Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft
File:                     8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft (raw, json)
Hash identifier:          7bo3iPpStncFNNpyVaiULMTJIYl/rTMct8piku/Y9CI=
Subject key identifier:   A5:B8:A4:53:15:69:FE:06:FE:CA:CB:56:E8:6B:3C:40:B8:38:52:66
Authority key identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7
Certificate issuer:       /CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7
Certificate serial:       5834288693ED30899ED359774990A0682D2A20B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft
Manifest number:          C3
Signing time:             Fri 25 Sep 2026 17:37:10 +0000
Manifest this update:     Fri 25 Sep 2026 17:32:10 +0000
Manifest next update:     Sat 26 Sep 2026 19:37:10 +0000
Files and hashes:         1: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl (hash: LVoit5DY8r/FXeB8joo4slz3RE97fzLGCAxy1Nt/S/Y=)
                          2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: c2UfSKD11fX4h2x5HJIXy7pbYdyuzBLTiInfb4Fri14=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:34:28:86:93:ed:30:89:9e:d3:59:77:49:90:a0:68:2d:2a:20:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7
        Validity
            Not Before: Sep 25 17:32:10 2026 GMT
            Not After : Sep 26 19:37:10 2026 GMT
        Subject: CN=A5B8A4531569FE06FECACB56E86B3C40B8385266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:b0:d6:e0:7b:78:4f:15:45:3e:e5:19:b3:
                    04:2e:6c:9c:af:67:7d:ee:a7:31:08:2e:7d:03:13:
                    db:a4:19:31:81:e2:60:4f:98:4b:ba:2c:0c:20:88:
                    9e:49:7b:9e:3e:68:dc:a2:cf:4e:07:90:a2:73:e6:
                    6a:05:1e:e8:50:b5:3a:58:76:f2:8d:8d:ee:93:26:
                    48:9b:88:69:e0:d3:c7:d7:4a:1a:61:e1:8a:11:33:
                    88:c0:c3:0e:e7:98:c2:54:6e:5c:73:32:cd:5a:f1:
                    9d:35:e2:58:ce:f7:88:6f:68:fe:a2:ed:82:26:ea:
                    15:d5:b7:61:d1:47:38:44:18:c8:77:fe:5b:cc:b1:
                    a3:e2:f7:d5:e7:23:22:fa:ad:ee:5e:31:fe:94:74:
                    41:d9:87:5f:ac:9e:ee:71:9f:d9:39:91:d6:6e:d4:
                    74:11:d2:7f:1c:86:68:62:b6:b6:0e:47:b9:91:60:
                    52:d7:30:c4:09:90:03:7c:ef:ee:7f:1e:92:db:22:
                    00:a3:4d:4a:d0:5b:5d:ba:15:f9:b4:b3:66:13:bd:
                    aa:21:d2:ba:d1:13:47:2b:3f:0a:48:75:a0:52:48:
                    f1:cd:9e:81:ab:69:1a:ca:2c:a1:b5:47:12:70:c6:
                    df:cd:7f:c2:46:ff:79:61:82:50:35:eb:b6:fc:68:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B8:A4:53:15:69:FE:06:FE:CA:CB:56:E8:6B:3C:40:B8:38:52:66
            X509v3 Authority Key Identifier:
                keyid:8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d4:5e:eb:08:09:75:d3:01:0c:7a:e0:9f:d9:e8:33:d0:28:
         7a:9b:f9:72:c4:4f:4d:6b:2f:26:05:17:b5:60:25:94:2b:aa:
         c1:5a:c7:b4:6e:68:36:58:20:24:2d:26:90:f1:45:b1:33:b1:
         be:ca:9b:15:72:e0:d1:1d:cd:45:00:9f:61:54:d4:ae:1f:60:
         b6:c4:95:6f:6a:bf:24:85:e6:c2:ea:fd:aa:99:94:54:42:47:
         8a:37:59:40:7c:12:fb:0a:bf:8a:ff:49:87:66:1b:e3:57:ca:
         90:ac:a5:54:24:9a:35:5a:82:b3:d3:62:b2:17:f6:b3:d9:76:
         f6:1f:5c:7a:70:f8:a1:0d:55:34:d1:87:16:5c:24:19:65:1a:
         c3:26:98:a8:2a:36:0e:57:4c:77:59:3d:80:91:32:73:8c:4a:
         e3:19:20:b0:1b:95:83:cc:5e:ae:47:fc:52:a2:36:24:11:58:
         00:29:42:6e:d9:28:22:24:9d:7d:ff:41:dc:39:a4:a3:a9:c6:
         9f:0c:6a:ff:f3:1a:8f:39:03:b0:73:56:4d:ac:39:c0:62:8d:
         15:71:e3:34:e0:52:64:43:d2:80:b9:79:b5:8d:0d:aa:76:7f:
         59:2b:1a:e7:c2:bc:87:53:46:73:a1:ab:36:54:79:ea:e3:46:
         44:29:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:00:39 2026 by rpki-client