Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
File:                     A9BFA348A050E46482F4E00C605FF9961247FC64.mft (raw, json)
Hash identifier:          IG5YRmnA3j2sUKd6C0VqMNyguDSIa5w++JwV1JcyqNI=
Subject key identifier:   54:2C:67:1F:2A:6A:5D:67:25:BF:73:25:75:70:C1:9E:68:D0:75:85
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Certificate issuer:       /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial:       2016F6DCAB56B4E62D08E3F48870DB6FF044498C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
Manifest number:          C1
Signing time:             Wed 23 Sep 2026 15:04:45 +0000
Manifest this update:     Wed 23 Sep 2026 14:59:45 +0000
Manifest next update:     Thu 24 Sep 2026 18:40:45 +0000
Files and hashes:         1: 3131312e39322e3137342e302f32332d3234203d3e203233363731.roa (hash: w12lGkVliS3y+76XSl6gzHQHimzilNFu+hS9Qt8ntF0=)
                          2: 3131312e39322e3136322e302f32342d3234203d3e203338353036.roa (hash: 2dlHVfZFD/szRhd8hUNYHiAVCewx+xASxFEiirRYGTg=)
                          3: 3131312e39322e3136342e302f32342d3234203d3e203233363731.roa (hash: wNQ3Qkv9biOpVvnJgROiOoJs/1gZSgV49b5TXX2+3Z4=)
                          4: 323430333a623230303a3a2f33322d3438203d3e203233363731.roa (hash: 2aLawRYLy3KCYufu2NaJ3HYybrz6F8WpwigQMHaYOu8=)
                          5: 323430333a623230303a3233303a3a2f34382d3438203d3e203233363731.roa (hash: GGTpraPioXOfseSGJKXessD1JJQRRiypizczW1Hzdy0=)
                          6: 3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa (hash: 4ByDuJtt3A8/OMYgUMLRW5zT+7DYjf2+SVe78YDt8J8=)
                          7: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (hash: LSQJykz8Xa8OUBE1CJt+TyLaezRgkEysTciohkEfAhc=)
                          8: 323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa (hash: S+jEWzFEnfshlynIM2/L8ivR0r7b8KQ+/HC/tf13JGI=)
                          9: 3131312e39322e3137302e302f32342d3234203d3e203233363731.roa (hash: UwBVAcKHZ4f4hQBOzL0Sd4Fm5LmC4c+ionV2pYmo7/o=)
                          10: 323430333a623230303a613939633a3a2f34382d3438203d3e203338353036.roa (hash: XAeIzu631fi3CwuOFGNDoY933yMIfsvYuPPKWulTcYM=)
                          11: A9BFA348A050E46482F4E00C605FF9961247FC64.crl (hash: 6wyxFEdKny/CUZ5rET32It2Y+drFu3SxDiQcB0TlafM=)
                          12: 3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (hash: ZVviuvnexquFN2F18kLTWUBNgOrAM1n1Wa8GZF9ayTM=)
                          13: 3131312e39322e3136352e302f32342d3234203d3e203233363731.roa (hash: H7aX+6aTRF1Nj4kzc1OuSxt8gZOvC6ixFR9qSLZfj6Q=)
                          14: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (hash: Zs7TRnZe5BNsoAw7Vlg7d8WTD6Yej6D1y1DZK+qwGSo=)
                          15: 3131312e39322e3137342e302f32342d3234203d3e203233363731.roa (hash: GuV6Rg2wTEoGKg9NRtGF/nlE2uCUCHsreSMW9u/k6bA=)
                          16: 3131312e39322e3136372e302f32342d3234203d3e203233363731.roa (hash: 7eo+DUwzfso/gGHNjcQAtGfgWMCxkON/A6PVQqojzIw=)
