Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
File:                     90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft (raw, json)
Hash identifier:          OsKI/m3iA8CxSUby9PIgzUEJGxHx82Pg/im8Qt0Aqdo=
Subject key identifier:   DD:2A:93:3A:7B:54:00:EC:F0:EC:43:A8:8B:4B:E8:84:74:B3:B9:A0
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Certificate issuer:       /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial:       2070140071B204F9553760A7C21E0078510DB879
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
Manifest number:          BF
Signing time:             Tue 22 Sep 2026 08:16:51 +0000
Manifest this update:     Tue 22 Sep 2026 08:11:51 +0000
Manifest next update:     Wed 23 Sep 2026 09:13:51 +0000
Files and hashes:         1: 3130332e32342e31322e302f32332d3233203d3e20313332363434.roa (hash: XA49llIDJReIFYpde7BLF2WOb/sWo1hTC8oVNheJ18c=)
                          2: 3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa (hash: ZplGjQm5AJToWkOfjaun30sMJtYUPIBMV0JqNXb3aqs=)
                          3: 3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa (hash: 8AEGQtXK/Xs1e1cVuxnjNRKg/MkAzKUk0OckBlGEiL4=)
                          4: 3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa (hash: 97HEq762ggjb36ObJvOB+0O4UVTOw9S1KAUH3wNcpO4=)
                          5: 90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl (hash: vqEp/kJ05K/GsihSF8Fo3iieXLBCA3WC+vO1q302kVw=)
                          6: 3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa (hash: YrsTK2Y9639gKpZZNuXe3bw5wGTnhWGGPOil0c8e8wM=)
                          7: 3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa (hash: PViwWNE+NG9X47qSPjKfZGqholiuXSr1ZOEfMgtcqX0=)
                          8: 34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa (hash: LSiSWeahGCiGQr2oAGZdxTD7aS5l5Mx3rTY5xcHY1Cs=)
                          9: 3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa (hash: RBFdUHZpMD/gDIa6CRB91FevIsYdigIpmwwSIwzhi98=)
                          10: 3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa (hash: cdYCODbpzOPcSEGOyln69IWngFwXNw8457vXW43CyIQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
                          rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 03:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:70:14:00:71:b2:04:f9:55:37:60:a7:c2:1e:00:78:51:0d:b8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
        Validity
            Not Before: Sep 22 08:11:51 2026 GMT
            Not After : Sep 23 09:13:51 2026 GMT
        Subject: CN=DD2A933A7B5400ECF0EC43A88B4BE88474B3B9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fb:05:47:72:04:e0:85:d4:71:e1:96:d1:95:
                    79:12:a6:81:6f:77:41:b6:0b:fc:0d:68:f4:7c:00:
                    f6:82:e1:f2:3b:dc:a3:79:4e:6e:92:31:c0:52:8d:
                    f9:39:cf:4c:cf:85:cc:25:f8:b4:5a:2e:16:3c:ab:
                    ee:67:66:8b:33:25:0a:5f:59:e2:bc:4d:a8:a3:5f:
                    7e:6f:6f:af:9d:75:85:4d:54:ca:7a:db:44:2b:a0:
                    5b:12:da:ec:0b:5a:b2:78:47:61:6a:d1:3a:81:6e:
                    1d:ee:4e:77:c1:32:d4:9a:f4:32:b6:29:db:ad:44:
                    88:ec:12:b0:2f:f4:8f:b9:76:01:da:8b:75:4d:58:
                    17:b8:ec:af:6c:21:34:32:8a:27:df:39:a5:4a:48:
                    dd:82:ba:8d:e6:76:33:ed:86:15:18:dd:cb:27:32:
                    e7:50:2b:6d:af:b3:38:6b:6b:84:53:24:cd:0b:97:
                    e5:a4:06:02:c6:a0:da:fc:9d:bd:4f:f0:c5:96:02:
                    c6:76:15:90:ac:63:54:72:eb:ab:2f:6c:2f:de:64:
                    f0:64:d7:6e:51:b9:c4:6c:1c:63:be:c8:19:41:f7:
                    e4:cc:e3:eb:46:a1:87:b6:06:68:e3:73:93:b1:5f:
                    6d:52:41:ae:93:a9:bd:42:21:54:a7:20:61:d1:78:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2A:93:3A:7B:54:00:EC:F0:EC:43:A8:8B:4B:E8:84:74:B3:B9:A0
            X509v3 Authority Key Identifier:
                keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:75:4b:5d:8c:cb:18:aa:c8:2f:e0:73:a7:85:40:43:0f:6c:
         05:de:28:e1:d1:f2:fa:74:07:cc:80:bc:b4:43:52:9c:18:7e:
         45:a5:81:6f:38:72:be:7f:d5:bb:df:1f:ec:2e:b1:61:0a:cb:
         7a:c6:8f:72:0e:3a:a1:fa:c7:ad:68:0e:58:87:7f:e2:a0:b0:
         f1:fc:5e:e2:06:0d:86:90:09:6f:cd:51:2c:a2:5d:cd:fa:1a:
         15:88:26:6b:ed:e2:24:f3:0c:72:57:69:cb:ce:f5:a4:6d:5b:
         ba:25:1e:4d:fa:ab:07:21:f8:1b:ff:46:75:9e:52:86:08:ee:
         47:e6:fb:62:af:47:23:53:9a:40:92:9b:2a:78:8c:17:8a:66:
         cd:c4:11:d0:6c:6f:83:9d:77:2d:4f:df:88:d6:cd:2b:8c:77:
         ba:61:67:87:db:cf:c9:82:0b:62:fa:76:95:b1:32:1f:ee:08:
         fc:69:1f:4d:b2:6f:b0:a8:b7:6b:4d:4d:57:69:a5:1f:82:97:
         6d:12:f3:86:85:71:84:6e:87:48:ae:e4:90:ea:fe:e6:01:7c:
         e7:2c:9f:c1:8d:fb:f3:66:00:22:0c:4b:0d:ee:f6:34:bb:39:
         9c:1b:64:1a:b2:81:ca:04:57:9c:1c:6b:f2:02:9d:89:cd:9a:
         06:1b:ce:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:49:00 2026 by rpki-client