Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
File:                     09F1FCE71540608DD361D20037B585CA6313B714.mft (raw, json)
Hash identifier:          MOQNlJk8ZG02i/gTyGqQZfPVEP1vMKUtuPaCNBpUDK4=
Subject key identifier:   26:24:A7:D1:CC:D5:EC:DD:20:BD:19:8C:F8:F1:67:9F:3C:95:27:0A
Authority key identifier: 09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14
Certificate issuer:       /CN=09F1FCE71540608DD361D20037B585CA6313B714
Certificate serial:       0EFBAE3679A7CF908C2DCB0E1E16F9311AC1E916
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 09:17:59 +0000
Manifest this update:     Tue 22 Sep 2026 09:12:59 +0000
Manifest next update:     Wed 23 Sep 2026 09:33:59 +0000
Files and hashes:         1: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: lNRKhcmiZUAq3a5jFdaJmEqXMHj1lj+pscOEkjDxix0=)
                          2: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: Tdrs/9MxQFRJ04JmOuNBrPQeJZxfkO1jdYAYtxuEviE=)
                          3: 09F1FCE71540608DD361D20037B585CA6313B714.crl (hash: r4TRTo12bfWq8VmOeXDlQIYkWs3l076sXCVfytK4Yqo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl
                          rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 09:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fb:ae:36:79:a7:cf:90:8c:2d:cb:0e:1e:16:f9:31:1a:c1:e9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F1FCE71540608DD361D20037B585CA6313B714
        Validity
            Not Before: Sep 22 09:12:59 2026 GMT
            Not After : Sep 23 09:33:59 2026 GMT
        Subject: CN=2624A7D1CCD5ECDD20BD198CF8F1679F3C95270A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:9c:72:69:75:95:af:3a:00:a4:12:13:dc:
                    2b:37:d1:9e:b3:81:52:b3:5a:33:37:c4:c1:02:ff:
                    84:98:4e:0c:2e:fc:b4:5b:5f:d9:86:e7:f6:47:0b:
                    63:18:75:73:47:9f:74:06:19:42:49:3f:07:73:89:
                    61:f0:c3:7c:ca:42:b2:d5:97:e6:15:3e:91:a4:df:
                    8a:b1:ad:00:54:e9:7f:68:32:96:fb:40:ac:fa:cf:
                    cd:c4:f9:f7:32:c2:6c:96:4a:d2:62:fe:21:66:95:
                    f9:63:40:f9:6b:12:32:46:c5:4e:ab:ba:e9:11:6f:
                    68:62:0f:9a:8b:80:a7:32:64:ee:ff:57:23:b4:9d:
                    7a:50:6f:51:23:e0:ec:f1:31:a9:10:6c:9a:db:b2:
                    a4:7b:b2:80:13:a4:16:3d:21:44:d5:4a:98:ea:c1:
                    68:9c:cc:35:41:52:65:1d:82:5b:fa:27:cb:75:59:
                    d2:e0:ec:65:c5:e9:d2:6d:b7:92:1e:fa:7a:01:b6:
                    30:61:ae:53:cb:3f:3d:40:0b:68:c2:0a:b2:57:fa:
                    65:93:e6:41:cd:e0:91:7e:af:fe:f8:cd:0a:b5:19:
                    72:6e:81:5b:5b:29:26:c4:45:f9:72:7c:d2:5f:a3:
                    c2:b4:bf:63:ac:be:b7:6b:57:94:3e:c3:96:f8:47:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:24:A7:D1:CC:D5:EC:DD:20:BD:19:8C:F8:F1:67:9F:3C:95:27:0A
            X509v3 Authority Key Identifier:
