Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft
File:                     B9FC538BFBE91D32C980E6C968C96604E388FD26.mft (raw, json)
Hash identifier:          dFfCalEfgvOO042L9xYk+dEWvjRFKG7U4kN/y0PtiVc=
Subject key identifier:   84:5B:1E:46:E0:CA:1A:8F:D1:EB:96:BE:AE:ED:38:9C:5C:C6:3E:94
Authority key identifier: B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26
Certificate issuer:       /CN=B9FC538BFBE91D32C980E6C968C96604E388FD26
Certificate serial:       6589111777911759FF81A27F64B23E96FB8E9286
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft
Manifest number:          3F
Signing time:             Wed 17 Jun 2026 07:11:37 +0000
Manifest this update:     Wed 17 Jun 2026 07:06:37 +0000
Manifest next update:     Thu 18 Jun 2026 09:42:37 +0000
Files and hashes:         1: B9FC538BFBE91D32C980E6C968C96604E388FD26.crl (hash: wYfWsE1Q3t8PpvWd3nfx01u9voRpswIakV+f5cyyxtg=)
                          2: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: ucIu0OXRxfc1CywG+yYTICGHOqWxj9NSpYywYNEl67o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl
                          rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:89:11:17:77:91:17:59:ff:81:a2:7f:64:b2:3e:96:fb:8e:92:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9FC538BFBE91D32C980E6C968C96604E388FD26
        Validity
            Not Before: Jun 17 07:06:37 2026 GMT
            Not After : Jun 18 09:42:37 2026 GMT
        Subject: CN=845B1E46E0CA1A8FD1EB96BEAEED389C5CC63E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:cf:3a:b6:08:f6:5b:65:22:d2:a5:ff:a5:
                    93:e0:ac:a4:34:4b:e3:3b:4f:6d:19:e3:a4:34:d3:
                    aa:42:f2:be:3a:ea:7a:92:62:c9:09:51:25:2d:ac:
                    e2:82:f8:d3:1a:7a:e8:a2:2b:27:a2:f8:14:dc:f9:
                    c3:24:af:f7:10:ab:bd:19:ad:3d:be:df:0d:96:d7:
                    49:57:c9:3a:d5:f1:19:05:ff:ac:6d:1f:09:a7:4b:
                    d5:72:32:90:fc:64:b8:29:66:4d:8f:d0:c4:0b:e8:
                    40:24:21:5f:f2:b5:ec:97:8a:cd:a0:84:c5:e5:28:
                    ee:ce:37:c1:9a:2a:e5:eb:08:46:46:e6:21:fe:fb:
                    6b:67:cc:50:8b:17:03:40:d6:01:2b:1e:14:f2:14:
                    dd:fe:df:20:8b:68:39:59:c9:de:9a:98:69:1b:11:
                    7b:d1:0b:a7:87:45:ec:80:67:8a:22:53:24:f4:60:
                    ac:22:71:2f:17:b1:b6:f8:b5:8f:2e:ef:d8:2b:a9:
                    58:d4:4a:30:e9:f6:fa:5b:66:3a:f7:22:cf:66:21:
                    1b:34:3d:5f:23:07:8e:60:62:0f:ed:b4:4c:95:b4:
                    d4:c0:07:7b:2d:3b:ce:fe:96:b4:28:a3:43:4d:09:
                    86:dc:40:6e:bf:b0:d5:38:f0:b5:a9:16:01:04:a8:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5B:1E:46:E0:CA:1A:8F:D1:EB:96:BE:AE:ED:38:9C:5C:C6:3E:94
            X509v3 Authority Key Identifier:
                keyid:B9:FC:53:8B:FB:E9:1D:32:C9:80:E6:C9:68:C9:66:04:E3:88:FD:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9FC538BFBE91D32C980E6C968C96604E388FD26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/B9FC538BFBE91D32C980E6C968C96604E388FD26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:55:05:58:d6:01:dc:61:84:de:a7:5f:2b:72:18:ab:f7:
         28:1b:9b:53:0b:50:7e:83:a1:8a:1b:29:d7:47:f6:40:46:29:
         fc:bc:9f:54:89:c1:94:cc:7e:62:d7:ca:4f:09:b8:fb:5a:df:
         2d:b5:97:97:d1:e9:24:01:41:ad:f9:09:73:65:27:de:5e:a6:
         db:cd:cc:af:9f:1f:80:a9:50:3b:b0:d4:f0:d3:25:18:5b:8f:
         cb:ab:cc:e4:bb:19:93:a0:8a:8d:17:e9:76:17:fb:84:a3:a4:
         41:3e:39:26:f0:d5:db:7d:d5:ae:a7:16:db:42:8f:c1:df:8f:
         2c:68:92:e5:51:5c:58:26:79:bd:c5:8d:5d:89:5e:5c:32:ae:
         04:a7:2d:3f:45:29:07:fb:63:86:1c:46:89:0d:12:50:b2:4f:
         c7:f8:5f:81:5d:93:2e:0e:d7:a4:d4:71:2f:42:10:0b:e7:10:
         ce:e0:86:44:8a:ab:50:40:10:62:5c:18:27:2b:80:6c:a3:9b:
         2b:d2:ac:57:2e:19:d4:60:29:27:54:e9:af:e7:0b:cf:4c:ce:
         63:0d:17:ae:ed:b7:0b:02:a3:be:d7:12:5f:81:87:c2:2d:ba:
         ce:37:1d:30:8e:00:8f:d5:7c:98:ab:d1:9b:3c:d6:fd:23:28:
         3f:2b:9d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:14:04 2026 by rpki-client