Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
File:                     860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft (raw, json)
Hash identifier:          PrEoOrzOA9osHpbQSVORxD3Wtbkp03B0YjFtddpKIKU=
Subject key identifier:   E9:30:31:6A:09:19:4E:33:BB:1C:E8:55:73:D5:2D:39:CE:84:98:6D
Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D
Certificate issuer:       /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
Certificate serial:       6AFB139B7B446B7398146184B25844CEE8B25249
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
Manifest number:          C0
Signing time:             Mon 21 Sep 2026 21:17:59 +0000
Manifest this update:     Mon 21 Sep 2026 21:12:59 +0000
Manifest next update:     Wed 23 Sep 2026 00:12:59 +0000
Files and hashes:         1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: 0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=)
                          2: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl (hash: Q3J4UbdBRVZa9oTC2+A4kb67iIzWL1ukV/yClutBrhI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl
                          rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 00:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fb:13:9b:7b:44:6b:73:98:14:61:84:b2:58:44:ce:e8:b2:52:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
        Validity
            Not Before: Sep 21 21:12:59 2026 GMT
            Not After : Sep 23 00:12:59 2026 GMT
        Subject: CN=E930316A09194E33BB1CE85573D52D39CE84986D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:3b:32:99:b5:e2:13:a9:67:74:a1:14:92:
                    90:12:3c:a5:7b:7f:4d:52:67:97:c6:9b:27:4d:37:
                    e7:a1:4a:a7:75:6a:e3:25:2f:1a:28:35:46:91:51:
                    58:1b:94:a4:ff:8d:ac:25:90:8b:cf:8b:d8:0c:c0:
                    4b:6e:08:e2:ed:7a:f0:4b:ab:32:83:81:33:91:18:
                    21:63:94:02:b5:14:61:99:dc:5b:ff:e8:28:6f:69:
                    ca:6c:3d:1e:62:a8:6d:54:42:90:1b:65:c2:57:a6:
                    0e:19:5e:b2:52:a0:4c:0f:e3:c6:5e:3a:0e:f6:e0:
                    08:f4:f7:78:84:38:e5:ae:89:b7:e7:bb:c9:7a:bb:
                    93:df:8a:02:6a:c4:d4:80:7c:7b:15:81:81:74:85:
                    da:4e:03:15:67:01:1a:33:be:02:03:cb:7f:a5:a5:
                    be:32:32:50:61:fb:cf:56:fa:9f:59:d5:ec:fe:20:
                    54:28:a5:0f:71:86:34:6b:30:92:4d:c8:d4:92:0a:
                    0a:1b:0f:99:c2:d7:a8:4d:b5:04:2e:86:b8:f8:3f:
                    96:a4:1a:1d:b2:86:07:1c:83:99:bf:49:43:ff:39:
                    13:f7:be:a3:ab:45:70:f8:bf:1c:c4:a0:70:05:7b:
                    87:88:89:36:60:11:7f:ee:e6:f3:55:fb:56:67:72:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:31:6A:09:19:4E:33:BB:1C:E8:55:73:D5:2D:39:CE:84:98:6D
            X509v3 Authority Key Identifier:
                keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c1:84:05:f1:1a:5e:f1:0d:4c:94:3d:ed:0c:1c:82:d3:f9:
         2f:b4:8d:b5:fb:92:b6:a6:22:65:db:4b:ce:7e:e7:ec:93:26:
         cf:7c:9c:ab:ca:fe:4d:4f:20:c3:09:c6:34:62:99:9c:85:da:
         de:d9:5c:9d:5f:63:11:81:96:50:11:b3:48:56:ad:de:02:40:
         d1:ef:a1:fd:69:27:4d:b4:33:15:6f:e4:a2:6a:cd:21:37:77:
         25:e7:2d:96:2b:7c:82:9d:d6:b8:4f:00:de:92:6d:1e:73:0e:
         ce:68:b0:d7:00:d8:e8:a7:92:a8:b8:81:b8:8d:c5:b1:2e:d4:
         3d:2f:60:ba:f0:fa:c7:e0:66:52:0e:3b:53:ee:56:af:30:bd:
         73:40:a6:1e:bf:aa:d3:15:0c:5e:64:bd:81:bf:51:69:5d:3d:
         bc:1a:86:60:ce:c1:db:42:ee:ea:dc:28:d4:be:42:c4:42:e7:
         a4:dc:3d:ad:4a:a0:3e:79:b0:64:3a:fd:d1:0d:db:cd:b6:4d:
         4e:9f:e8:43:6f:23:1f:b9:52:26:ef:21:e3:98:6a:87:47:38:
         ec:97:a3:00:89:a5:23:42:1d:50:f4:ae:cc:6b:ff:9a:b7:4c:
         7d:ab:75:76:63:f7:1f:10:4c:f4:86:77:a5:2b:fa:1f:a0:2b:
         17:4d:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:18:14 2026 by rpki-client