Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
File:                     F908019F3DDAFD79BB1C8B63809C31742646ED94.mft (raw, json)
Hash identifier:          oa2R6Q9Ne+iZ1Lj53nX4UJw4jmz8bGuX9+iB2sC1zKE=
Subject key identifier:   F2:08:2B:07:8C:8D:0B:F3:29:9A:CE:F0:6A:58:CB:53:5B:D4:C7:2C
Authority key identifier: F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94
Certificate issuer:       /CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
Certificate serial:       0BBB1C8C13B953971B6AFE1A50CEBBBEAAB9EE1B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
Manifest number:          F9
Signing time:             Thu 05 Nov 2026 00:55:10 +0000
Manifest this update:     Thu 05 Nov 2026 00:50:10 +0000
Manifest next update:     Fri 06 Nov 2026 01:19:10 +0000
Files and hashes:         1: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: I26dPICHNbNpOEaAeWFDJjc3y6XbZTVJydnD33XIwu0=)
                          2: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: cjE8N8SonYXudiNgGVS0p3xIfvw3WuGivTObtGkKRTg=)
                          3: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: g30Ubr5lnHY7RgPz4sO/yn/hRSs7dTdCi43T+BO8StE=)
                          4: F908019F3DDAFD79BB1C8B63809C31742646ED94.crl (hash: lzLH4QMVpDfIFo/x/1I0bNI/tAFFUlN5jrnBf4lX1pY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl
                          rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 01:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bb:1c:8c:13:b9:53:97:1b:6a:fe:1a:50:ce:bb:be:aa:b9:ee:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
        Validity
            Not Before: Nov  5 00:50:10 2026 GMT
            Not After : Nov  6 01:19:10 2026 GMT
        Subject: CN=F2082B078C8D0BF3299ACEF06A58CB535BD4C72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e8:85:11:36:bc:03:34:49:6f:2b:0b:37:da:
                    2f:4b:ff:bc:05:77:79:49:5f:4c:57:38:a9:12:df:
                    59:bc:a6:90:16:4a:21:f7:0d:83:27:d7:70:4a:a1:
                    9e:22:5c:d0:88:3c:f5:34:98:db:18:f7:15:59:b6:
                    8f:df:6c:3f:be:ea:89:2c:b6:d3:56:6d:47:ba:f2:
                    d0:07:6a:58:71:7f:a2:f0:07:89:29:bb:ae:a4:ca:
                    18:dd:c6:b4:21:f8:c2:23:7b:1e:28:b6:d8:21:f2:
                    d8:27:65:92:15:e6:db:68:10:86:33:b1:61:89:83:
                    f7:b2:03:e4:52:59:f1:86:f1:f8:02:0e:2a:13:bd:
                    c4:d9:45:d9:3d:73:4e:18:c0:4b:07:11:d4:23:61:
                    e5:e5:ff:f2:02:5e:0c:97:7b:5d:0c:4b:1d:d1:40:
                    6b:df:99:ab:81:5c:34:39:07:6f:4d:68:17:d5:e6:
                    64:57:12:fa:af:c4:1c:81:e9:03:6a:84:6d:4e:f3:
                    76:00:c8:03:d1:0b:ae:be:4d:fd:d6:96:bd:76:58:
                    bc:60:e0:28:59:dc:6e:26:ad:31:fc:ac:e4:53:24:
                    1b:71:e7:a1:33:e4:c4:8c:fc:c5:5d:5a:f5:47:6e:
                    5e:37:5b:f2:30:c2:f0:72:7a:7b:77:ba:7c:7f:cc:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:08:2B:07:8C:8D:0B:F3:29:9A:CE:F0:6A:58:CB:53:5B:D4:C7:2C
            X509v3 Authority Key Identifier:
                keyid:F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:6e:ed:19:f2:5f:c0:18:60:0d:9d:4e:b8:da:f3:79:fe:
         91:19:f6:56:93:4c:71:ff:45:b3:fd:65:3d:1d:4c:3d:22:7e:
         2c:a5:f1:11:da:65:d1:97:d4:bf:6b:a1:e4:c3:c2:9f:56:c5:
         80:51:b9:73:ea:ba:15:41:13:7c:28:3a:0f:eb:5e:2a:74:9b:
         fd:32:67:f8:dc:99:9b:6d:71:f9:e9:cd:2b:3d:5a:a7:69:eb:
         a6:31:3b:2f:e5:7e:79:49:f5:06:77:07:36:fd:9f:bd:bf:41:
         4d:1d:1e:16:af:7e:89:9f:46:ed:26:1d:3f:6f:d7:d8:14:2d:
         b5:e9:cf:d1:f3:93:bf:2f:2b:c6:a9:c4:b6:4f:72:d3:4e:2e:
         da:27:fd:13:73:79:d8:23:ca:57:94:f2:e5:79:c8:d7:89:5d:
         35:1d:0c:b0:86:1a:81:2b:31:71:24:88:02:05:a9:91:43:c2:
         24:1f:a9:7f:e7:54:69:5e:3f:9c:f7:c8:c7:5f:d7:32:c7:3e:
         2f:be:ba:ea:bd:51:0a:3b:1f:a4:e0:74:17:db:d7:d6:1f:1c:
         7e:0d:36:37:2c:e2:41:99:7a:74:a1:92:12:21:3c:f6:02:87:
         c4:63:0d:eb:2b:f5:d3:44:71:b7:6f:be:e0:fb:c2:af:42:0b:
         cc:40:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:24:17 2026 by rpki-client