Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
File:                     9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft (raw, json)
Hash identifier:          973Xl9e50LaThFwhLalsI0tA0PALf1X20YBv+WN75UA=
Subject key identifier:   8B:74:D6:56:99:07:EA:BB:09:CB:C0:61:24:5A:6E:AE:9F:B0:F6:5C
Authority key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64
Certificate issuer:       /CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
Certificate serial:       2357EEDA6EA3061B325BF61F8F67F07F586E96CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
Manifest number:          FB
Signing time:             Thu 05 Nov 2026 01:20:45 +0000
Manifest this update:     Thu 05 Nov 2026 01:15:45 +0000
Manifest next update:     Fri 06 Nov 2026 03:39:45 +0000
Files and hashes:         1: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl (hash: mM+nRrEu37WmwzRv66hUPWvZcg7BrfQNeeIzDNewYtQ=)
                          2: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: U0YPo5BGNsV6sfhS2oiy7oPSHdSgcRKevuF2NKX91Xo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl
                          rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 03:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:57:ee:da:6e:a3:06:1b:32:5b:f6:1f:8f:67:f0:7f:58:6e:96:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
        Validity
            Not Before: Nov  5 01:15:45 2026 GMT
            Not After : Nov  6 03:39:45 2026 GMT
        Subject: CN=8B74D6569907EABB09CBC061245A6EAE9FB0F65C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:60:3f:18:52:52:a9:f8:53:64:b8:cc:c2:27:
                    71:09:22:46:00:d1:1d:14:e1:e2:b3:d9:5e:54:4d:
                    4d:20:26:a4:22:79:ac:8a:b8:08:ca:0f:32:f2:02:
                    0f:c7:d5:16:65:3e:01:a4:67:40:83:ea:a9:f8:c2:
                    78:fb:9e:09:d8:4f:38:01:84:b0:51:99:89:52:ba:
                    d2:14:8e:47:1e:18:98:d9:5c:be:8a:e8:86:ea:fe:
                    8f:69:a6:f2:7c:7c:b7:fe:3a:f0:2d:2d:2d:2f:62:
                    d7:4e:dc:2a:d4:c6:6c:59:ab:b8:18:f9:42:17:e2:
                    3d:a8:bf:42:06:e6:db:68:2c:7a:83:22:fc:0e:d8:
                    85:c6:ad:c1:f2:86:05:e8:92:63:ca:e4:12:f7:f5:
                    20:af:bd:fb:27:24:d0:c7:93:a0:7e:1d:42:ac:e8:
                    d5:8d:b9:a5:70:48:ca:60:67:2c:73:f1:ff:14:70:
                    a3:70:d0:32:a9:46:3b:4e:5d:ea:a5:f4:e8:80:6f:
                    a5:b1:05:ab:e0:de:b1:37:b6:fc:de:79:03:7e:45:
                    dc:ce:2d:27:28:72:2f:1f:70:3c:fc:bd:e5:aa:88:
                    22:f0:a2:80:8e:16:94:bf:f9:74:71:98:8a:16:3d:
                    94:15:72:2a:f4:09:57:80:97:6f:1a:b9:9c:f2:1b:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:74:D6:56:99:07:EA:BB:09:CB:C0:61:24:5A:6E:AE:9F:B0:F6:5C
            X509v3 Authority Key Identifier:
                keyid:9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fd:e1:c5:55:14:0c:20:ae:61:5a:2b:60:58:4e:bb:bc:27:
         00:e8:4c:8b:b3:6a:0c:67:91:65:6d:3c:b2:a6:41:4b:65:05:
         52:33:7c:9e:8e:df:f6:4f:e0:b8:a8:88:5f:07:fd:8f:7b:4f:
         74:9b:6b:33:d4:ec:ad:f8:0f:12:72:0e:78:7a:f3:ae:f6:3f:
         ae:b9:ec:cb:19:0e:48:b0:a3:77:43:85:49:a3:b1:5e:64:74:
         5a:45:fe:80:a1:51:08:47:22:6c:ec:bf:3f:04:7f:26:b5:f4:
         37:47:78:29:c6:6f:5d:05:2d:f5:52:6e:b2:f7:44:86:7d:68:
         d0:96:26:61:a6:ed:0a:f3:87:87:42:3a:2c:3e:73:34:a8:df:
         f6:40:9a:c7:0d:d1:99:f2:5b:9d:f6:8a:d8:9c:27:81:b4:2e:
         8d:97:34:f8:89:fa:a7:94:49:ad:4f:4e:62:72:36:01:88:98:
         d9:33:d6:38:31:7a:fa:6d:fa:f9:f3:ca:07:9b:79:fb:42:96:
         09:73:8a:49:75:62:f0:1e:11:27:f5:8d:29:00:90:91:1a:e4:
         ff:9d:be:e0:b3:aa:7e:17:23:f5:e3:94:06:ae:f9:22:c3:e9:
         e3:1f:a5:52:60:d3:c7:72:bf:d1:81:6d:dc:6c:8b:3a:1c:4d:
         6c:9b:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:26:53 2026 by rpki-client