Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft
File:                     C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft (raw, json)
Hash identifier:          vi2IyyFsIJ4wwtMLSnXDjNZ+0QVjl56rVNacyC4ArEU=
Subject key identifier:   97:29:D0:4E:3C:D4:D5:01:4A:91:8C:85:0C:8D:A3:58:BB:5C:0C:4C
Authority key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94
Certificate issuer:       /CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894
Certificate serial:       4F81CDD94FC36A9701B02DCDC3BDF86918FF21A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft
Manifest number:          BC
Signing time:             Sun 20 Sep 2026 22:29:40 +0000
Manifest this update:     Sun 20 Sep 2026 22:24:40 +0000
Manifest next update:     Mon 21 Sep 2026 22:45:40 +0000
Files and hashes:         1: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Pfe66TELIpbboDlTlvL4smle14adEmFMF0KS3kt6HYM=)
                          2: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: ZVZI5MXEYgq+QpFFWNL7lGXYAS9omg0P+vD6tywGpec=)
                          3: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl (hash: Kd9HEtBNjeMt474kw2r7AbsNJpRU0ODzYgbvSGQRmvY=)
                          4: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: occ5qoM9oAkKmzdKhCiXxb0YYDDzZw7eQPlVtS1+AXA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl
                          rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:81:cd:d9:4f:c3:6a:97:01:b0:2d:cd:c3:bd:f8:69:18:ff:21:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894
        Validity
            Not Before: Sep 20 22:24:40 2026 GMT
            Not After : Sep 21 22:45:40 2026 GMT
        Subject: CN=9729D04E3CD4D5014A918C850C8DA358BB5C0C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:fa:3b:cd:04:24:22:8c:6f:1b:96:79:bd:
                    ce:fd:ab:45:2f:75:78:7d:6f:bc:30:b4:06:0a:10:
                    df:84:a1:15:e4:03:48:a3:af:93:3c:d2:27:56:bb:
                    85:12:61:09:85:45:b5:ed:46:dc:c6:b7:1d:2d:1d:
                    a5:7c:7f:3c:66:be:0b:b3:24:40:d7:e9:53:6c:bd:
                    39:b0:90:b4:34:cf:28:60:43:3d:28:8a:c1:b6:53:
                    bb:54:ea:a0:2c:83:8b:27:ae:6c:8d:6f:e2:b5:bd:
                    3d:5d:54:19:6a:95:73:cd:95:ab:28:c4:0f:f0:17:
                    a6:42:20:1d:9b:66:c9:f5:09:ea:ef:94:32:fc:c1:
                    60:cd:e9:10:27:fd:a5:37:1a:d3:29:30:24:a5:1a:
                    3f:e6:7e:ae:72:4a:06:08:80:76:f3:ff:1c:cb:31:
                    d6:80:f7:97:5a:25:8b:37:94:64:b6:6a:ed:2c:bc:
                    00:92:f8:c5:2b:d1:12:93:fd:97:a7:a5:3f:48:69:
                    62:be:8e:52:3c:8c:6e:97:2a:0d:58:f9:8b:36:26:
                    e5:fe:7f:88:53:63:95:0e:d1:dd:d0:6e:ba:5c:b0:
                    a5:35:d6:b2:41:5b:82:ea:e4:21:5f:ec:f3:95:69:
                    9f:86:5e:97:3b:55:fc:b5:a3:ea:c0:ac:f3:43:db:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:29:D0:4E:3C:D4:D5:01:4A:91:8C:85:0C:8D:A3:58:BB:5C:0C:4C
            X509v3 Authority Key Identifier:
                keyid:C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:10:5d:2c:10:ce:13:cf:23:80:ad:4c:3d:d8:b2:81:be:
         20:3f:44:c3:cf:25:b5:e7:97:cc:3a:39:9a:a0:90:47:81:5f:
         3e:76:bf:c4:81:96:78:ab:d7:34:9e:84:a1:fc:bc:4e:6d:4b:
         3d:90:fb:53:3a:f1:55:db:3b:2d:a3:2b:bd:26:32:c6:1a:46:
         ae:d9:5f:e2:b5:4b:ee:df:f0:28:2e:37:ad:01:16:8d:cd:e7:
         91:a0:0f:f7:24:9a:54:b0:73:be:ec:a8:8a:99:70:e5:ac:4a:
         12:79:f0:85:9f:f0:18:ab:4d:a2:59:25:1a:66:eb:a4:96:c5:
         2f:d9:99:15:c5:30:97:76:32:03:e8:6a:0b:ec:fd:fa:bf:7f:
         b3:42:ad:ea:fe:0d:bb:92:09:aa:71:fe:7c:83:92:12:7e:39:
         5e:9f:32:4c:0f:5f:da:35:70:55:2c:f1:10:d4:33:96:b9:43:
         0d:f6:3a:53:f5:da:8e:85:e5:b6:ff:cd:e4:bf:f9:9a:6e:b7:
         fd:76:e4:e6:a0:6c:50:89:05:b1:c3:67:04:73:ab:9a:b3:dc:
         a1:83:3d:3c:e0:48:d8:78:c6:5a:8e:fe:5b:d2:fa:c2:c7:79:
         17:50:14:f1:44:4a:ad:10:74:48:c6:7b:7d:ed:92:c9:27:ec:
         58:e1:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:43:52 2026 by rpki-client