Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
File:                     6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft (raw, json)
Hash identifier:          hLFPpk9wWU2tI0WBWTkIXSXBzO7Y4h50duMakw/P+Oc=
Subject key identifier:   6A:DF:4A:0E:0C:C8:56:59:1B:DC:E7:76:E9:18:22:5C:C3:17:DE:8C
Authority key identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F
Certificate issuer:       /CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F
Certificate serial:       3A2564BC3571D4F245CE598E8AC1485E146A7B76
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
Manifest number:          BD
Signing time:             Sun 20 Sep 2026 23:41:05 +0000
Manifest this update:     Sun 20 Sep 2026 23:36:05 +0000
Manifest next update:     Tue 22 Sep 2026 03:10:05 +0000
Files and hashes:         1: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl (hash: ZFGuHp1jUawcpaQ4Jyd0/i0/011F8LimykKBHjFn9iQ=)
                          2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: 5m8jt+QhN+1/ftTd1aWEurJoPll4jK1bMA68WFrQCqE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl
                          rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:25:64:bc:35:71:d4:f2:45:ce:59:8e:8a:c1:48:5e:14:6a:7b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F
        Validity
            Not Before: Sep 20 23:36:05 2026 GMT
            Not After : Sep 22 03:10:05 2026 GMT
        Subject: CN=6ADF4A0E0CC856591BDCE776E918225CC317DE8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:5b:aa:34:8e:e7:3e:6b:81:6e:5f:fe:35:
                    5c:70:69:5d:01:0b:b4:d6:f5:cd:48:b2:59:e6:cd:
                    0f:07:56:2b:34:58:3c:70:8b:44:69:38:f6:a1:fa:
                    c9:a2:87:84:c9:1b:9e:50:c8:36:ba:e8:5c:49:32:
                    ec:ca:ec:1e:84:76:5c:d5:15:9f:94:de:ed:49:c0:
                    c4:d7:4e:fa:c8:05:43:e1:29:10:64:28:54:1a:bf:
                    4a:18:04:9a:75:77:dc:12:a9:ab:47:66:71:ee:2b:
                    fa:fd:1d:90:5e:74:56:72:dc:d6:52:38:8c:b0:ff:
                    6a:d0:07:ff:19:9d:8e:a4:c8:8f:ec:c7:4c:a5:bc:
                    d0:51:80:65:ce:97:32:2a:d4:75:06:68:68:ea:49:
                    ca:30:92:30:70:e9:f5:ff:d6:9c:70:8a:d6:ff:f4:
                    bf:32:ec:8b:c3:41:c1:81:5c:59:2e:d8:0b:70:10:
                    94:e8:d1:ec:bc:17:b4:30:41:2f:15:e3:14:10:74:
                    29:79:8c:43:d1:8f:b8:18:38:c7:df:21:7e:8d:a1:
                    9d:41:05:30:0f:b9:74:89:f9:fa:aa:10:ce:e7:5f:
                    18:9d:a2:d8:3a:21:fb:e5:55:6b:d0:a2:d3:e9:40:
                    eb:13:f4:44:ba:18:e9:11:de:c0:4c:f0:ea:a0:f8:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DF:4A:0E:0C:C8:56:59:1B:DC:E7:76:E9:18:22:5C:C3:17:DE:8C
            X509v3 Authority Key Identifier:
                keyid:63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8a:4b:5e:ba:e0:c9:12:c6:92:cf:5a:7c:1e:25:8e:a8:7e:
         25:ed:81:e6:42:26:82:0e:8e:d4:1e:b5:74:df:d8:f4:dd:9c:
         ac:62:89:44:7c:e8:bb:23:19:1a:f4:de:e2:cc:7d:c1:86:0e:
         23:cb:e5:8e:d3:b1:fb:33:ec:d5:c4:43:0f:24:ce:8a:44:5b:
         ae:5c:4c:9f:22:cc:74:28:c2:4c:41:43:88:a0:fd:f0:34:b3:
         e6:18:e0:dc:4c:22:dd:33:31:d1:9c:58:ef:6c:09:c3:28:db:
         9c:0e:96:99:7b:9b:15:26:4a:f1:d8:fe:8b:ee:13:4e:60:38:
         87:99:33:51:44:95:27:13:0c:e1:ed:d2:13:35:b6:d5:df:36:
         0f:7d:b3:ef:80:68:16:b0:09:62:58:a6:a3:89:ea:24:12:05:
         9b:89:87:48:79:25:d7:64:8f:f8:94:ae:cd:4e:30:71:a0:9f:
         78:09:03:ab:30:c6:ed:85:df:3b:8a:08:62:0e:fc:1c:95:c3:
         2f:d4:a3:95:9a:04:f0:53:97:0c:15:49:e7:c1:5d:ce:82:7b:
         f1:60:23:d8:7d:b5:f4:1b:5a:00:f7:4d:69:d7:80:a2:77:fe:
         30:e0:9c:03:16:7d:2d:6f:c1:93:d5:12:89:9d:03:54:2c:0f:
         c3:dd:d0:cf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOiVkvDVx1PJFzlmOisFIXhRqe3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNEQzJG
OTI2RkI3RjAeFw0yNjA5MjAyMzM2MDVaFw0yNjA5MjIwMzEwMDVaMDMxMTAvBgNV
BAMTKDZBREY0QTBFMENDODU2NTkxQkRDRTc3NkU5MTgyMjVDQzMxN0RFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8FuqNI7nPmuBbl/+NVxwaV0B
C7TW9c1IslnmzQ8HVis0WDxwi0RpOPah+smih4TJG55QyDa66FxJMuzK7B6EdlzV
FZ+U3u1JwMTXTvrIBUPhKRBkKFQav0oYBJp1d9wSqatHZnHuK/r9HZBedFZy3NZS
OIyw/2rQB/8ZnY6kyI/sx0ylvNBRgGXOlzIq1HUGaGjqScowkjBw6fX/1pxwitb/
9L8y7IvDQcGBXFku2AtwEJTo0ey8F7QwQS8V4xQQdCl5jEPRj7gYOMffIX6NoZ1B
BTAPuXSJ+fqqEM7nXxidotg6IfvlVWvQotPpQOsT9ES6GOkR3sBM8Oqg+Op/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUat9KDgzIVlkb3Od26RgiXMMX3owwHwYDVR0j
BBgwFoAUYwkJG499SmroxqEWhdg9wvkm+38wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDU0NmUwOWEtYzAwNy00YjBjLTk0NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4
RjdENEE2QUU4QzZBMTE2ODVEODNEQzJGOTI2RkI3Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82MzA5MDkxQjhGN0Q0QTZBRThDNkExMTY4NUQ4M0RDMkY5MjZG
QjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0
NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNE
QzJGOTI2RkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF+KS1664MkSxpLPWnweJY6ofiXtgeZCJoIO
jtQetXTf2PTdnKxiiUR86LsjGRr03uLMfcGGDiPL5Y7Tsfsz7NXEQw8kzopEW65c
TJ8izHQowkxBQ4ig/fA0s+YY4NxMIt0zMdGcWO9sCcMo25wOlpl7mxUmSvHY/ovu
E05gOIeZM1FElScTDOHt0hM1ttXfNg99s++AaBawCWJYpqOJ6iQSBZuJh0h5Jddk
j/iUrs1OMHGgn3gJA6swxu2F3zuKCGIO/ByVwy/Uo5WaBPBTlwwVSefBXc6Ce/Fg
I9h9tfQbWgD3TWnXgKJ3/jDgnAMWfS1vwZPVEomdA1QsD8Pd0M8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:23 2026 by rpki-client