Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
File:                     9DE0710D199DAE298457CA63B91BD20C03F148B9.mft (raw, json)
Hash identifier:          I6nR7to2wRPjhE2UTQfO6q+481RjDVh283TVPVJz7Hs=
Subject key identifier:   19:9F:83:A2:26:C7:17:C4:B8:04:6E:82:BB:0D:9C:C6:41:8A:81:8B
Authority key identifier: 9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9
Certificate issuer:       /CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
Certificate serial:       2FD5EA2871B3D3F20619DDFF97EF2DD9F01114EA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 09:27:49 +0000
Manifest this update:     Wed 23 Sep 2026 09:22:49 +0000
Manifest next update:     Thu 24 Sep 2026 13:06:49 +0000
Files and hashes:         1: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Wixcu+2ilRcFPig7lum9EHWYiNT3uxWOphv6H0Og4uE=)
                          2: 9DE0710D199DAE298457CA63B91BD20C03F148B9.crl (hash: KCDvuCgWyf0VZ/eDJrXcnePBa+P3r6MfBMxMPlucTDw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl
                          rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 05:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d5:ea:28:71:b3:d3:f2:06:19:dd:ff:97:ef:2d:d9:f0:11:14:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE0710D199DAE298457CA63B91BD20C03F148B9
        Validity
            Not Before: Sep 23 09:22:49 2026 GMT
            Not After : Sep 24 13:06:49 2026 GMT
        Subject: CN=199F83A226C717C4B8046E82BB0D9CC6418A818B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:0d:da:36:c7:34:93:33:07:7e:94:8a:69:
                    6c:2c:82:7e:bb:46:17:85:76:c3:7f:9d:fb:59:ad:
                    56:e4:0a:d7:72:e4:e7:2a:a1:24:6b:a5:59:6e:27:
                    67:b8:df:4b:a4:b8:2d:81:53:a8:07:81:da:85:e6:
                    64:e3:c0:b8:c4:bb:20:e3:6c:f5:42:2d:cc:43:17:
                    05:49:3b:fb:67:39:b1:15:5a:71:27:d8:10:ad:a9:
                    86:43:32:c6:97:61:57:13:9c:fb:ea:db:7d:36:89:
                    7b:49:26:21:d1:50:0c:6d:22:6c:d2:02:73:14:26:
                    84:77:e7:ad:82:b5:2c:7a:28:2a:83:4b:c6:ec:ac:
                    bf:56:70:ef:c7:77:ca:bf:ac:04:e1:ed:d9:e0:b0:
                    31:e2:7a:b6:f4:bf:61:77:1b:e0:1b:bb:1e:30:48:
                    67:8a:f9:7d:38:36:8a:51:7f:2f:5a:db:f6:91:5f:
                    21:4f:b0:68:01:c9:0a:9d:dd:4f:d1:31:7a:b8:4f:
                    7d:70:5a:c5:51:26:5e:b1:64:79:6e:73:6d:e6:91:
                    56:43:84:0f:01:e6:b7:15:17:89:79:fc:73:d3:04:
                    d0:ec:82:0f:ed:ba:db:4e:16:38:21:84:e0:9e:30:
                    e6:23:de:18:a7:40:58:12:58:eb:b5:d1:ea:7c:3d:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9F:83:A2:26:C7:17:C4:B8:04:6E:82:BB:0D:9C:C6:41:8A:81:8B
            X509v3 Authority Key Identifier:
                keyid:9D:E0:71:0D:19:9D:AE:29:84:57:CA:63:B9:1B:D2:0C:03:F1:48:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DE0710D199DAE298457CA63B91BD20C03F148B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/9DE0710D199DAE298457CA63B91BD20C03F148B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d3:2f:b4:d6:4e:41:ff:0b:3c:87:1c:93:42:2f:85:0b:c3:
         1c:07:8f:a3:c5:c6:a3:48:1d:e1:98:01:52:37:63:c2:72:7a:
         c8:bd:f9:42:be:db:e2:2a:2f:94:52:17:15:25:cc:db:06:28:
         f1:69:e4:86:b4:ab:44:c2:b3:9a:e7:65:79:a6:1e:af:f8:5e:
         7c:8d:c9:d9:b3:42:bf:d0:42:30:25:98:4a:b5:f5:21:07:af:
         12:53:52:30:3d:d4:44:8b:d3:7a:31:57:17:d7:89:59:db:f0:
         90:9e:44:5a:05:76:6b:aa:b3:0d:15:ad:9d:64:5d:04:62:4c:
         d9:14:cb:6d:83:4b:c7:d2:a4:ab:83:41:b9:f2:cb:49:44:81:
         33:d4:85:9b:0a:3b:3d:1c:39:e2:81:19:79:0d:fd:56:b9:a4:
         ab:f6:9a:8b:a3:46:50:41:2b:d0:93:5c:84:df:e9:e6:ec:52:
         03:86:6b:1b:d9:45:f7:72:5c:73:6a:1b:3d:d8:23:18:eb:4b:
         08:f8:d3:1b:f2:92:a4:7c:68:5a:ba:3f:68:27:bf:42:ae:bd:
         47:4f:a3:58:bd:08:54:17:cd:7f:92:5c:77:1b:19:24:50:be:
         f4:ff:81:e6:67:cd:5d:1d:6c:cd:e3:40:ed:a0:5e:c0:ad:6a:
         9e:4f:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:53:56 2026 by rpki-client