Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
File:                     F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft (raw, json)
Hash identifier:          pAY7xvsY8Jksjdv5G+2o1C3CKcCl4bmUgPogcYZQSag=
Subject key identifier:   2D:DC:DC:96:8A:75:F3:5A:53:1E:F1:79:9D:EE:29:61:9D:09:E4:9B
Authority key identifier: F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A
Certificate issuer:       /CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A
Certificate serial:       676236C631AB17092BC263DA784729FB50830C37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
Manifest number:          BE
Signing time:             Mon 21 Sep 2026 13:17:59 +0000
Manifest this update:     Mon 21 Sep 2026 13:12:59 +0000
Manifest next update:     Tue 22 Sep 2026 15:11:59 +0000
Files and hashes:         1: 3130332e3133352e32342e302f32332d3234203d3e20313331363939.roa (hash: 07viVR7x7xC+LRLwxX1MyeHpdtbWCRULeR9H9eZeyfE=)
                          2: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl (hash: FyRJkKT4ufz52VqiSCZ/54ipUM+lqy4WPLtZ76DL6VU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl
                          rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 15:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:62:36:c6:31:ab:17:09:2b:c2:63:da:78:47:29:fb:50:83:0c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A
        Validity
            Not Before: Sep 21 13:12:59 2026 GMT
            Not After : Sep 22 15:11:59 2026 GMT
        Subject: CN=2DDCDC968A75F35A531EF1799DEE29619D09E49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:c0:5f:f7:97:8f:f9:67:f7:c9:28:67:90:
                    ba:a3:02:c7:3a:7f:6f:ed:b1:07:33:88:a4:34:73:
                    1c:1a:ec:b4:89:e4:15:13:e9:90:3e:22:dc:c8:ab:
                    08:c0:29:6e:42:fa:0b:2c:16:59:5b:6c:27:a2:ba:
                    70:c8:73:2c:92:46:18:86:51:b8:c7:e0:fb:99:bf:
                    be:c9:bf:8e:1f:74:c2:96:b9:eb:e2:5d:ca:02:cb:
                    64:6e:4b:14:30:e8:ef:08:b2:0b:1b:f1:9e:ad:47:
                    ab:63:ef:bc:01:e9:17:ef:6b:4e:04:4a:85:24:6d:
                    8e:6e:6a:14:f2:94:36:cd:f8:5b:72:95:fd:2a:3e:
                    56:cd:19:5d:fd:bd:0a:f3:d8:29:d7:52:dc:7e:1b:
                    1c:fd:18:0d:ab:d4:7d:49:39:23:90:ba:aa:b6:98:
                    92:04:05:81:09:1f:b0:4f:75:81:9f:ce:7b:6c:c1:
                    e0:2f:79:d6:f8:81:ea:a5:ae:fa:ca:6b:ae:fa:2e:
                    38:cd:23:7a:ce:9f:ff:b7:69:7d:31:32:2d:8e:02:
                    2c:bc:7c:c4:c1:58:45:a8:43:d0:2d:3f:7b:bb:21:
                    8e:db:7f:bc:ce:4a:61:cf:26:8c:cd:78:24:97:72:
                    d3:9b:7d:a1:41:a8:ce:ee:6a:b2:04:f8:e6:c2:04:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DC:DC:96:8A:75:F3:5A:53:1E:F1:79:9D:EE:29:61:9D:09:E4:9B
            X509v3 Authority Key Identifier:
                keyid:F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:44:6d:d5:1b:70:44:d4:2d:93:10:b7:0c:3b:90:d5:69:21:
         ff:0d:47:3b:bd:45:f8:68:2a:19:b9:02:13:c9:ad:f3:74:16:
         00:b3:15:8c:87:a2:cc:7e:8f:0b:0a:1c:a8:e9:e3:91:c8:6e:
         f5:2b:34:77:d7:d0:2a:b6:6e:4f:96:f7:1b:da:b7:69:da:9d:
         06:ed:f5:6a:18:99:24:b2:81:79:a7:d0:b5:bc:e0:d9:a4:a8:
         bc:0f:ac:69:2d:bc:68:5c:15:07:a3:45:30:a0:1a:64:73:91:
         10:69:80:8f:b3:14:bb:c4:92:5f:d2:f9:0c:7b:e3:29:0f:a6:
         c3:a1:2f:2b:75:c8:c0:cd:be:b1:25:06:2c:97:60:de:2c:0e:
         64:62:84:36:7e:12:76:5a:ac:5f:b6:9d:fc:91:1c:80:6f:6e:
         41:44:29:36:15:d3:24:72:71:89:0e:c5:05:ed:b0:9e:51:83:
         d5:5c:54:2a:d7:0b:a1:f7:8d:18:dc:b7:33:c3:c5:f7:fd:7b:
         82:32:10:5c:bd:82:21:e2:82:87:29:b0:94:95:1b:84:9f:c9:
         5d:90:06:c1:f8:f2:ca:5c:bd:70:58:ae:1a:03:c2:7e:04:4c:
         d8:e8:e9:f6:be:22:38:7f:fd:01:c0:5c:bf:cc:d7:50:03:43:
         01:fb:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:29:57 2026 by rpki-client