                          17: 323430333a623230303a3166653a3a2f34382d3438203d3e203233363731.roa (hash: r6fMNtgJIoHgjV3DFpNsgQ1H8cmQbjMCcbKig24MDXk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
                          rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 18:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:16:f6:dc:ab:56:b4:e6:2d:08:e3:f4:88:70:db:6f:f0:44:49:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
        Validity
            Not Before: Sep 23 14:59:45 2026 GMT
            Not After : Sep 24 18:40:45 2026 GMT
        Subject: CN=542C671F2A6A5D6725BF73257570C19E68D07585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:c9:58:29:0f:af:17:ae:18:5b:b0:15:46:
                    f6:54:34:c3:df:09:9c:30:59:31:bc:03:c2:38:5d:
                    6a:e3:17:fb:87:f9:75:a2:f4:42:b3:68:a5:61:40:
                    f3:ba:f3:72:4d:f6:7b:e7:cd:e5:7b:30:7a:f3:41:
                    ab:52:96:14:f6:ea:e0:9e:45:d0:2a:f3:17:50:f7:
                    23:e0:76:f1:70:b4:63:ec:64:49:65:a5:5f:27:14:
                    bb:ff:1c:82:c1:51:1b:73:b1:3e:4f:bb:5f:25:f7:
                    76:52:9a:f5:fd:6f:3c:6f:ad:c7:4c:16:bf:13:12:
                    42:41:6e:aa:22:cb:ca:5d:5a:d7:dc:21:10:06:cc:
                    dc:b6:6c:97:0b:67:6a:26:b4:65:98:5c:70:d6:4b:
                    9f:1d:5c:4f:af:e5:49:9e:31:74:c0:06:fe:52:bc:
                    0c:54:ce:3f:bd:77:7e:b6:a2:0c:e8:ee:03:bd:6f:
                    ce:5d:dd:d5:dc:49:30:54:0a:a1:80:b8:fa:d4:ad:
                    7c:aa:ca:3a:28:3c:da:74:c4:05:27:50:66:3a:08:
                    3c:3f:87:cb:26:54:56:9e:60:0d:18:e3:57:7b:8e:
                    09:16:4b:24:2a:fc:0c:cb:cc:d7:f4:05:38:5f:76:
                    5c:8b:da:e2:0f:47:c3:95:9a:ce:da:bc:5e:6b:4f:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2C:67:1F:2A:6A:5D:67:25:BF:73:25:75:70:C1:9E:68:D0:75:85
            X509v3 Authority Key Identifier:
                keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:59:d3:d8:b3:40:c1:68:57:95:c1:08:ea:b1:77:04:82:
         96:21:e7:f3:8f:b2:c4:d1:19:58:fc:25:b2:2e:e8:74:29:ff:
         4f:44:53:11:11:c6:40:7d:18:a2:d7:03:e2:5f:88:25:b7:9d:
         10:25:a7:71:7d:ed:86:f2:62:1f:db:22:b7:89:00:ca:24:50:
         14:c0:c8:5b:0e:f4:8d:04:73:b5:5f:d2:7e:3f:aa:90:78:36:
         b1:84:c4:5c:bd:3f:57:52:6d:91:62:a3:76:91:ae:01:80:ad:
         1b:1c:a2:8e:7d:82:3d:b6:71:34:08:19:78:d4:b0:ce:fc:75:
         13:a3:84:af:2d:d2:79:2d:07:81:04:78:91:c6:3b:55:dd:42:
         e9:f2:9c:bc:14:6a:25:b7:5a:9b:9a:8b:5f:dc:5d:a7:d9:f2:
         07:fc:7c:0f:3d:68:56:ec:61:e0:77:77:38:f7:80:5f:dc:cb:
         f1:ca:e7:db:d3:c7:90:fb:71:e9:4f:ba:9e:a6:3b:ac:f9:49:
         ae:c7:17:b6:1a:68:b9:31:d1:41:62:c1:c0:d5:55:29:a1:5f:
         f0:ec:4b:8d:f7:a4:77:ef:2a:5d:fd:3b:b8:79:8e:ec:6a:e0:
         5f:a7:98:c8:fe:93:0d:c5:d1:7b:0a:b8:f1:b9:15:88:fd:08:
         eb:02:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:29:54 2026 by rpki-client