Manifest

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File:                     9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier:          nGI3kzUOUZAHTO//dmBA9RauNq19GnKE0hj7Sy8wPAo=
Subject key identifier:   DA:43:DB:9E:BC:D4:CE:E3:BE:B8:34:21:0E:50:E6:44:9C:F9:3A:E1
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       1B5F0D229D7F6D8833CA1DDDA72E30601DF51FF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number:          05CD
Signing time:             Sun 08 Nov 2026 02:53:33 +0000
Manifest this update:     Sun 08 Nov 2026 02:48:33 +0000
Manifest next update:     Mon 09 Nov 2026 04:37:33 +0000
Files and hashes:         1: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: nBiVyk+hSUYptzUCKKVHuojqXhq6+jenhf7H97IcXhc=)
                          2: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: /MeVu4I/Ar0LhsUQGKTcOtlumyGje7mxcMOUg9gwDz4=)
                          3: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: aKT7Jg/pwygmHEgWJw5wPp8zqquVo0CE1j8tG5BzFHU=)
                          4: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: JueH/SXRfDPCFByfvMV0wCJIsi8Q6o9jUIjv2j9UOAU=)
                          5: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: buB7BeNJJpfUqSepABWtofQu4tnwgLSJabt42xNftz0=)
                          6: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: XXgEPlHtjWL+fHvL9DSqkqe72aH2JJsWcxQ705tSA/8=)
                          7: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: L37ORRE8mzcyclEt2VZ4KNKxfnEZTP+JrK70uSUpoIk=)
                          8: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: UGTU4gD9ig5pT3g8O88EkTSMLo77+Q0ni7EzaYQt7KM=)
                          9: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: SMEVCplwC7EMAvVzXbsFKmMmYML+Abae0mtuFiz3m0c=)
                          10: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: d8yEkdL7zIIaBoo619bVzb2+SzEwKEqJBlukYE4/Rak=)
                          11: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: GJRgAwV+rKI9qKRwvVjQmQmb1Y6MGhE7zB5I5BMHtAw=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 04:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5f:0d:22:9d:7f:6d:88:33:ca:1d:dd:a7:2e:30:60:1d:f5:1f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Nov  8 02:48:33 2026 GMT
            Not After : Nov  9 04:37:33 2026 GMT
        Subject: CN=DA43DB9EBCD4CEE3BEB834210E50E6449CF93AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:a6:55:60:58:2f:f1:c2:63:e3:85:0f:54:
                    6d:aa:52:0f:d1:bf:13:9d:0b:d9:61:1c:ee:ac:eb:
                    f0:08:24:6a:34:5d:65:20:c8:dc:67:f9:2b:e7:62:
                    5f:4d:14:6a:9e:7a:a2:81:38:1f:ba:80:a8:fe:c0:
                    15:63:4a:fb:09:32:1d:cc:6f:29:61:71:ad:b5:3b:
                    45:4a:d3:f5:0b:bb:59:da:02:eb:ef:76:65:59:11:
                    f8:8d:47:ec:67:70:c8:dc:13:6a:a1:0e:6e:33:b1:
                    34:37:72:4f:de:45:bd:8b:a6:d5:90:c0:19:0d:b1:
                    83:91:20:2e:19:ca:59:48:01:7c:fe:66:b8:8e:38:
                    48:9d:a9:6b:61:d9:25:a8:a4:f9:3e:43:d4:ef:60:
                    ce:4b:27:b5:14:92:b3:d0:61:69:62:9d:df:40:7d:
                    3a:76:13:40:4a:ec:ad:fc:9e:0c:eb:35:b5:4a:67:
                    8b:b8:54:45:6d:a9:a5:23:e2:73:e7:da:ea:cf:8c:
                    70:bf:75:80:41:1c:56:cf:70:30:2d:37:b1:85:98:
                    da:c0:b2:8f:80:07:51:25:5f:f4:5c:da:be:bd:27:
                    11:12:7b:41:8f:67:be:93:e5:a3:2a:60:a8:f4:30:
                    7f:53:f5:f8:4d:a1:d8:01:14:c9:02:ac:a4:1e:ae:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:43:DB:9E:BC:D4:CE:E3:BE:B8:34:21:0E:50:E6:44:9C:F9:3A:E1
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:83:2f:5e:8f:b2:03:3d:47:10:b9:4a:08:30:86:f5:90:0c:
         3c:fa:2d:66:60:a6:1c:7f:83:38:e0:ee:31:53:82:a8:5f:b6:
         17:20:3d:8d:2b:ff:1a:75:ef:bb:48:64:56:aa:c0:75:ce:de:
         3e:ea:ad:5f:88:c1:c7:ad:77:41:bc:8c:9e:e0:93:8f:04:63:
         09:42:cb:a5:f9:c8:a4:cd:78:a1:ed:c4:d7:53:c1:12:5d:b2:
         6b:a7:3f:18:84:42:6b:f2:bd:16:9b:e5:9d:9b:63:80:54:be:
         07:6a:89:ff:d7:a1:f7:02:ed:9c:70:fd:51:10:d7:a7:3b:a5:
         0e:0a:51:cb:84:cf:4f:8b:26:b2:47:0d:63:c5:8b:55:31:2a:
         ed:76:c2:b9:36:9d:6f:6b:c1:23:f4:b8:d5:6a:27:f0:e5:79:
         83:27:13:d4:cb:71:2a:82:dc:dd:43:c1:a7:01:f8:3b:6e:0a:
         37:60:76:79:62:77:6c:f5:31:13:63:ab:db:f1:03:f1:80:3f:
         b0:d2:a2:68:11:5f:f1:31:ab:e3:5c:8f:28:87:80:da:fb:c4:
         37:2a:fb:a5:61:60:a8:6f:16:cc:32:5a:13:3a:e9:01:d3:b7:
         da:46:db:1b:9d:0a:d8:b5:43:2f:3e:8d:1b:31:55:a3:6f:11:
         e5:e7:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 17:38:56 2026 by rpki-client