Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
File:                     9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft (raw, json)
Hash identifier:          uusPYFXFQo3iApQreGtDJ4ieKvzgm+rhg5gZB+bM9tY=
Subject key identifier:   B4:0C:9E:9F:C2:E2:72:27:D1:7A:F4:E9:13:A4:96:76:D6:9F:49:F6
Authority key identifier: 93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C
Certificate issuer:       /CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C
Certificate serial:       3BF03F844320D64288B926A8666C466A3D5C9A6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
Manifest number:          BD
Signing time:             Sun 20 Sep 2026 09:39:07 +0000
Manifest this update:     Sun 20 Sep 2026 09:34:07 +0000
Manifest next update:     Mon 21 Sep 2026 10:52:07 +0000
Files and hashes:         1: 9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl (hash: ynGFXHS3/s1Lk6LmOHUh0i0hUrkmv6cq7VEU91exaDI=)
                          2: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: 1y2hMqgy1k18v9KwV+64AHSdurxHF23pHNvVVwGqp7s=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl
                          rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 10:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f0:3f:84:43:20:d6:42:88:b9:26:a8:66:6c:46:6a:3d:5c:9a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9376CDF3D2A44CC41764F89F68FD7E4130EB351C
        Validity
            Not Before: Sep 20 09:34:07 2026 GMT
            Not After : Sep 21 10:52:07 2026 GMT
        Subject: CN=B40C9E9FC2E27227D17AF4E913A49676D69F49F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:e0:11:27:0f:5a:02:71:f0:8e:32:28:f2:
                    ad:24:d8:e5:df:91:98:a1:d0:56:d4:95:c0:0c:db:
                    bf:72:ae:bf:c3:16:b0:19:7e:cc:e9:54:59:21:00:
                    b8:85:d8:f0:62:95:21:60:6e:cc:a3:12:f1:8e:7e:
                    d0:c1:71:6c:d2:f7:d1:06:0b:ed:dc:cb:74:49:c8:
                    4a:61:9e:f8:82:d8:c8:1f:47:85:c3:ef:6c:22:06:
                    dd:5c:3b:70:99:8e:85:1d:a8:35:7f:dc:e2:79:7b:
                    31:79:b1:11:07:13:a3:fc:68:33:c6:18:17:fc:26:
                    c2:c7:ff:78:45:2c:0f:bc:0a:dd:47:7c:e5:39:fa:
                    66:47:28:49:93:2e:91:27:17:04:8c:54:9d:61:88:
                    bc:d5:bd:04:7e:09:73:29:2f:ff:07:a6:7a:1e:d8:
                    e1:19:92:28:71:b6:87:3d:ef:9b:91:0e:84:45:53:
                    09:3b:45:a0:fc:bf:55:3f:86:df:2d:a2:5b:0b:a0:
                    73:70:0b:90:05:3e:bd:60:45:47:f2:f2:e5:21:43:
                    79:fa:b5:05:bd:6f:1c:55:2c:34:08:cb:94:39:95:
                    6f:e2:4d:ad:5e:84:be:9b:84:77:b6:1c:ac:b7:f3:
                    9e:ce:f3:42:04:e5:b1:b3:63:e7:8e:0c:67:6f:ab:
                    3f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0C:9E:9F:C2:E2:72:27:D1:7A:F4:E9:13:A4:96:76:D6:9F:49:F6
            X509v3 Authority Key Identifier:
                keyid:93:76:CD:F3:D2:A4:4C:C4:17:64:F8:9F:68:FD:7E:41:30:EB:35:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/9376CDF3D2A44CC41764F89F68FD7E4130EB351C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:6a:c3:08:00:95:61:c0:cc:6d:47:0c:60:74:b4:33:77:
         95:77:26:d2:88:b5:ac:52:6f:80:3c:3f:13:be:24:66:e9:e0:
         c9:18:9a:fc:ec:d3:bc:24:a1:94:fc:b8:c2:99:f5:4b:71:96:
         63:99:ad:f0:3b:e3:6c:06:eb:cf:1d:8b:a1:33:3f:73:40:69:
         3f:9f:0e:ec:79:6b:b4:28:57:53:db:22:c7:24:3c:68:52:f5:
         eb:83:a3:fd:79:46:bc:6e:44:2c:f7:65:24:80:2b:5c:55:8e:
         91:39:3b:37:e9:b0:41:4e:27:b4:fa:2e:00:73:45:47:8a:cf:
         5f:b6:91:f1:b4:2e:2e:39:d3:39:82:c0:c8:64:32:e9:21:27:
         02:d3:64:25:94:36:ab:04:a1:29:60:8e:a8:57:4f:ba:e8:84:
         3a:cb:31:27:35:d4:47:15:ac:91:e9:0a:ca:6d:6a:8d:c6:de:
         45:e6:54:d3:be:0c:85:0e:3b:d9:cd:1c:5c:6e:fe:ee:6d:63:
         24:33:99:c5:0b:34:b9:6c:4e:0b:74:8c:00:df:4b:ab:0a:a7:
         b3:94:15:59:1b:f6:86:ec:ec:95:a9:f4:dc:fc:b7:31:af:2d:
         b1:2d:17:d6:8e:11:ae:0b:4f:eb:19:8d:3f:9b:0a:99:71:b4:
         1a:d7:9e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:25:10 2026 by rpki-client