Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
File:                     9EDB723FFE084B9B87B5B0A108574335936817FB.mft (raw, json)
Hash identifier:          K6nV8NTTP7pR5aafplKMvavEeIQlHfqQLv83GVQ3qxg=
Subject key identifier:   5F:08:26:0E:09:91:E8:14:94:D7:1A:6F:74:3E:18:AC:1E:56:78:82
Authority key identifier: 9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB
Certificate issuer:       /CN=9EDB723FFE084B9B87B5B0A108574335936817FB
Certificate serial:       7445C84353761784B494A4E456FA13881D551809
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
Manifest number:          C1
Signing time:             Thu 24 Sep 2026 07:14:42 +0000
Manifest this update:     Thu 24 Sep 2026 07:09:42 +0000
Manifest next update:     Fri 25 Sep 2026 08:27:42 +0000
Files and hashes:         1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: i1PCAoIZ8GEBtvqZu9y6RsJ/+cUgKfG+tpL6n+2MQ0w=)
                          2: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: TKijjNdinkZx0yUPQ2piNtCq6wNxlLJwsDj7lMp8o1A=)
                          3: 9EDB723FFE084B9B87B5B0A108574335936817FB.crl (hash: Kv+o6bHGYuoI2eQgX0tdTejVNzWNlzhdCkaExdX4rX0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl
                          rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 08:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:45:c8:43:53:76:17:84:b4:94:a4:e4:56:fa:13:88:1d:55:18:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDB723FFE084B9B87B5B0A108574335936817FB
        Validity
            Not Before: Sep 24 07:09:42 2026 GMT
            Not After : Sep 25 08:27:42 2026 GMT
        Subject: CN=5F08260E0991E81494D71A6F743E18AC1E567882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:f3:17:0e:e0:12:5b:8e:94:0d:a4:44:08:
                    4b:4f:58:31:e5:18:64:3a:a7:8a:ab:7f:a6:cc:98:
                    1e:12:48:08:a2:72:1b:c2:60:e7:16:fd:38:21:22:
                    5f:61:40:93:db:88:63:fc:99:a2:41:3f:bc:fc:26:
                    83:7c:4c:25:05:33:51:6e:4b:c2:ca:f6:5c:d1:c7:
                    af:96:42:b8:38:43:cf:7a:b1:52:44:0b:d1:14:82:
                    8c:98:f6:55:6f:38:f4:61:75:4e:c3:0c:8e:39:05:
                    28:ba:cd:65:00:70:4d:ab:ac:0f:55:67:66:02:a2:
                    ad:a1:37:66:84:1f:1a:4b:ee:50:54:bf:b6:18:06:
                    ea:92:49:7b:70:12:f6:d6:31:d7:4f:ef:67:45:ea:
                    b6:a6:de:5f:42:27:72:c8:02:d3:56:92:31:61:06:
                    d7:c6:fb:5f:ac:95:4f:05:d5:54:2d:b6:31:61:7c:
                    94:69:d7:89:80:14:81:fe:23:e7:48:dd:33:99:1b:
                    1b:a3:dd:53:64:f5:28:0b:73:ab:82:f1:14:6a:23:
                    a8:64:d1:af:73:07:15:1b:a0:0a:7c:8f:2b:c8:95:
                    7a:08:bd:1d:3d:c8:8f:35:74:93:ce:ad:cd:50:a8:
                    71:fa:e0:dd:82:5a:d0:ff:48:1e:06:ac:6f:8b:81:
                    82:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:08:26:0E:09:91:E8:14:94:D7:1A:6F:74:3E:18:AC:1E:56:78:82
            X509v3 Authority Key Identifier:
                keyid:9E:DB:72:3F:FE:08:4B:9B:87:B5:B0:A1:08:57:43:35:93:68:17:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDB723FFE084B9B87B5B0A108574335936817FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/9EDB723FFE084B9B87B5B0A108574335936817FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:0d:80:6e:89:05:5f:f5:bb:27:73:09:7b:11:5e:d9:e6:6a:
         bb:49:ea:08:1f:5f:76:e4:d6:61:16:7a:33:9f:72:40:8d:c4:
         8e:12:ef:82:2f:ee:3d:b2:16:fb:85:5d:92:8f:29:a9:0c:40:
         23:d5:63:65:16:28:f3:9c:53:6c:f5:75:75:fa:d4:0d:e9:f9:
         5a:9c:e0:fc:61:75:cb:be:ce:ad:b7:55:ba:81:75:f5:bc:4a:
         d0:4d:a1:ba:2d:24:01:47:aa:16:c6:55:46:35:ff:ba:ea:48:
         25:d4:00:d7:e6:4a:91:f6:de:ad:b0:81:d0:ef:b0:c6:14:f0:
         e5:2d:29:8e:46:66:e1:e9:1b:13:77:bc:5c:c4:aa:5a:05:08:
         8b:9d:63:98:64:ee:40:f0:dd:8c:f4:35:c8:09:78:17:6b:9e:
         5b:32:dd:db:c5:e9:e5:98:6b:cd:e5:80:5e:59:46:57:bd:e9:
         db:fa:e9:8f:ac:3e:13:81:56:73:3c:89:c6:8d:ea:fa:22:ae:
         8f:fd:c4:fb:d4:20:31:34:11:5b:20:e4:7b:f6:ef:0f:3e:16:
         4f:b3:83:04:76:4b:7e:84:4f:de:a8:af:a2:de:15:60:06:83:
         0d:18:a5:21:7e:ab:53:3a:11:30:0c:34:e9:b5:44:0a:a4:50:
         83:75:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:40:16 2026 by rpki-client