Manifest

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File:                     9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier:          HDY0hW+WrZcuc9GkIpUyVgF+wQym0Nwc13uE4joYbkw=
Subject key identifier:   0A:F0:21:DD:45:24:C4:33:2F:E3:A9:AF:2F:22:51:97:5F:EC:C3:34
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       06D573832FBF786EE7DA98AF71A3889D6DAC1132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number:          0475
Signing time:             Sun 01 Mar 2026 05:35:42 +0000
Manifest this update:     Sun 01 Mar 2026 05:30:42 +0000
Manifest next update:     Mon 02 Mar 2026 09:16:42 +0000
Files and hashes:         1: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=)
                          2: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=)
                          3: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=)
                          4: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: 29WkNUI3AGexsjq8KjvcaXYbj2jyUDMA+7tgwE4oKnI=)
                          5: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=)
                          6: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=)
                          7: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=)
                          8: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=)
                          9: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=)
                          10: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=)
                          11: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 09:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d5:73:83:2f:bf:78:6e:e7:da:98:af:71:a3:88:9d:6d:ac:11:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Mar  1 05:30:42 2026 GMT
            Not After : Mar  2 09:16:42 2026 GMT
        Subject: CN=0AF021DD4524C4332FE3A9AF2F2251975FECC334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5b:5d:7e:62:17:a2:2e:e7:2c:9c:24:e4:42:
                    6a:60:c1:6d:62:31:b6:2a:be:69:3e:3a:9c:0c:88:
                    76:70:99:81:29:5b:58:e4:10:c8:da:bf:c4:8f:ca:
                    23:ed:3f:6f:a9:e4:d2:ee:14:66:de:71:06:4b:25:
                    0c:e1:55:2a:35:a8:e0:8f:03:44:d8:ab:41:8a:52:
                    4f:cb:50:98:81:58:15:44:24:91:50:9c:39:6c:2c:
                    d4:66:a6:c2:24:ec:f0:f2:60:d0:3f:6f:b6:be:10:
                    e4:91:a9:6f:86:26:3d:dc:cb:ec:cf:81:1c:4e:69:
                    27:cc:ad:d2:c3:73:6f:30:f9:be:96:2d:c9:20:de:
                    f7:0a:96:dd:f9:70:ca:a0:ee:04:32:41:02:e2:3a:
                    1c:b7:0b:f2:cd:d1:8f:9b:3b:db:6f:5e:d5:49:18:
                    93:db:26:a0:8e:73:27:60:d1:e9:f9:bb:9e:58:24:
                    23:7d:fc:a0:ba:07:e3:87:56:14:2e:e3:d0:a7:38:
                    46:28:e8:42:67:c6:eb:ca:93:4b:1a:d8:2e:62:ac:
                    a9:0d:9d:7a:96:99:29:75:c9:f6:8c:f2:54:41:2b:
                    74:9f:3f:40:a4:8d:70:74:e0:69:36:fb:e7:cb:ef:
                    9c:ae:c1:70:9d:db:44:a0:52:82:4d:f9:3d:df:06:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F0:21:DD:45:24:C4:33:2F:E3:A9:AF:2F:22:51:97:5F:EC:C3:34
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f6:44:57:88:20:b8:9c:53:ac:2a:72:fd:69:e9:87:92:51:
         04:de:01:9d:23:6f:f0:26:f7:12:22:7b:7e:5f:eb:9e:00:31:
         0e:38:95:35:b7:7b:07:f9:5a:a6:f5:8d:22:be:6b:f0:ef:bf:
         ca:2f:fb:76:a8:0b:07:8d:5f:4f:8a:e0:9a:b6:99:cc:ff:af:
         76:4f:58:06:06:91:47:39:43:1f:86:6f:8f:91:a8:39:dd:b9:
         2c:a6:83:28:e0:19:c7:c1:83:27:a2:2a:9a:15:41:eb:24:2e:
         82:33:ce:3f:6f:08:3f:28:42:50:66:00:9f:4a:af:22:ac:b8:
         b4:52:39:ac:76:57:1c:ac:6e:53:18:7c:3c:ee:2d:33:72:fb:
         cc:d4:2b:c8:4b:41:10:76:65:d0:42:b6:6e:74:1f:1f:54:ba:
         87:8e:7e:df:68:49:09:22:53:a6:20:ae:25:46:3b:61:72:1d:
         33:97:41:35:1a:6c:6e:98:81:1a:8f:10:95:13:62:5a:42:a7:
         60:3e:c6:40:51:08:62:ce:9d:41:0a:83:23:c1:5d:db:ca:1e:
         1c:6d:cf:d7:27:19:13:d6:aa:85:a9:c5:83:75:0f:43:0a:9a:
         3d:a4:f2:b2:7f:91:94:59:24:54:c9:9a:a1:15:7f:27:f5:ed:
         a1:0f:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:48:35 2026 by rpki-client