Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
File:                     B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft (raw, json)
Hash identifier:          PD+IvgAKTxsutvWr01ER1w6cWzmWbgtxc5ONfw4qPRw=
Subject key identifier:   18:38:11:7D:CB:91:EF:ED:E4:04:3D:E4:01:26:A2:FC:1E:8A:DA:8F
Authority key identifier: B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45
Certificate issuer:       /CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
Certificate serial:       3FB21E5C2B61E6D3F2D1BE6005F54B5BF3EA5589
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
Manifest number:          BF
Signing time:             Sun 20 Sep 2026 21:59:06 +0000
Manifest this update:     Sun 20 Sep 2026 21:54:06 +0000
Manifest next update:     Mon 21 Sep 2026 23:54:06 +0000
Files and hashes:         1: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl (hash: O7EEIDrTJ0VSxvIyNgqOGXLA+L0PPcwPXbNRIXeEhC0=)
                          2: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: FM7P4A6GhMRCdFWVFylFnVzysNCeJktD7lQb8mDxaKs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl
                          rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 17:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b2:1e:5c:2b:61:e6:d3:f2:d1:be:60:05:f5:4b:5b:f3:ea:55:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
        Validity
            Not Before: Sep 20 21:54:06 2026 GMT
            Not After : Sep 21 23:54:06 2026 GMT
        Subject: CN=1838117DCB91EFEDE4043DE40126A2FC1E8ADA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:70:50:22:ec:d7:2d:44:53:8c:f9:2e:dc:
                    09:74:37:10:a3:d2:dc:1d:c7:bb:9d:d4:3c:48:83:
                    d4:d3:0b:ec:e2:16:9f:7a:e1:0d:69:e7:a8:93:35:
                    be:cc:96:0b:89:6e:c7:cd:8a:db:0c:e2:d8:fe:70:
                    c0:02:58:7c:1c:cf:6d:fb:71:4c:4f:00:d2:01:c5:
                    8f:13:97:aa:d1:e8:13:f2:5d:99:0c:50:40:3f:3b:
                    1b:ea:20:6d:d4:54:32:8d:85:0c:0e:bd:23:29:d8:
                    9b:7a:62:96:d0:9a:3a:fb:88:ff:25:72:e9:b2:41:
                    5d:76:3d:d4:bf:2e:a6:16:8c:71:39:a0:48:96:eb:
                    52:68:2f:2e:5b:cb:57:02:90:aa:f9:49:66:b3:ca:
                    2a:40:0b:f5:22:d7:66:41:6a:6c:e6:91:52:d8:18:
                    22:8c:ab:a6:ff:17:d8:72:24:03:cf:52:56:c5:01:
                    da:3c:8b:f6:c6:18:27:82:9a:17:1a:3d:9f:f6:c7:
                    e0:a0:29:73:e0:49:56:5d:3b:9b:d7:dd:e1:5f:3b:
                    aa:ec:3c:55:46:c9:10:50:8a:2d:19:81:c3:6f:0e:
                    27:56:a5:bd:4d:1c:a2:21:c0:fc:fe:32:11:99:36:
                    c1:cf:8f:db:0f:ba:65:e1:97:67:12:54:58:f0:5c:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:38:11:7D:CB:91:EF:ED:E4:04:3D:E4:01:26:A2:FC:1E:8A:DA:8F
            X509v3 Authority Key Identifier:
                keyid:B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f3:56:cd:72:60:7d:f6:5c:83:62:2a:99:77:dc:a7:a0:74:95:
         07:d6:b4:66:91:41:d7:55:a6:ec:03:6b:19:3a:38:b2:4d:08:
         c7:c3:b6:f2:ee:52:79:60:43:86:e4:bf:e3:7d:93:16:44:e8:
         c1:4b:1a:36:46:21:b6:33:2c:71:ff:1a:81:87:4c:6d:52:76:
         97:ba:7c:40:a7:cd:67:d3:44:8c:bf:97:67:65:e4:84:58:69:
         de:7f:8d:6e:68:a0:f0:88:c2:7f:49:e7:3d:31:b4:e7:77:7e:
         17:28:c7:85:51:a2:e5:e9:23:cb:b9:c8:23:e8:9a:09:44:c5:
         d1:5b:6a:fb:34:62:af:e3:97:e0:29:07:4f:b6:6b:7f:4d:73:
         a3:b5:61:a5:d4:e7:d4:0c:ed:66:4a:b0:67:5a:ca:5c:ce:f0:
         44:7e:d5:04:33:ea:23:e1:95:41:0b:7c:4e:76:cf:aa:cf:90:
         79:86:6e:9a:a1:a1:57:d6:40:0b:bc:7a:ed:07:6a:44:b7:dc:
         37:1a:e0:4b:33:c4:76:00:a9:8f:58:5c:75:4d:f4:fe:83:1e:
         08:32:be:a9:8d:8c:e7:f4:8b:06:89:86:d3:c5:cd:3a:a5:bd:
         41:a0:9b:b0:ed:81:e0:1c:2d:5e:7b:2c:e7:24:fb:72:67:47:
         64:17:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:07:28 2026 by rpki-client