Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
File:                     BF81EC78CC8A61FCFF71A862321A5204E581203B.mft (raw, json)
Hash identifier:          R9GSEGNhPQ5+95rWt4EuetdTczLYv5Bs7PZz5xAKvOE=
Subject key identifier:   33:09:CB:34:9E:1F:44:81:20:88:A3:6D:D8:17:F6:DA:C6:A0:EA:76
Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B
Certificate issuer:       /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
Certificate serial:       4DD71D1010CB343C1539DE8DA18079E5438EBDDF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
Manifest number:          A6
Signing time:             Wed 02 Sep 2026 22:35:42 +0000
Manifest this update:     Wed 02 Sep 2026 22:30:42 +0000
Manifest next update:     Thu 03 Sep 2026 22:50:42 +0000
Files and hashes:         1: BF81EC78CC8A61FCFF71A862321A5204E581203B.crl (hash: 20nYxtPc2sPZt2nQC5MosEB9DnLnRY2ljE/ioWnpnAw=)
                          2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl
                          rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 21:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d7:1d:10:10:cb:34:3c:15:39:de:8d:a1:80:79:e5:43:8e:bd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B
        Validity
            Not Before: Sep  2 22:30:42 2026 GMT
            Not After : Sep  3 22:50:42 2026 GMT
        Subject: CN=3309CB349E1F44812088A36DD817F6DAC6A0EA76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:72:03:36:0b:4c:21:6e:80:85:6d:bd:70:
                    63:bf:78:7e:64:06:97:8a:bd:b0:7e:2e:34:e9:2a:
                    86:f9:4a:bb:39:1b:76:b8:86:13:19:c6:24:45:75:
                    fc:57:8d:6a:b3:4b:1d:bb:8a:40:33:2a:c0:b4:86:
                    ba:26:16:80:2a:af:c8:c2:4c:4e:28:bd:a5:7f:33:
                    9b:3c:63:40:e8:ca:77:83:59:66:95:9e:58:a6:74:
                    14:eb:10:e2:90:00:01:ab:56:ca:89:96:fb:8d:3e:
                    ae:98:50:e8:db:a5:85:4a:a9:54:20:8f:25:97:cb:
                    cb:35:14:f6:05:ff:48:80:75:11:19:ad:36:f8:59:
                    67:7f:be:95:b8:de:cc:6e:78:72:85:29:8d:a5:da:
                    19:27:f8:f9:6f:0e:10:26:28:0a:a0:f1:08:fc:d8:
                    9b:e6:e7:ba:f1:ff:84:c6:65:1f:aa:f2:96:2e:d5:
                    f8:c9:10:8c:14:8d:7a:89:a4:d8:fb:73:df:a1:5d:
                    95:96:cd:ff:34:a9:ea:ea:35:98:31:7e:3f:93:13:
                    1c:f1:52:ad:f2:b2:cd:f9:9c:d1:ae:e0:09:5c:e9:
                    59:12:ea:85:35:18:0c:72:1a:2e:16:39:91:28:30:
                    e2:a3:5c:ff:c9:c4:0b:76:32:e9:5b:cd:46:b2:ad:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:09:CB:34:9E:1F:44:81:20:88:A3:6D:D8:17:F6:DA:C6:A0:EA:76
            X509v3 Authority Key Identifier:
                keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fe:36:16:4e:89:5b:a4:17:c9:c7:0b:32:1c:38:bb:f2:40:
         3d:8a:9c:71:fb:a1:dc:97:e1:c6:76:5c:83:db:7a:61:ae:b2:
         97:13:66:36:ec:60:14:76:4b:d5:d5:40:6b:05:19:fb:2b:ad:
         6d:d7:c7:eb:df:ee:7a:b0:cf:0a:56:5d:06:ce:7d:6f:ed:c1:
         c9:3a:08:97:bb:e9:43:e7:32:29:24:9c:50:12:dc:2d:50:8d:
         24:15:6a:72:eb:76:91:9a:64:43:34:e5:8b:0e:22:d0:85:fa:
         c2:53:ff:4e:c3:95:88:12:c7:e0:a0:bd:fa:97:fa:0e:d6:89:
         43:b3:84:87:a4:d2:5d:76:fc:71:5a:4e:29:79:a5:e7:33:ae:
         e8:8d:02:f5:b7:98:f8:58:6c:f3:46:19:e5:08:6e:65:98:0e:
         62:11:ff:b3:b0:19:be:23:59:0c:19:e2:83:17:a4:d3:b9:a1:
         61:1b:da:8b:c3:74:d7:3e:01:07:a7:a2:6d:e8:8f:95:f1:16:
         63:e9:43:2f:ac:07:82:c9:80:91:74:a7:84:67:05:47:d6:b0:
         5c:75:e9:63:1c:01:f0:2c:6d:d5:74:42:db:71:c0:18:34:8b:
         88:2c:0b:79:d0:43:0c:fd:ac:0b:a5:e6:92:48:f3:9f:03:db:
         5f:ee:2a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:57:17 2026 by rpki-client