Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft
File:                     8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft (raw, json)
Hash identifier:          xfVScqbFnmtS9IGfkize5kEeXPEecdvVZxlHtpeKPG4=
Subject key identifier:   B5:99:2B:82:97:54:E1:71:85:B8:BF:4A:54:23:51:0B:B3:D4:01:80
Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B
Certificate issuer:       /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B
Certificate serial:       0169A218195A5354E98638B3B188F9A6F7D87584
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft
Manifest number:          A9
Signing time:             Fri 04 Sep 2026 10:29:19 +0000
Manifest this update:     Fri 04 Sep 2026 10:24:19 +0000
Manifest next update:     Sat 05 Sep 2026 11:48:19 +0000
Files and hashes:         1: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl (hash: 8IiDmy2K24awKdMkgvwUhViieMZ68DuOp9my/v/kQYY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl
                          rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 04:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:69:a2:18:19:5a:53:54:e9:86:38:b3:b1:88:f9:a6:f7:d8:75:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B
        Validity
            Not Before: Sep  4 10:24:19 2026 GMT
            Not After : Sep  5 11:48:19 2026 GMT
        Subject: CN=B5992B829754E17185B8BF4A5423510BB3D40180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:4e:b2:5f:f6:14:92:53:1d:54:60:e4:dc:
                    6e:29:68:9b:6a:ba:00:55:38:4d:6b:e5:9c:f4:98:
                    18:a9:54:d6:40:e4:27:b6:c5:05:69:5c:73:e5:05:
                    12:34:3d:b9:64:9e:9a:ee:a8:00:23:be:e8:a3:0d:
                    15:57:27:1f:ae:83:33:7e:79:e6:b0:b9:f6:04:96:
                    d0:92:a1:a5:e3:44:bd:8c:83:ab:d0:dd:7f:64:c7:
                    f5:14:07:f8:e0:80:e7:83:62:73:70:12:a1:23:7e:
                    87:db:ea:12:67:15:59:07:6c:fe:7a:7a:d1:ba:69:
                    e7:10:0a:50:3e:67:4e:ee:a3:9c:9d:85:34:01:07:
                    d4:ce:0f:8b:a2:6e:0f:73:f0:4c:35:58:ff:63:79:
                    1d:c3:95:79:88:90:3e:47:ff:f4:45:d6:02:cc:26:
                    18:53:fa:c1:e6:02:bc:92:64:89:f5:c3:a1:05:66:
                    ae:3e:e7:98:12:28:d0:53:55:b7:04:80:5d:5a:8b:
                    0b:e8:f1:d7:20:e1:07:7a:30:97:17:46:6c:2c:59:
                    ed:9a:3e:3d:43:20:98:ea:6a:59:ea:c0:f6:29:b9:
                    be:4f:4b:01:e8:3e:20:40:24:be:27:d1:cc:16:72:
                    b9:52:76:66:53:75:21:38:fd:f1:b6:05:1c:b8:3c:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:99:2B:82:97:54:E1:71:85:B8:BF:4A:54:23:51:0B:B3:D4:01:80
            X509v3 Authority Key Identifier:
                keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:dd:38:d8:c2:7d:7c:60:be:e3:a2:3b:69:0b:b8:3a:7b:6a:
         08:94:14:81:8b:35:d3:11:05:4f:df:d0:25:3b:b2:21:86:25:
         f2:16:0a:01:cb:0b:96:52:82:46:fe:63:da:05:1d:6b:8b:f0:
         e9:a5:0b:7f:49:e2:4c:ea:2c:3d:15:f5:6a:2c:b4:c2:3b:c0:
         0f:77:81:05:d4:a7:96:96:3d:85:6c:0f:df:31:d2:f2:7a:d6:
         e5:66:71:61:b3:8b:72:7b:68:62:2e:ea:02:70:cd:2d:3f:45:
         c4:44:8b:71:2e:1a:09:fd:4b:f8:67:f9:b3:b9:ea:42:24:03:
         3f:6b:c6:26:ea:dd:8a:c3:f6:a3:8e:c6:35:6a:59:e7:01:56:
         91:83:06:ed:19:0b:09:8a:8b:39:bc:00:5e:23:34:66:0e:ad:
         70:5f:32:cc:3b:48:bf:7c:7e:5f:10:d2:2f:3b:41:a5:01:5e:
         c2:4d:11:27:6d:93:f2:ce:8e:5a:8a:b0:b7:ef:89:8d:a7:75:
         8d:27:31:3f:41:dd:4c:1d:2d:42:ab:5d:07:d2:45:7d:48:b0:
         31:ee:25:d5:7a:e6:16:ce:2e:95:85:92:7b:16:c6:34:9d:cc:
         dd:36:a3:0a:9a:ca:61:15:10:de:a2:bf:46:73:49:69:fb:ad:
         39:c8:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:17:27 2026 by rpki-client