Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft
File:                     8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json)
Hash identifier:          zd9zSvXGjQm9TC0DhvlWUXIXdLDqxwJ0NMmbKz/X+ts=
Subject key identifier:   C4:83:90:49:72:F7:FA:FF:42:B1:A8:8C:9D:6C:C0:06:A8:64:6A:66
Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6
Certificate issuer:       /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6
Certificate serial:       3F36F158E6613D8434F23790AB41595F7A7E708D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft
Manifest number:          F9
Signing time:             Wed 04 Nov 2026 09:30:05 +0000
Manifest this update:     Wed 04 Nov 2026 09:25:05 +0000
Manifest next update:     Thu 05 Nov 2026 09:56:05 +0000
Files and hashes:         1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=)
                          2: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: ba533iznqn0HfcD61NRMZP913D7nKSwOmCzuFZwLD3U=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl
                          rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 09:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:36:f1:58:e6:61:3d:84:34:f2:37:90:ab:41:59:5f:7a:7e:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6
        Validity
            Not Before: Nov  4 09:25:05 2026 GMT
            Not After : Nov  5 09:56:05 2026 GMT
        Subject: CN=C483904972F7FAFF42B1A88C9D6CC006A8646A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:db:5b:9d:b6:09:84:44:da:38:8f:a4:bc:
                    e3:14:09:83:b5:35:d1:37:02:59:47:8b:a0:81:9c:
                    a2:f3:30:7d:11:67:1a:21:f7:fc:80:0b:07:77:4d:
                    2f:12:06:5a:54:02:27:d4:d1:eb:d8:39:d2:56:ef:
                    1f:c7:8c:b4:9f:8b:cb:98:45:9a:f5:ed:b6:6f:4c:
                    54:bc:f0:b9:ad:f2:e4:55:ee:78:76:44:6c:dc:80:
                    c1:f6:0c:de:99:01:83:4a:d8:20:7e:72:6c:20:3c:
                    72:7d:a4:f0:61:4c:68:be:e9:76:d5:94:7c:d2:9e:
                    67:ca:c0:e6:2f:00:2b:3c:d4:72:c3:56:83:60:58:
                    a0:54:e3:4a:61:08:04:9a:cb:90:7c:07:bc:19:c7:
                    21:27:32:a0:9b:d4:a9:87:36:ff:c4:54:9f:37:89:
                    0f:41:f1:ea:4d:35:3d:dc:14:78:d0:ce:f1:d7:17:
                    4b:94:db:ba:52:92:5f:9e:44:2e:c0:68:e6:d5:ca:
                    c6:c8:e1:d6:2f:22:30:84:d1:bc:b0:59:85:ed:3f:
                    dc:fe:55:1e:4d:a7:42:4a:1e:c0:27:7d:38:23:96:
                    c1:09:9a:7c:34:1b:4b:93:69:05:45:a4:5e:24:1b:
                    bd:4b:17:90:77:e5:17:6d:a9:b6:70:ba:fe:ea:7d:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:83:90:49:72:F7:FA:FF:42:B1:A8:8C:9D:6C:C0:06:A8:64:6A:66
            X509v3 Authority Key Identifier:
                keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:38:61:88:7e:03:a1:0e:93:1c:36:b9:2b:b3:c7:29:18:
         6a:5d:d2:9d:8c:77:3d:52:07:c8:f0:8d:41:d7:58:fb:53:64:
         df:42:ad:ed:02:98:5c:fa:48:2c:96:6a:04:9e:e6:c7:0e:01:
         d0:d5:99:16:05:cd:72:38:d2:90:16:8d:bc:a8:33:38:c0:c3:
         84:7e:11:7e:c6:b3:af:34:20:7b:d9:2f:77:75:7d:c4:c1:01:
         d4:d5:a5:38:dd:fe:5b:ce:95:55:f1:72:51:71:4e:4a:2c:33:
         69:bd:79:48:69:81:32:39:0d:3a:46:a1:de:ef:38:d4:36:d1:
         18:fc:01:fa:52:12:44:06:de:40:49:18:f6:bc:39:97:51:35:
         fe:a1:1d:56:ae:92:04:a9:98:eb:e9:f3:d3:fa:0c:b0:33:1c:
         ee:0c:47:43:25:25:c1:b0:31:b9:80:ca:2a:52:c8:da:c7:65:
         10:e6:d7:4e:3e:c7:be:5c:b8:97:7c:3a:15:b3:1b:35:9b:4d:
         36:ab:11:89:01:45:3c:8d:68:5a:eb:12:4c:62:14:4c:58:df:
         9e:66:57:43:ee:c0:80:62:fe:35:33:ad:41:03:aa:82:74:9b:
         a9:86:dc:66:c4:f2:13:01:e9:e7:4a:c7:b1:6f:e8:79:f7:14:
         48:45:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:48:03 2026 by rpki-client