Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
File:                     08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json)
Hash identifier:          b0GU+tUC8QT85Kv9ZeG2AONLW9bzXyFg5KDfRnS69lc=
Subject key identifier:   1D:08:8F:A3:8D:89:78:8B:AC:29:A6:66:B6:DF:E0:56:70:87:84:7F
Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
Certificate issuer:       /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Certificate serial:       32BFF30FC7C53A5D0A00BC2C4C1273A2CF92F19E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 13:07:42 +0000
Manifest this update:     Mon 21 Sep 2026 13:02:42 +0000
Manifest next update:     Tue 22 Sep 2026 17:02:42 +0000
Files and hashes:         1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=)
                          2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=)
                          3: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: PukTxbQR8RhPkfCzPN/4rq0QjQ8G9LfjQfG72B6aaZI=)
                          4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
                          rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bf:f3:0f:c7:c5:3a:5d:0a:00:bc:2c:4c:12:73:a2:cf:92:f1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
        Validity
            Not Before: Sep 21 13:02:42 2026 GMT
            Not After : Sep 22 17:02:42 2026 GMT
        Subject: CN=1D088FA38D89788BAC29A666B6DFE0567087847F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:54:59:43:cf:f8:50:9a:66:ed:52:da:1c:
                    ca:64:2f:02:63:5e:b6:b6:2d:16:a3:6c:a2:d6:03:
                    f1:2c:7b:38:6a:e9:0c:32:d9:40:71:61:9b:91:84:
                    bd:cd:a2:21:18:05:d3:e7:05:9c:5c:48:0c:e9:f6:
                    6a:f9:00:15:fd:f2:5c:db:ae:e9:d8:49:02:51:2b:
                    46:03:50:36:63:c9:a1:a4:d8:ed:46:4f:71:c1:46:
                    76:a3:0f:77:0c:c9:3a:f2:08:76:d1:a8:47:ab:9b:
                    12:59:a8:6e:6c:27:b8:17:ed:81:cc:14:10:dc:a3:
                    6e:92:f1:a5:8c:1a:58:1a:87:2c:b8:c5:49:b9:be:
                    db:7b:fb:28:13:63:8d:29:9a:3a:6a:dd:c4:95:3f:
                    4b:51:0f:51:47:a5:1c:e5:4d:69:b2:1c:9f:9e:10:
                    fb:15:0c:48:39:b5:74:65:07:ca:0b:bc:3b:90:d9:
                    6b:f5:9c:3b:6a:a6:28:93:c0:ad:92:05:cb:3e:6a:
                    fc:02:4c:9b:27:23:39:9b:27:f0:48:76:66:09:b7:
                    c6:b4:d2:28:14:3d:98:bf:15:2e:f8:f6:ea:13:6f:
                    09:b8:51:e2:e0:44:bd:86:93:d7:cc:13:e6:cf:f5:
                    26:5d:e0:82:91:ec:51:c1:64:c7:15:8c:0f:0a:51:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:08:8F:A3:8D:89:78:8B:AC:29:A6:66:B6:DF:E0:56:70:87:84:7F
            X509v3 Authority Key Identifier:
                keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:05:df:6d:d3:75:da:e5:ed:72:37:7e:a8:03:19:b8:32:ee:
         77:71:4c:34:1b:87:8a:44:1b:2f:64:b5:26:0c:ad:65:d6:07:
         3f:25:11:05:0e:22:b0:d7:49:76:6d:c8:16:97:3b:6b:81:ec:
         ce:67:6b:15:fe:2c:31:14:5d:ad:cd:7a:a5:11:a4:ab:7a:6b:
         91:01:e9:85:02:ea:d6:41:0d:67:8b:a5:ed:03:b8:89:1e:4f:
         5c:47:8e:3b:da:df:87:24:2d:d8:aa:0c:21:95:5f:7b:24:d1:
         b9:e4:09:47:41:9e:07:36:6e:31:bf:d7:4e:db:b1:aa:f2:56:
         c5:d6:c7:8e:59:40:bd:aa:9c:b3:b2:19:92:ad:5d:27:cf:c5:
         b6:51:82:49:a6:cf:2e:91:2f:2d:e1:9e:80:45:6d:d5:e0:56:
         38:ef:03:54:e5:74:c4:08:bc:64:47:ca:dc:d9:4a:f0:8a:ad:
         c3:61:b8:70:ca:23:39:7f:05:3f:c4:a5:0d:19:44:d5:cb:ba:
         3b:ec:b2:6d:81:f2:27:13:f1:2b:15:4f:67:1c:bc:b0:dc:ab:
         1d:42:bf:07:7e:12:ef:dd:de:eb:66:c4:99:dd:3f:56:9a:e2:
         5d:22:86:18:96:f0:6e:ed:0c:9a:74:44:1c:35:75:f0:5b:6c:
         a1:3d:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:54 2026 by rpki-client