Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
File:                     9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft (raw, json)
Hash identifier:          0bKO/YvvipB/61+t6GGk6dK54Xx2XcubFd27D/4Lt9g=
Subject key identifier:   A8:8D:E1:2B:D7:07:90:7B:62:C5:D7:BF:4A:B3:B2:A5:16:79:A9:6F
Authority key identifier: 9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E
Certificate issuer:       /CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
Certificate serial:       48404CDD8F7282E610F31C91EA19ADD343E6BF45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 09:58:51 +0000
Manifest this update:     Tue 22 Sep 2026 09:53:51 +0000
Manifest next update:     Wed 23 Sep 2026 13:57:51 +0000
Files and hashes:         1: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: 1l7BLLHS+TGyR07xEVlu5VYGZCuMxLn7HlZoUt+u8AM=)
                          2: 9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl (hash: QApMk+/+24iMb8wkvNtPBc/sGMLBchkh9tJ7BIUeQYA=)
                          3: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: qsT0+VavPcHM0/0OWpLNw++GFhjVrktegs30W7OSHuM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl
                          rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 12:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:40:4c:dd:8f:72:82:e6:10:f3:1c:91:ea:19:ad:d3:43:e6:bf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
        Validity
            Not Before: Sep 22 09:53:51 2026 GMT
            Not After : Sep 23 13:57:51 2026 GMT
        Subject: CN=A88DE12BD707907B62C5D7BF4AB3B2A51679A96F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:72:72:4a:84:6b:b3:f7:69:fb:88:26:c4:
                    0d:f2:da:59:16:50:55:a5:78:a1:94:28:48:9f:9c:
                    93:1a:55:ef:7b:62:94:9d:ef:c8:6b:6b:a6:a6:94:
                    9d:da:f6:27:29:22:b5:40:35:7f:70:5a:9f:0a:ea:
                    72:df:de:24:9d:a3:d3:f7:53:1c:5f:1b:3e:14:b0:
                    9c:24:d3:f2:72:39:73:ae:69:de:03:09:d7:42:fa:
                    f3:ac:63:6c:3f:4c:02:a8:e6:97:4b:b8:51:87:61:
                    2b:ef:3b:bc:67:5f:69:a1:b1:59:bb:59:1e:44:1b:
                    2a:de:9c:6f:0d:46:dd:28:de:92:fa:c8:d4:7a:6d:
                    b6:2e:fc:ca:7a:ed:80:52:51:a6:70:d9:cf:5e:ab:
                    1b:a5:d6:ab:9b:b9:c5:5f:dc:5c:6f:09:e4:c0:fc:
                    d5:89:41:84:97:32:e6:0b:5a:2d:50:53:58:5a:c5:
                    dc:78:b3:bc:68:38:d1:1c:f6:f8:9b:7f:81:e4:5f:
                    2c:0f:8d:69:8b:5a:4c:a6:ec:47:fe:dc:58:f2:a3:
                    89:8c:15:bd:80:0f:37:f8:07:3e:9f:af:0f:d3:53:
                    44:4e:f9:f5:64:0f:f1:6b:86:08:a3:bc:93:ac:95:
                    22:16:9b:cd:7e:3b:bc:61:f0:a1:4b:17:b8:4c:f8:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8D:E1:2B:D7:07:90:7B:62:C5:D7:BF:4A:B3:B2:A5:16:79:A9:6F
            X509v3 Authority Key Identifier:
                keyid:9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:62:40:f6:73:70:a8:29:ad:ad:b4:60:9f:e8:45:6d:6c:3b:
         a3:ea:2a:0e:10:d1:e7:0a:7d:3b:6c:6f:25:1f:44:2f:13:fb:
         a8:c7:b9:cb:d0:18:49:0f:13:1b:20:be:d0:c4:25:cb:3b:8d:
         cb:c0:78:0d:98:a5:7d:92:49:50:57:77:bb:6b:71:45:51:8e:
         25:3a:f9:e9:7f:eb:89:84:e2:e7:f2:06:6d:a7:8b:40:85:28:
         d2:b9:b1:03:c2:60:a4:db:55:1d:46:52:87:da:0b:0f:8d:b9:
         3a:86:bf:99:58:fb:8b:a1:f3:72:da:ef:83:c9:84:77:a5:86:
         71:31:b5:b6:66:2a:7b:66:f4:ba:08:5d:75:d8:d7:21:5c:fc:
         83:c5:12:bd:da:d6:46:d2:58:93:fb:d9:e8:c8:09:2f:da:fd:
         de:2c:f5:92:5e:1d:78:7b:7f:ad:fe:e8:62:11:20:3c:11:b8:
         31:d4:46:9f:0e:b3:6e:47:67:e4:91:c3:87:7f:41:4a:aa:b9:
         73:87:da:88:72:a3:4a:e7:ea:3f:43:9b:fb:1d:41:af:9d:02:
         fa:ed:f8:66:a1:d8:ad:c4:ad:68:f5:8d:a9:b1:9f:94:b9:e1:
         af:d5:ca:45:fb:29:19:d1:16:d5:a2:7c:66:87:75:89:ca:10:
         c2:e9:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:55 2026 by rpki-client