Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft
File:                     80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft (raw, json)
Hash identifier:          /etVimsMc/p04vjcs6ek/U4fCubuqjwuEnSvFjvhfro=
Subject key identifier:   FB:35:4B:59:CB:1D:DE:84:DA:38:A9:85:D2:4D:DB:C7:F5:21:91:71
Authority key identifier: 80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09
Certificate issuer:       /CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209
Certificate serial:       1C747CF324AE1CF111F68898CEBC97ABA8F2B966
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft
Manifest number:          D9
Signing time:             Sun 11 Oct 2026 01:28:07 +0000
Manifest this update:     Sun 11 Oct 2026 01:23:07 +0000
Manifest next update:     Mon 12 Oct 2026 02:46:07 +0000
Files and hashes:         1: 3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (hash: ju41spnPdcHn0VAkhkr7SjNUGWOqHvM+2TsOOFmj39s=)
                          2: 3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (hash: KSC50JIeH8ScOew84zEAbd5sRPIPNqne4mtxlU+Kjl4=)
                          3: 80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl (hash: ZBHy49zXw36G7Qou4Ao2XZVLwJRC/VHB6LTw+/5RSgM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl
                          rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:74:7c:f3:24:ae:1c:f1:11:f6:88:98:ce:bc:97:ab:a8:f2:b9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209
        Validity
            Not Before: Oct 11 01:23:07 2026 GMT
            Not After : Oct 12 02:46:07 2026 GMT
        Subject: CN=FB354B59CB1DDE84DA38A985D24DDBC7F5219171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:fb:50:da:03:f3:81:69:32:7c:25:59:e7:
                    1e:35:5c:49:4c:d1:06:ec:52:32:b5:f3:e4:fa:aa:
                    a3:8e:29:db:cd:90:ba:9e:e8:13:12:d5:b5:46:5e:
                    ff:b0:25:fc:90:b2:c2:19:dc:59:00:34:74:26:6e:
                    31:c2:c2:16:ee:9c:de:9a:ac:1a:57:ca:ab:22:af:
                    8c:9c:70:5c:7f:a8:5d:b1:19:51:3e:f8:14:87:e5:
                    a0:6e:ac:bc:f6:15:b4:d9:f0:51:12:7d:9a:13:d5:
                    5d:77:72:6c:73:36:90:04:5a:ac:60:a8:d6:c4:1d:
                    09:39:f4:15:74:40:03:67:d7:bc:22:34:15:58:24:
                    8a:a4:e1:aa:f4:fc:d6:e5:04:a1:bb:da:56:15:ef:
                    25:72:37:68:95:72:c4:50:f1:48:48:f0:dc:38:9a:
                    4d:9d:de:83:4c:d6:6c:56:43:30:02:c5:49:61:ec:
                    b3:57:c6:50:3d:4f:2c:31:61:05:82:45:d0:a2:48:
                    b2:c8:65:49:c2:86:4d:f1:6d:39:10:5e:f1:f8:81:
                    84:77:ff:94:a5:ec:b0:f4:15:9c:07:5b:22:8e:34:
                    da:0b:8f:5e:f4:e8:7a:46:ca:91:30:7c:9c:e8:ed:
                    d4:57:10:c7:48:a0:d9:ec:00:94:c7:05:97:c1:ea:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:4B:59:CB:1D:DE:84:DA:38:A9:85:D2:4D:DB:C7:F5:21:91:71
            X509v3 Authority Key Identifier:
                keyid:80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:94:7f:15:95:30:36:dd:4e:a1:8a:e1:33:e8:48:74:77:f8:
         f2:72:f5:68:26:bc:e6:71:5f:fa:1e:0e:0d:28:22:73:e9:52:
         f4:58:f5:4b:e7:94:3b:67:51:c0:09:be:e7:1b:f5:87:6e:1d:
         af:68:38:29:67:e6:1a:a7:55:e2:a9:40:f1:c7:7f:c3:58:9d:
         38:3c:ee:8b:1d:d6:2d:56:1d:74:6e:40:a7:4b:81:f3:cb:7a:
         e4:58:a6:70:c9:f5:7b:1c:2d:b1:a7:74:9b:f7:cc:43:07:52:
         e6:26:fb:b9:16:d7:9c:cf:d3:ba:43:55:54:a1:a8:29:7a:47:
         3c:1e:fc:e9:db:b1:99:09:84:6e:46:5b:09:82:66:46:39:b7:
         19:fe:4e:fb:32:d4:1b:f1:8a:4f:aa:66:10:2f:08:ed:90:53:
         a0:51:11:28:34:91:b2:84:ca:46:c8:61:fc:e2:af:d2:61:5e:
         87:cd:3f:3f:aa:82:74:1a:90:c8:87:36:10:c3:1f:4f:48:cb:
         48:09:74:ee:2a:2c:3f:e7:3b:03:1c:0b:08:48:8b:fa:4e:59:
         94:87:b7:84:01:4e:af:c7:64:64:55:54:03:dc:f9:97:0c:5c:
         1f:c6:8e:c9:11:53:43:7c:bf:70:9e:85:9c:4c:c8:1e:4b:70:
         6a:cf:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:29:00 2026 by rpki-client