:7D:EC:83
Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF
Certificate issuer:       /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
Certificate serial:       78F62269EC855A96844953AB0B2D685F0244F7D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
Manifest number:          C2
Signing time:             Thu 24 Sep 2026 03:40:13 +0000
Manifest this update:     Thu 24 Sep 2026 03:35:13 +0000
Manifest next update:     Fri 25 Sep 2026 06:53:13 +0000
Files and hashes:         1: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: CU2pRJlByvKfQ/yJYZHsXqoQU8W2lpUHREOgbnxSIXI=)
                          2: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: dMDlV7U3rxrCZhn5tU+/e2gI+6rTenrp0BfONLsgL+w=)
                          3: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: xJh5WIaBaJDKe0gD95hGnS6h/QKLhblXUfBYm2CvOr8=)
                          4: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: +5SwlM0I3old/JoBe0NfTcGocHsW0SZgVouHkTzMlXY=)
                          5: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tzOGo3sV/ZVReIoJFZdjUkPKBEoC+agfuEqkfoWV+Ls=)
                          6: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: Cy4evdxsXDlUgI456OCJSgkPxKW0rsUBqO0gVv2Oj9E=)
                          7: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: pq7hgN0BYFvcOO4RibbiV4dskaN65Tn7+tm7b4Zi5ss=)
                          8: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: ycDYVFKlKUcCLkCPbyJWINzJ+1wnaqTl8G/ven1iST0=)
                          9: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: sBqWwZZoNRCD+983cJNfmzhu/jryMMyC7TtCEQsfwzo=)
                          10: 7A8D4233922872A894E30E54D6874BEB416AD1DF.crl (hash: weQrgPEP+AFcA1cvszGvaFtBCr2Kk3c70T15xJYHHgY=)
                          11: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: QEaWwU/gLTd1+vXquoUrxupuBnvtpr2z+pW3ka5j1QM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl
                          rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 06:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f6:22:69:ec:85:5a:96:84:49:53:ab:0b:2d:68:5f:02:44:f7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
        Validity
            Not Before: Sep 24 03:35:13 2026 GMT
            Not After : Sep 25 06:53:13 2026 GMT
        Subject: CN=CBDF74006C4FFF6DE545354911A8ECDE727DEC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:59:e4:84:48:d7:fe:b8:08:0f:52:74:ad:
                    a7:e3:da:fc:ce:35:98:f5:67:72:14:a2:94:32:ed:
                    d7:6d:b8:fb:8a:4a:c5:ab:b4:be:f6:f7:b8:11:96:
                    9d:df:e5:29:6c:96:a7:2e:2d:3d:1c:e1:1a:5c:63:
                    c3:2d:d9:1d:db:84:05:ce:db:da:b8:0d:d8:5c:5a:
                    60:2d:cd:59:f0:96:43:cf:09:a6:0d:a4:d5:66:69:
                    9e:1a:45:95:c8:be:4a:2e:d8:57:21:7d:43:c4:0f:
                    95:be:24:e6:f3:03:3c:82:ff:d6:d3:fc:cd:01:ac:
                    af:5b:63:51:45:ca:2e:1c:76:5c:a9:d9:6d:05:16:
                    33:6d:4a:f4:d1:c9:7d:cd:f6:c6:1e:0a:4c:7c:8e:
                    0e:0f:6b:63:d6:d5:e7:1c:e3:04:9a:51:48:9a:54:
                    5b:34:cd:d6:67:15:ff:51:55:62:3b:2d:e5:c0:c7:
                    88:eb:e8:6b:53:f5:30:11:e1:2b:6d:4b:c0:4e:72:
                    04:24:61:12:43:a6:76:cc:25:d2:0b:eb:47:c5:40:
                    57:58:d2:42:30:68:77:4d:a1:54:3f:e4:12:21:dc:
                    48:60:ae:13:53:c4:18:1c:e3:23:4f:7a:a3:91:08:
                    07:b5:ae:b9:13:d8:2c:32:de:93:46:37:be:61:87:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DF:74:00:6C:4F:FF:6D:E5:45:35:49:11:A8:EC:DE:72:7D:EC:83
            X509v3 Authority Key Identifier:
                keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:73:ac:89:8e:5d:d1:bb:4c:17:be:d7:64:fb:9e:30:9d:44:
         63:99:c2:b6:5e:fb:e8:c8:08:21:b3:d4:8a:26:3f:bc:77:08:
         e9:1a:b1:90:df:c7:44:b2:e9:89:bd:d2:ac:78:74:95:03:06:
         52:86:86:93:e7:34:39:48:9d:20:1e:79:13:20:f8:5b:a6:43:
         a4:73:d7:91:1c:01:89:d5:d2:f9:d3:8e:7b:8c:0a:71:7e:e3:
         c0:22:b2:1f:e3:9f:54:8c:b4:17:f2:54:89:56:25:00:91:41:
         4c:ca:7a:54:4b:6f:08:d3:0b:54:a4:97:ca:e0:4d:6e:da:7a:
         b7:11:85:35:4f:76:06:e0:cf:45:73:6b:85:d7:c9:21:e1:18:
         72:e2:aa:28:8b:41:3f:8c:35:b8:3f:f8:3a:57:b7:cf:ab:f7:
         da:88:e0:0e:a3:7f:ac:e9:cf:ac:ac:3b:8a:f1:9d:44:6d:b2:
         d6:9f:7b:5a:ca:f0:78:53:b6:28:81:b1:f2:93:ac:09:23:4c:
         55:b1:74:c4:16:5f:fc:68:39:50:e7:07:99:c6:ee:2c:46:74:
         11:48:e8:0d:10:0b:60:ad:cd:c2:17:7a:76:d7:29:59:08:48:
         38:60:d3:38:05:62:af:22:ca:08:e8:1f:7b:30:8a:9a:d5:4f:
         8d:e3:a7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:30:28 2026 by rpki-client