Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
File:                     F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft (raw, json)
Hash identifier:          HOwjJByx+cwvuDKh3CnUfIOyiqg/t2rxeEXS9rIGqnA=
Subject key identifier:   19:1E:A7:45:56:87:0A:E0:5B:51:7F:63:CE:BF:78:56:AF:D3:ED:C4
Authority key identifier: F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04
Certificate issuer:       /CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
Certificate serial:       3EF2EADE43389490336DEFAC7343EE545F08664C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
Manifest number:          BE
Signing time:             Tue 22 Sep 2026 03:30:58 +0000
Manifest this update:     Tue 22 Sep 2026 03:25:58 +0000
Manifest next update:     Wed 23 Sep 2026 04:54:58 +0000
Files and hashes:         1: 3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa (hash: fNPzl5pgP5THqHKexY3+BO0XOu1eYuUYqBqSIA0oDIk=)
                          2: F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl (hash: DO5uR+q/4Rf3ckmLfucwM+NmRT7z5Md0ptuhS7RF+qM=)
                          3: 3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa (hash: 5cKt2GQ70RT9pJRr52o1J2ZJ8Szvc0mfOl2vwcEkNAw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl
                          rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 04:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f2:ea:de:43:38:94:90:33:6d:ef:ac:73:43:ee:54:5f:08:66:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
        Validity
            Not Before: Sep 22 03:25:58 2026 GMT
            Not After : Sep 23 04:54:58 2026 GMT
        Subject: CN=191EA74556870AE05B517F63CEBF7856AFD3EDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:60:01:4b:6c:00:9a:a5:a5:3b:23:1e:f5:
                    f1:10:6f:fd:31:bc:4c:fe:3f:4e:a6:bc:fd:8c:92:
                    08:29:93:82:4d:b6:7d:96:43:a5:f9:87:90:79:38:
                    19:6c:aa:f7:f5:a0:87:81:d7:36:88:9e:b7:bb:31:
                    b6:e9:c8:b3:85:be:4d:4e:b3:97:b9:11:23:fa:e9:
                    ce:00:f9:08:cc:a6:6c:ad:f8:03:ea:c3:a5:a9:52:
                    69:ac:ea:f5:22:e4:e6:0f:f5:f7:4e:48:ff:51:63:
                    54:22:fc:cf:5b:9e:14:55:6f:a5:ca:cd:d5:79:c2:
                    c8:51:e2:28:ac:f7:63:e3:08:50:38:c5:16:24:63:
                    68:bd:8a:4f:bf:4c:97:27:b9:4c:56:6d:95:1a:e2:
                    30:ba:cf:21:6d:46:80:4d:c6:6c:70:64:9b:6b:07:
                    1d:b7:03:ce:57:b3:52:b5:3a:03:63:6e:d3:32:fc:
                    cb:a4:5f:18:46:77:6f:a2:02:1e:af:95:4f:9b:b9:
                    be:57:4b:1e:e2:ed:28:80:ad:af:c2:fd:42:6f:68:
                    d8:22:fc:1b:74:18:f1:05:cb:09:5c:3c:e0:55:ba:
                    d6:dc:60:98:8c:10:d0:e9:a2:cf:22:72:06:94:cc:
                    ff:33:06:ee:0d:20:6a:7f:79:f8:01:14:38:0d:ac:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1E:A7:45:56:87:0A:E0:5B:51:7F:63:CE:BF:78:56:AF:D3:ED:C4
            X509v3 Authority Key Identifier:
                keyid:F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:16:51:d3:c3:fd:91:6b:68:cd:8e:e8:41:fc:2c:2d:19:c4:
         f9:8d:29:35:7a:b9:c3:9e:73:5c:87:6e:86:f6:46:b7:c9:d8:
         4a:c5:b9:08:8a:7e:c6:46:35:17:ff:72:9a:6a:75:3d:63:10:
         53:a1:4b:77:d5:b8:fc:ea:65:d8:c2:59:c1:90:29:b7:5d:6c:
         5d:59:b3:be:21:2c:3a:a0:50:5c:1a:f0:79:74:df:af:46:fd:
         70:c7:be:46:77:56:74:9c:a8:ec:df:98:04:68:2f:cc:ce:32:
         5d:f0:4b:d9:8e:48:af:b1:a8:98:67:30:55:0e:ee:d0:ce:de:
         3b:43:ae:5f:3d:10:0f:66:e7:18:bc:0c:49:b5:f0:10:e7:2d:
         8e:c8:f9:d2:c9:ec:7b:ab:39:4c:63:23:01:10:10:60:f1:cf:
         9b:d1:8a:c5:c3:af:91:56:cb:66:ff:32:b7:cc:57:81:21:74:
         b9:92:c6:f9:8d:4b:74:12:c8:ae:ba:6c:5f:d0:80:a8:f7:4e:
         8b:f5:85:c7:05:f8:97:a3:9d:28:1e:c6:df:bc:91:fe:9a:f5:
         8b:93:a7:8e:00:d0:e6:e7:fe:5c:c6:63:90:1d:94:45:a7:2f:
         81:b3:a3:ce:43:06:13:68:0a:54:a9:20:b2:cc:fa:7a:b0:5f:
         3a:8a:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:33:43 2026 by rpki-client