Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
File:                     9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft (raw, json)
Hash identifier:          Q1o7RjiRCKSP5phuX3ey9Up0dhN+4OU8HKAsOimTdtU=
Subject key identifier:   2B:5D:D7:84:EB:EF:26:06:D8:F7:13:31:89:21:D0:51:9D:14:87:A5
Authority key identifier: 9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E
Certificate issuer:       /CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
Certificate serial:       709FBBF3E063AD40E23D475CC71AC509186AD424
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
Manifest number:          3C
Signing time:             Mon 15 Jun 2026 08:01:01 +0000
Manifest this update:     Mon 15 Jun 2026 07:56:01 +0000
Manifest next update:     Tue 16 Jun 2026 10:03:01 +0000
Files and hashes:         1: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: 1l7BLLHS+TGyR07xEVlu5VYGZCuMxLn7HlZoUt+u8AM=)
                          2: 9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl (hash: tOO2SpJTuQOeBIA1geCVh0jeURYJ2cdhOYhhwBwkcTQ=)
                          3: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: qsT0+VavPcHM0/0OWpLNw++GFhjVrktegs30W7OSHuM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl
                          rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 03:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9f:bb:f3:e0:63:ad:40:e2:3d:47:5c:c7:1a:c5:09:18:6a:d4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E
        Validity
            Not Before: Jun 15 07:56:01 2026 GMT
            Not After : Jun 16 10:03:01 2026 GMT
        Subject: CN=2B5DD784EBEF2606D8F713318921D0519D1487A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:e1:ff:46:41:d3:ee:45:81:94:dd:1f:63:
                    14:a4:cc:ff:41:ff:f1:00:70:1b:26:fa:f6:36:b4:
                    53:93:1b:c1:dd:64:7d:b3:eb:68:05:ea:ca:87:52:
                    c5:fa:19:e6:f9:82:7c:5b:86:2d:05:6e:33:81:62:
                    52:59:4a:36:b0:d7:7d:da:fe:76:39:84:43:8f:a2:
                    b6:93:42:40:88:76:39:90:af:74:14:f7:a3:7e:66:
                    71:d7:f3:28:5e:cb:79:00:97:7e:db:c9:85:d4:64:
                    d3:db:f4:ec:58:a3:91:b6:51:b6:bf:f3:79:1d:4e:
                    d5:1c:d2:41:5e:f5:72:0b:4d:76:dc:cd:d3:9d:2a:
                    2d:ba:e2:8e:1d:1f:c3:14:af:f6:32:9e:39:d6:ad:
                    35:0c:d4:76:e6:8b:9a:1d:2f:ad:ca:5a:7b:84:fc:
                    e9:75:3b:80:06:dc:b3:fb:e5:06:84:19:b8:bf:f5:
                    00:44:8a:90:69:c4:82:a5:ff:86:3e:cf:da:bc:f5:
                    08:0c:e2:36:fd:5b:b3:b8:3d:2c:68:36:ef:d4:e1:
                    7e:4a:e0:7b:cf:23:e5:71:d3:b4:a7:f2:a8:93:14:
                    92:1a:0f:79:e8:f8:60:3d:bc:fc:a2:50:60:60:ff:
                    bb:4f:83:4d:10:42:36:93:d3:3c:92:66:ef:75:18:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5D:D7:84:EB:EF:26:06:D8:F7:13:31:89:21:D0:51:9D:14:87:A5
            X509v3 Authority Key Identifier:
                keyid:9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:20:04:18:54:85:b5:3a:b9:d9:05:c4:83:97:9d:5b:11:
         9f:39:29:be:db:41:7d:59:d9:79:23:11:5b:12:f5:15:f7:b1:
         07:a5:53:c8:94:54:48:c7:91:c3:b7:78:ee:2e:d5:bd:8b:bf:
         44:ec:73:2f:46:6a:df:c8:f8:d7:ff:73:c4:0a:95:ae:4d:34:
         97:8c:22:bc:56:5b:42:6f:d4:3f:78:f3:23:0a:31:00:df:ee:
         2f:a1:cc:7c:fd:39:d2:53:fd:13:8a:50:be:03:93:2f:f9:9a:
         88:f7:73:c7:70:ca:fa:50:ea:e8:87:ba:6f:05:ef:4f:80:2e:
         65:a1:31:1f:07:2e:2a:3a:fb:52:42:1b:4d:7d:48:8c:c2:b9:
         dc:13:de:fd:33:4f:9c:54:08:18:14:60:e0:9e:b3:56:54:3e:
         03:a1:e7:f6:da:ee:57:b4:f7:87:a2:66:97:00:f2:9b:49:6f:
         f4:e1:69:51:24:a1:df:1e:fb:32:cb:22:56:04:ce:51:f1:84:
         85:4b:ab:12:cb:ef:19:ce:ce:c3:dd:69:11:24:b8:7d:8e:48:
         1a:b5:33:ef:66:13:83:9a:a3:97:e9:d2:9c:83:e5:1b:46:c0:
         32:ba:18:bc:b2:34:cc:96:86:15:17:84:13:6e:49:87:83:4c:
         f6:aa:5b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 16:28:21 2026 by rpki-client