Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
File:                     B8A1A7850FE4606645CDB993613F0326921CB0E7.mft (raw, json)
Hash identifier:          +RRG82BjEUurqsL1+fuDjR3PkVDRlWiw70c59T5Oy78=
Subject key identifier:   B6:07:2C:97:FD:D7:01:DC:29:0D:AD:8A:F3:00:6B:1B:7F:05:15:03
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       0D6B5AEFA78B8B93970D49CB7B52E4ADAE4C7F06
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
Manifest number:          A9
Signing time:             Thu 03 Sep 2026 03:27:06 +0000
Manifest this update:     Thu 03 Sep 2026 03:22:06 +0000
Manifest next update:     Fri 04 Sep 2026 04:20:06 +0000
Files and hashes:         1: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=)
                          2: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: IL+cf5Jp1UTXtxNmsZx0/FmjnEqHri/lduufwa4pgNw=)
                          3: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=)
                          4: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: Z1LJzpos2TJA/rbCpeFoVSV3AuCvaZXzL6M2aKFZMOk=)
                          5: 3130332e31302e36302e302f32342d3234203d3e203535363538.roa (hash: WPTgJgBZn9zU0LYC1z2CqvjiQ+vcOey/7diMUlVA1oM=)
                          6: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: TpopNA8dhMYp5nMtSS2yNBcol8TPklO5YRMrK3mUgQk=)
                          7: B8A1A7850FE4606645CDB993613F0326921CB0E7.crl (hash: ZIPvdnrJaVHWHVFJMmzp24GzchMiAyMqyZxI+LQV3Y8=)
                          8: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: JkqcF39siQEpLVJW2gQ2ytUcN1jCjiFbN20NnLblPt0=)
                          9: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: TmgfY35J3ejv4aaplxSsjZ2AmeTrspanURzc+GyKlb0=)
                          10: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: yPQoyk2IWcVDeL52Wegfblo5RoA0TlgF1Qqwyri7gis=)
                          11: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: zaokcuHNDzcmimcaKDVhoGvkO70knqdLhKxQi56iB3c=)
                          12: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=)
                          13: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=)
                          14: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: OL7tge3S2rADVt1ySDrlxO2bvMqBatfPuoG5qc2eXPc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 21:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6b:5a:ef:a7:8b:8b:93:97:0d:49:cb:7b:52:e4:ad:ae:4c:7f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: Sep  3 03:22:06 2026 GMT
            Not After : Sep  4 04:20:06 2026 GMT
        Subject: CN=B6072C97FDD701DC290DAD8AF3006B1B7F051503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:9c:fd:7f:ea:28:ef:90:ab:40:4b:16:e0:
                    f4:22:1f:7d:0d:45:65:64:c8:90:b0:97:26:37:32:
                    76:86:76:55:0b:6f:98:62:80:7b:f8:a8:0f:d3:ae:
                    cd:35:c4:3f:f3:2f:ef:35:45:f1:4e:8e:d7:1d:bc:
                    d3:50:10:89:22:08:9b:d8:f1:9c:55:42:94:1a:35:
                    92:80:87:b0:82:72:d6:d2:a1:09:ef:bb:6e:e9:3f:
                    d4:47:a5:11:a9:4a:9c:0b:b1:c9:35:42:14:62:6e:
                    f7:eb:58:19:c1:79:ee:a9:31:1f:87:24:0c:34:e9:
                    b1:56:92:ae:50:f9:22:ef:95:92:45:a5:0c:0c:2d:
                    3c:42:fe:3d:6e:2c:62:4f:f4:f7:66:b6:5d:d4:fa:
                    e8:d5:57:de:5b:5a:59:ed:4e:f9:d5:44:2d:59:40:
                    34:fb:8a:be:3b:0d:c9:e2:ba:6c:01:e6:92:12:51:
                    b7:88:fd:33:26:b3:21:f1:3c:8f:90:1d:36:c3:5b:
                    88:99:40:7b:bc:78:b6:f4:cd:a7:5e:85:04:10:76:
                    79:17:da:12:08:7a:13:c0:13:f2:ad:e4:38:8a:36:
                    0c:9e:31:6c:99:0f:d0:99:26:a9:b4:95:87:60:0c:
                    d6:1b:28:e7:b9:59:fe:cb:bb:bc:a5:f0:6c:4e:d6:
                    c9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:07:2C:97:FD:D7:01:DC:29:0D:AD:8A:F3:00:6B:1B:7F:05:15:03
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:03:e7:2b:d2:e0:b6:3e:c9:d2:f9:ac:b1:e4:a0:ba:25:f9:
         cd:68:c5:70:53:b7:5a:bf:32:df:68:b5:5b:be:58:1d:bc:0a:
         26:9f:0c:43:06:cd:6d:92:0c:33:65:ec:a0:ac:95:2d:2b:4f:
         ee:13:83:b3:63:34:3b:ad:14:68:a3:2b:85:f3:10:df:11:73:
         0f:1b:72:7c:7c:aa:39:01:85:5a:e5:5d:3e:17:62:5e:ce:4c:
         94:ba:91:34:c2:a4:27:13:e9:d5:9b:65:e6:83:64:b8:54:a3:
         df:c3:25:cb:5c:ac:3f:26:88:b0:5e:de:d4:fa:da:19:75:fa:
         1c:1b:84:0b:76:6b:3a:83:1e:3e:6c:6d:b0:74:76:05:c5:97:
         8b:1e:7a:0a:0c:2f:c3:f9:2b:37:84:e1:21:15:c8:36:34:ee:
         1f:cf:c8:e4:c1:05:51:24:74:87:d5:3f:3f:eb:8e:cc:57:fd:
         14:ae:ef:b8:fd:51:29:dc:08:03:fa:f0:60:67:99:76:6c:31:
         f8:6e:75:17:99:30:6c:3e:c3:24:d5:6f:7d:8d:cf:17:22:79:
         4e:88:16:35:79:71:84:4f:cb:0c:5f:34:5c:af:99:95:f7:94:
         67:11:39:95:9c:cc:2b:40:3d:25:d4:0e:f4:b8:2e:4a:b0:1c:
         fb:74:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:14:02 2026 by rpki-client