Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
File:                     F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft (raw, json)
Hash identifier:          gSrhxBLwVFSdULnQExMTVem5y3VBQU/FqLCpwWvI1Nk=
Subject key identifier:   68:04:D9:5A:13:59:10:14:AA:39:16:99:32:0F:56:67:BF:C4:D9:F7
Authority key identifier: F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04
Certificate issuer:       /CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
Certificate serial:       4ACAF630AF1533C88B592338FB9E5B8C6B1CD9AC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
Manifest number:          B7
Signing time:             Wed 16 Sep 2026 16:29:29 +0000
Manifest this update:     Wed 16 Sep 2026 16:24:29 +0000
Manifest next update:     Thu 17 Sep 2026 19:13:29 +0000
Files and hashes:         1: F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl (hash: gLRn7+1d9yl4E7mztATjQb3sPOxW96g4gl0aVGHJR+0=)
                          2: 3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa (hash: fNPzl5pgP5THqHKexY3+BO0XOu1eYuUYqBqSIA0oDIk=)
                          3: 3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa (hash: 5cKt2GQ70RT9pJRr52o1J2ZJ8Szvc0mfOl2vwcEkNAw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl
                          rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ca:f6:30:af:15:33:c8:8b:59:23:38:fb:9e:5b:8c:6b:1c:d9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
        Validity
            Not Before: Sep 16 16:24:29 2026 GMT
            Not After : Sep 17 19:13:29 2026 GMT
        Subject: CN=6804D95A13591014AA391699320F5667BFC4D9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:f0:74:bf:c6:b5:4f:5c:d9:9e:6b:d7:e5:
                    27:99:5d:6a:9d:c7:f2:e2:4f:91:0f:d5:0b:46:e3:
                    0a:7b:e7:db:ce:9d:e1:81:64:8f:19:99:fe:2a:50:
                    34:51:14:46:1b:ad:3a:3d:45:ed:96:ac:de:61:08:
                    7c:11:67:67:67:23:09:95:4f:c1:7c:5e:76:a2:8c:
                    6b:ca:41:a7:a6:81:13:9c:90:b4:6e:bf:82:08:c5:
                    f9:1f:1d:70:e3:db:58:b1:3f:f6:0c:f5:d3:71:88:
                    fb:1a:d3:8c:61:43:22:2b:5a:43:25:58:ed:59:1d:
                    ed:79:17:c0:16:a2:61:07:03:d6:eb:66:24:17:85:
                    f3:c7:a7:3c:1d:c5:19:c1:ef:d5:a0:3f:22:0f:4e:
                    a8:34:69:d6:97:5c:68:af:79:e8:ba:5c:bb:6f:c8:
                    df:e8:8e:ab:54:23:f6:04:93:38:44:c2:34:6e:b9:
                    85:46:55:10:f2:3a:dd:d4:54:c7:e1:10:fe:ac:f7:
                    7a:63:d2:db:27:11:af:39:db:d7:e1:12:54:04:ff:
                    cb:80:e4:47:0b:34:5f:cd:88:6b:6e:e3:46:74:70:
                    b3:8c:57:1f:5f:38:2c:68:59:92:f2:5a:c7:c3:e5:
                    da:2b:85:44:aa:09:4b:b5:13:b4:1c:de:24:2b:fb:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:04:D9:5A:13:59:10:14:AA:39:16:99:32:0F:56:67:BF:C4:D9:F7
            X509v3 Authority Key Identifier:
                keyid:F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:26:7a:22:49:e1:b1:6b:a5:09:de:e6:38:6b:7c:ca:74:6b:
         89:43:60:3c:c2:67:bf:df:0d:d8:b2:86:ff:69:e7:9b:b3:f8:
         9d:ad:60:78:15:84:ea:34:7b:a0:4d:27:46:8c:5c:bb:17:6f:
         ba:70:52:3a:af:ee:e5:20:31:a4:b0:eb:4c:83:7b:d9:a8:8e:
         ca:a4:bd:f6:c1:e9:04:90:99:45:f1:2f:63:b2:84:e7:45:db:
         00:52:62:9a:fe:13:23:4f:35:b9:e0:00:d3:26:dd:7b:a0:a5:
         4a:55:e3:24:2c:77:b9:33:3c:91:75:16:9e:40:95:fe:36:f4:
         a1:b5:da:e0:5d:8b:69:11:59:37:a4:59:6d:71:93:02:33:86:
         a3:83:7f:a4:84:cc:3f:e4:9d:71:ab:ef:9c:f9:8b:6e:8f:1d:
         c3:75:ae:53:44:23:4d:37:3a:ae:70:c6:f0:ba:27:46:8b:d8:
         e3:0e:63:49:f8:20:bc:ae:f6:65:00:41:56:a4:0c:4f:e8:b1:
         3d:f1:af:36:69:52:cb:3f:73:74:ba:19:ef:60:99:5a:2c:44:
         fb:10:cb:0e:06:c1:60:82:1f:02:8b:8b:b7:35:97:23:cb:fa:
         98:22:4b:f4:fb:fb:e2:64:85:f7:49:98:ea:92:e8:db:3a:14:
         80:d6:e4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:26:21 2026 by rpki-client