Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
File:                     0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft (raw, json)
Hash identifier:          VC+IMRUyAxFfkziAaJwEZ+dSgdAe8bAS2w/+4U/yVZ4=
Subject key identifier:   B1:CE:CF:75:92:A1:92:26:12:EE:08:83:3C:31:75:24:AC:3B:28:74
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       6E2B3866C5BDD0D688E6FD35245E4470E1EDF861
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
Manifest number:          BE
Signing time:             Tue 22 Sep 2026 15:35:44 +0000
Manifest this update:     Tue 22 Sep 2026 15:30:44 +0000
Manifest next update:     Wed 23 Sep 2026 16:45:44 +0000
Files and hashes:         1: 34332e3234392e3134302e302f32342d3234203d3e203535363533.roa (hash: 2k2h/lLJh4y28GreNoFDXEw9j2lKUZ4eXzUUiII60sQ=)
                          2: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: t0eDmBySGGi3M6vpcaHWuK77uuciFXZsi3Bv2CvN2vw=)
                          3: 3230322e35322e31352e302f32342d3234203d3e203535363533.roa (hash: VHZA3TuBf4nLKV2pTnmQZgiFCXveS7LsJ0nVeKIEvQQ=)
                          4: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=)
                          5: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=)
                          6: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: wL/pHkWZYlSpOpNVjgz7YgIvq4xTapnBHJvFGC824+g=)
                          7: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=)
                          8: 34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (hash: Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=)
                          9: 34332e3234392e3134332e302f32342d3234203d3e203535363533.roa (hash: qdZ5s/RPKJd1zWpn0OA8oOkj/7C1tf+45M/HrbWmTwI=)
                          10: 3230322e35322e31332e302f32342d3234203d3e203535363533.roa (hash: RTunN5WvZPwzhuRDaOCGYBctUeKdomE1xa5xw2crzZk=)
                          11: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=)
                          12: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 2xEncKZB7XKpCLMYg2xigci5uudnJs/KRQjGyEQoyfA=)
                          13: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: 4TVT+M+1OynDiPmgdYeocC5p7/VKvqBlsqaUMV+uRAs=)
                          14: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: 1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=)
                          15: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl (hash: mC8cZ1MnS9D/8OVxcOBqVJVtANDCnUvxlVHZiCT1+LQ=)
                          16: 34332e3234392e3134322e302f32342d3234203d3e203535363533.roa (hash: nVmldivYscT9yIlUPfak+eYDC8xGQfjxxTwl5kvmf58=)
                          17: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=)
                          18: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: 2FalOm0wymIUOR6b6eMABH/GePb1gQsHB2PkapVhslQ=)
                          19: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=)
                          20: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: M9ZVVTNiZw+8g7eKubBdE5bO++zVmlUills7R3bh+8E=)
                          21: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=)
                          22: 3230322e35322e31342e302f32342d3234203d3e203535363533.roa (hash: +X2AKDLUi7EEV0pZEa+LT88OPryzNndvmpim+oMxEjk=)
                          23: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (hash: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=)
                          24: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: 7m1lsj+R46fwy5EhA0AVTVR6lA5VWMrVBvJWrnKZtRo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 16:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2b:38:66:c5:bd:d0:d6:88:e6:fd:35:24:5e:44:70:e1:ed:f8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: Sep 22 15:30:44 2026 GMT
            Not After : Sep 23 16:45:44 2026 GMT
        Subject: CN=B1CECF7592A1922612EE08833C317524AC3B2874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:60:cb:9f:dc:eb:af:32:b3:46:2b:6a:ed:
                    23:5a:d3:76:b9:b9:75:ef:28:8a:4a:a9:5f:fb:8a:
                    6a:1b:a3:f9:ec:b3:fd:d8:5f:76:8e:1e:ea:8b:87:
                    06:a9:fe:00:5d:c6:af:43:7b:9d:1d:06:68:6f:0e:
                    cc:75:f3:72:db:e4:d3:5d:12:5e:da:ab:4b:98:5a:
                    f8:0f:b2:ab:32:c9:3a:79:a8:ee:da:64:a6:c7:06:
                    a5:30:33:23:fc:85:b3:a7:78:ac:23:a3:96:1f:2e:
                    9d:22:78:ee:20:9c:1b:3e:aa:58:d6:f9:d6:52:27:
                    a3:63:f2:29:0f:d3:ff:8d:20:87:1d:af:0a:59:21:
                    4f:6c:4f:a4:17:83:24:f1:73:4a:06:e6:a9:45:dd:
                    13:59:9d:61:f0:c9:ca:96:5d:d1:f1:2d:c5:7a:b2:
                    7a:3f:9d:4e:0b:e0:3d:02:01:24:a7:01:cd:dd:8d:
                    35:13:d7:3d:7f:40:f4:6b:f0:b8:d9:d1:2b:41:d3:
                    1a:40:de:f0:6e:80:76:23:af:e5:43:d4:12:4d:77:
                    b5:79:bc:19:19:b4:2e:80:2c:51:28:45:48:85:93:
                    d3:ba:4c:ab:c6:2c:c3:51:e0:99:2e:ef:c8:7e:44:
                    bd:83:7c:be:00:b4:82:6a:54:ca:1c:15:cc:1e:d7:
                    d6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CE:CF:75:92:A1:92:26:12:EE:08:83:3C:31:75:24:AC:3B:28:74
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:81:b6:e1:f3:a4:b9:a1:8c:1e:56:88:22:5e:80:c1:9d:
         1d:a6:fc:c7:20:69:d6:74:10:26:6a:9b:9f:d8:ba:3f:b6:62:
         16:54:ba:da:b2:7c:f8:4f:48:69:b4:ee:81:85:0d:0c:35:33:
         5e:e7:63:8b:51:62:19:9d:a0:5b:6d:b7:fb:c9:48:e3:31:26:
         10:d9:d3:5b:b6:f1:93:42:2b:3c:28:8b:41:2e:b0:37:46:6a:
         46:61:6b:d0:d5:d8:bf:14:a3:05:89:94:db:c5:e0:97:ba:ca:
         21:b7:1b:c9:bf:dc:69:0e:ef:af:2c:1f:d0:de:79:5a:3d:37:
         6e:17:11:e3:d5:48:2a:61:34:5a:84:a5:4c:99:b1:ea:dc:6f:
         16:49:a5:27:cb:f6:41:ba:19:c8:22:3d:63:ea:1b:c9:89:77:
         fa:f5:b6:f9:1f:7b:d1:e4:84:0d:34:54:cc:83:60:fe:df:b9:
         46:91:c3:99:b7:ac:be:65:52:40:76:bf:69:dc:70:e2:29:b2:
         c7:b2:0b:88:3c:49:5c:01:e0:b6:61:37:22:89:d4:da:fc:30:
         ef:91:c2:be:95:11:ef:23:60:ac:b3:5e:17:08:45:8e:d1:e9:
         ff:93:99:11:df:75:54:35:e1:67:ed:b6:ae:8c:6a:65:4c:c0:
         1c:8c:e9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:32:23 2026 by rpki-client