Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
File:                     9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft (raw, json)
Hash identifier:          IC3/Qe8l3Jfic8X8K0zjqpAt43MUQw9X7+j2mOC0F9g=
Subject key identifier:   D9:80:29:6A:F8:1D:2E:AC:AA:DB:45:30:C6:A4:A6:63:FC:94:28:F1
Authority key identifier: 9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F
Certificate issuer:       /CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F
Certificate serial:       31666B3CAE330B4796849011F9B231B6CA0C6691
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 16:49:51 +0000
Manifest this update:     Sat 13 Jun 2026 16:44:51 +0000
Manifest next update:     Sun 14 Jun 2026 18:52:51 +0000
Files and hashes:         1: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: q/9H11WTYoKvscn357helrrghEhYAd3OjlCKI1SD+L4=)
                          2: 9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl (hash: aUmYMlBXPznpAOzuo9hQoMDz9p1sm98NDvHhSPC5Xvs=)
                          3: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: iowBD0aCpON/4cxOj5FQqoJWjlXtvZSA6Ncm7S12+nI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl
                          rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:66:6b:3c:ae:33:0b:47:96:84:90:11:f9:b2:31:b6:ca:0c:66:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F
        Validity
            Not Before: Jun 13 16:44:51 2026 GMT
            Not After : Jun 14 18:52:51 2026 GMT
        Subject: CN=D980296AF81D2EACAADB4530C6A4A663FC9428F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:75:8c:ea:70:0e:52:42:cf:d6:1f:91:5e:
                    72:63:db:3a:a3:92:a5:55:40:20:cc:8f:72:88:9a:
                    95:21:23:a1:14:41:43:cd:9d:63:6c:56:a7:58:4a:
                    9d:2d:63:51:74:1e:16:d4:08:e9:75:1f:db:e7:e6:
                    7f:d2:0e:6f:44:74:00:c2:d5:98:cf:85:0a:bb:c5:
                    3b:c2:0b:d4:a1:27:26:fe:02:45:72:6e:7e:46:99:
                    8d:4b:e7:b3:2d:ed:9e:6d:1c:49:7b:b9:a4:54:58:
                    ad:f2:e5:a9:f8:af:d1:84:37:09:bf:ac:41:42:13:
                    b3:fe:bd:d4:fd:74:e5:a4:d1:2f:c8:79:62:ef:51:
                    c8:93:f7:b3:22:3b:7b:e8:c2:e6:66:9f:c3:43:e9:
                    f4:ca:65:f8:85:ac:62:8d:91:05:6a:e2:3d:aa:d9:
                    df:6b:d7:e9:1d:b2:49:77:03:c5:8e:c7:23:86:ae:
                    71:18:9f:0b:24:cc:ab:77:17:db:ac:97:ed:84:a3:
                    64:66:5b:09:fa:b3:ca:3f:15:66:63:02:ef:d1:ac:
                    84:ec:24:a1:df:b9:75:ac:4c:e7:f0:7b:ff:03:8f:
                    eb:d5:ee:1f:d0:bf:57:6b:e9:7d:36:4a:89:44:94:
                    36:95:f8:6e:59:33:fc:63:5e:f2:fb:15:9f:d2:af:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:80:29:6A:F8:1D:2E:AC:AA:DB:45:30:C6:A4:A6:63:FC:94:28:F1
            X509v3 Authority Key Identifier:
                keyid:9B:CF:26:1F:1E:EB:D0:A9:61:48:76:1F:A2:E9:8E:93:FB:AF:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/9BCF261F1EEBD0A96148761FA2E98E93FBAFB06F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:d8:26:24:2b:b8:b9:be:b3:d5:0d:f3:5e:ac:e8:f0:c4:
         4f:ac:41:94:6b:bb:a9:c6:b8:66:96:f2:63:8a:5a:8f:32:c8:
         d4:9f:4a:e1:af:03:30:83:97:22:6e:86:19:f6:8d:21:0d:bb:
         2d:4c:d7:b2:5d:2b:53:dc:57:04:d4:00:a7:1c:5b:34:f3:c4:
         e2:f2:5a:6d:24:e5:0e:36:32:ea:d8:f1:6f:9f:5f:a7:bb:27:
         d7:1b:8a:e6:67:49:0d:ca:52:9f:99:e4:56:65:78:e2:d6:e1:
         79:65:63:56:c1:94:8f:d7:e0:6e:17:a2:5b:9a:3b:64:3b:4c:
         ef:d1:e1:7e:a6:99:43:f5:57:9d:49:6e:86:e6:b0:e2:33:5e:
         8d:e6:87:df:23:a3:1e:a9:7a:1e:69:6c:68:1e:19:7f:d5:1d:
         5d:c1:c3:67:94:fc:97:97:01:c9:e7:b9:5b:cc:5a:12:f7:4d:
         a0:ed:32:1a:99:5f:dc:0e:57:11:54:5d:e2:a7:20:bc:4b:bb:
         01:e1:fa:26:bc:96:c1:5d:c5:d6:65:cd:97:d2:0c:f1:45:f0:
         10:c3:b1:bd:ac:4d:77:d8:f5:74:32:34:d7:54:a2:48:ae:50:
         af:e2:98:87:13:4d:89:36:1f:21:e5:93:3e:7e:9a:a1:73:18:
         1f:62:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:07:56 2026 by rpki-client