Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
File:                     9796934CE983E32FE16AC8EC0968FB6FF0339712.mft (raw, json)
Hash identifier:          C53HYxXRxAr1YSVfKsnwbIPbZ4zAxOrcsgqwXZgFA28=
Subject key identifier:   BD:2B:59:EF:E9:C5:CB:A7:72:52:2F:7A:99:60:9B:82:97:5E:3E:A5
Authority key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12
Certificate issuer:       /CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
Certificate serial:       2206CC62C2D99971DDBCCCC8AB2ABA825C2400FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
Manifest number:          F9
Signing time:             Wed 04 Nov 2026 18:16:32 +0000
Manifest this update:     Wed 04 Nov 2026 18:11:32 +0000
Manifest next update:     Thu 05 Nov 2026 21:08:32 +0000
Files and hashes:         1: 3130332e39302e32372e302f32342d3234203d3e20313332363733.roa (hash: gEjgmPi52YAqYyRKLzVAHY/tcddAmwneB2Joo9b5lCU=)
                          2: 3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa (hash: dKhNn6GJjJO6VU2o0VhUMT3uGr0zEWCIpRqbnuOjsu4=)
                          3: 3130332e3233322e3234322e302f32332d3233203d3e203633343937.roa (hash: UWBZ8HDVUh8vSiS9fwmZD70vxv5kj8iLpVqFbVQF6Ag=)
                          4: 3130332e39302e32362e302f32342d3234203d3e203633343937.roa (hash: yEBegNseO4WhgSgnMf0UD1P9unzjG8GGfBUDaVupNxw=)
                          5: 3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa (hash: CyXCnh6Eu/KCDGsGPBvecfzZa94iTRYuLOf5EOeQnK4=)
                          6: 3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa (hash: 90gI7sKaQLOikXOS30SwmXL0rMP42rJQ2sx3CKH87jQ=)
                          7: 3130332e39302e32342e302f32342d3234203d3e20313332363733.roa (hash: rNgJ1hrCOEzVkRLQiZgbFHzGeuIdRSxk2VHfwHrqS1k=)
                          8: 3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa (hash: TDOsoHO/HMJ3+M/IDdZkOYM5yQ6eYeDxjPpemNYDfKc=)
                          9: 9796934CE983E32FE16AC8EC0968FB6FF0339712.crl (hash: nXDi+PyflaX1bFd9amIudfYqTRjl85npjiJ+/V6dZHc=)
                          10: 3130332e39302e32352e302f32342d3234203d3e203633343937.roa (hash: y59gW5BEgEi3F+rl6LRjNXAc9apuX+ON4CV36/Ae45k=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl
                          rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 21:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:06:cc:62:c2:d9:99:71:dd:bc:cc:c8:ab:2a:ba:82:5c:24:00:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
        Validity
            Not Before: Nov  4 18:11:32 2026 GMT
            Not After : Nov  5 21:08:32 2026 GMT
        Subject: CN=BD2B59EFE9C5CBA772522F7A99609B82975E3EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:3a:8b:2b:b8:e6:b4:88:05:81:8d:0c:fc:
                    d2:a7:c6:44:e4:4d:03:ce:98:b9:6d:7f:40:be:2d:
                    fa:75:a5:7d:18:3b:9e:44:5f:d8:0b:5f:19:09:d5:
                    22:27:08:c9:fc:48:0c:31:4e:c7:92:74:a4:05:88:
                    6e:5e:99:cf:d1:6f:92:5e:a6:75:99:d1:cc:b2:78:
                    cb:a0:92:0a:dc:df:86:2e:f6:5f:09:66:d4:bf:34:
                    fb:36:ca:c3:5d:df:b4:d2:19:d4:bc:6f:e4:1a:07:
                    6f:51:b2:f2:40:54:47:5e:24:2b:5c:d2:cc:6d:4a:
                    48:37:46:26:47:13:5d:d4:b2:df:d1:a5:23:89:f3:
                    fc:10:85:20:31:34:19:95:58:e6:35:ee:72:a7:e6:
                    41:b4:61:84:70:78:85:fd:d3:f5:8b:25:60:b8:38:
                    54:9e:8d:89:c2:84:b8:5a:4b:16:3b:70:c5:78:25:
                    e1:92:90:ce:24:cb:4d:bb:18:4c:75:f4:ad:8c:be:
                    2b:64:0b:40:3c:ce:be:33:74:11:c6:6c:cc:e4:24:
                    d9:99:bd:e3:2d:39:02:78:27:64:f8:b6:c6:c5:c3:
                    23:ed:d2:9a:d9:c5:19:f2:5b:4b:05:21:bb:bf:9e:
                    0e:15:33:26:01:ff:9e:de:de:82:17:c5:bd:8b:ee:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:59:EF:E9:C5:CB:A7:72:52:2F:7A:99:60:9B:82:97:5E:3E:A5
            X509v3 Authority Key Identifier:
                keyid:97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:03:86:a5:3c:c1:63:76:89:f1:fd:70:ea:6c:85:50:c5:6a:
         f3:38:ff:e2:89:ec:2e:7a:cf:6c:07:e4:d0:65:72:79:e7:ce:
         8f:12:6b:b2:07:6e:e1:4e:f1:6f:18:38:26:7f:b3:0a:c5:06:
         eb:dc:9a:8a:69:84:05:e1:e4:31:3a:f3:9e:52:b5:6f:32:b1:
         7e:e7:a4:7b:57:6f:9c:8c:49:5f:2b:d3:f1:d3:83:68:02:41:
         2d:15:e6:84:ff:8a:ba:dd:77:46:1a:2f:9c:d2:2a:dd:16:42:
         7d:63:4a:2c:a3:12:de:47:aa:8f:08:38:08:ad:ea:16:13:90:
         bc:80:3f:9e:56:d6:06:da:68:34:4a:2c:d4:b2:3a:a7:e5:ce:
         21:c5:f3:39:4c:5e:41:d8:0f:be:26:e9:07:f0:70:1e:53:a7:
         93:d1:82:4b:33:c7:46:26:88:69:33:ed:bc:72:5e:63:bd:d8:
         34:53:16:18:2f:b9:93:2c:0d:12:f5:0d:03:40:37:5a:b6:03:
         f7:4d:2d:96:31:51:0d:ab:f5:4a:3f:75:67:3e:cb:e1:82:84:
         a9:9f:61:e9:9f:a7:0e:cf:5a:f1:e1:cb:63:cd:68:fd:aa:cf:
         02:82:12:61:16:33:80:1f:d6:ee:fc:9d:df:a9:a4:2e:d1:5a:
         35:37:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:38:33 2026 by rpki-client