                keyid:09:F1:FC:E7:15:40:60:8D:D3:61:D2:00:37:B5:85:CA:63:13:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09F1FCE71540608DD361D20037B585CA6313B714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/09F1FCE71540608DD361D20037B585CA6313B714.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ae:0a:88:c9:e3:35:fd:0f:54:2f:15:69:d3:8e:57:ed:ac:
         75:e8:59:13:92:41:0a:c1:58:f3:85:50:d0:e5:d3:ff:80:a9:
         46:23:55:ca:2f:1a:84:3c:83:df:8a:0a:bc:99:1d:50:f8:97:
         3d:b6:b8:75:0e:d0:23:c7:ae:50:83:4e:f8:84:de:8d:41:be:
         db:37:f0:e0:23:cb:07:42:88:4a:41:ad:2c:35:76:0e:f2:e2:
         de:30:50:21:a5:a5:2f:d8:c0:fe:ef:81:7c:fa:54:23:31:b6:
         47:10:26:a7:64:ed:56:32:e7:e6:30:5b:7a:aa:6c:c4:a2:ca:
         68:65:a2:83:89:19:04:6b:e5:5d:2a:27:fe:24:6a:a1:41:fc:
         3e:e4:10:b6:32:71:fa:50:84:27:d9:6a:45:d4:7a:75:59:51:
         35:fb:47:e2:b3:42:e6:13:0e:ca:14:9f:00:88:ec:c9:32:64:
         f4:29:2b:72:2f:a4:21:d0:df:94:fb:b8:1f:40:89:33:8b:e2:
         3c:c7:f1:89:7c:59:5b:12:61:32:b4:06:31:00:59:c7:81:d5:
         c2:af:6c:87:20:8a:bd:7b:aa:0b:dc:0b:68:52:67:e0:73:8b:
         c8:b3:15:50:24:d7:ea:5c:66:88:f3:19:d5:5f:2a:1a:6b:db:
         69:03:2f:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDvuuNnmnz5CMLcsOHhb5MRrB6RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2
MzEzQjcxNDAeFw0yNjA5MjIwOTEyNTlaFw0yNjA5MjMwOTMzNTlaMDMxMTAvBgNV
BAMTKDI2MjRBN0QxQ0NENUVDREQyMEJEMTk4Q0Y4RjE2NzlGM0M5NTI3MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQ5xyaXWVrzoApBIT3Cs30Z6z
gVKzWjM3xMEC/4SYTgwu/LRbX9mG5/ZHC2MYdXNHn3QGGUJJPwdziWHww3zKQrLV
l+YVPpGk34qxrQBU6X9oMpb7QKz6z83E+fcywmyWStJi/iFmlfljQPlrEjJGxU6r
uukRb2hiD5qLgKcyZO7/VyO0nXpQb1Ej4OzxMakQbJrbsqR7soATpBY9IUTVSpjq
wWiczDVBUmUdglv6J8t1WdLg7GXF6dJtt5Ie+noBtjBhrlPLPz1AC2jCCrJX+mWT
5kHN4JF+r/74zQq1GXJugVtbKSbERflyfNJfo8K0v2OsvrdrV5Q+w5b4R3WbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJiSn0czV7N0gvRmM+PFnnzyVJwowHwYDVR0j
BBgwFoAUCfH85xVAYI3TYdIAN7WFymMTtxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmU1YWE5M2QtNzg3Yi00YTE3LTg3ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcx
NTQwNjA4REQzNjFEMjAwMzdCNTg1Q0E2MzEzQjcxNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wOUYxRkNFNzE1NDA2MDhERDM2MUQyMDAzN0I1ODVDQTYzMTNC
NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU1YWE5M2QtNzg3Yi00YTE3LTg3
ZDAtN2VmNDFiMGYyZGVmLzAvMDlGMUZDRTcxNTQwNjA4REQzNjFEMjAwMzdCNTg1
Q0E2MzEzQjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGCuCojJ4zX9D1QvFWnTjlftrHXoWROSQQrB
WPOFUNDl0/+AqUYjVcovGoQ8g9+KCryZHVD4lz22uHUO0CPHrlCDTviE3o1Bvts3
8OAjywdCiEpBrSw1dg7y4t4wUCGlpS/YwP7vgXz6VCMxtkcQJqdk7VYy5+YwW3qq
bMSiymhlooOJGQRr5V0qJ/4kaqFB/D7kELYycfpQhCfZakXUenVZUTX7R+KzQuYT
DsoUnwCI7MkyZPQpK3IvpCHQ35T7uB9AiTOL4jzH8Yl8WVsSYTK0BjEAWceB1cKv
bIcgir17qgvcC2hSZ+Bzi8izFVAk1+pcZojzGdVfKhpr22kDL0Q=
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:31:01 2026 by rpki-client