Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft
File:                     ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft (raw, json)
Hash identifier:          4H5UAF0Le5JSCvSkTGrP9fA30+83JCIA2ukp5iO0nLA=
Subject key identifier:   FD:CF:96:DF:DF:9A:B3:66:E1:A2:97:E7:63:C3:4B:AB:25:3A:18:06
Authority key identifier: EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3
Certificate issuer:       /CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3
Certificate serial:       5983E9F01B76AD985D0A6149B2A6FAEA2C9DDD28
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft
Manifest number:          B9
Signing time:             Wed 16 Sep 2026 22:21:32 +0000
Manifest this update:     Wed 16 Sep 2026 22:16:32 +0000
Manifest next update:     Fri 18 Sep 2026 02:11:32 +0000
Files and hashes:         1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: eXa5aSDdrCtqvVMG17UDbY8fW0WBNN3GZ2WD5zRuz9o=)
                          2: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl (hash: N+OxohxuwWZZi8LiuBdiAUqevr5DN4IkXPlwvravefc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl
                          rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:83:e9:f0:1b:76:ad:98:5d:0a:61:49:b2:a6:fa:ea:2c:9d:dd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3
        Validity
            Not Before: Sep 16 22:16:32 2026 GMT
            Not After : Sep 18 02:11:32 2026 GMT
        Subject: CN=FDCF96DFDF9AB366E1A297E763C34BAB253A1806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:54:17:cb:f2:64:ed:95:27:d6:63:21:68:
                    33:a3:4d:de:ac:f9:f1:6f:da:74:7e:04:9b:c4:75:
                    2e:aa:6d:e9:16:21:76:cb:7a:1e:82:26:93:5a:d6:
                    1f:b2:64:1c:c6:bd:78:7d:23:f9:fc:e1:ff:64:cc:
                    26:cd:3b:b5:0a:78:7e:3f:3a:d1:ad:8c:5d:23:69:
                    5d:91:f1:ef:10:b0:dd:e5:22:cb:41:00:2a:d2:17:
                    81:f3:69:e1:f9:30:dd:f3:eb:57:69:02:a3:2b:b5:
                    b4:f8:d0:1c:23:d6:84:16:fa:ac:de:2e:b6:75:85:
                    62:94:e1:37:e3:7b:67:51:f2:92:b6:95:36:d5:7e:
                    b7:55:e0:3c:ba:40:a7:2f:75:d3:bd:7d:89:5c:85:
                    b3:4b:c2:e0:0c:ab:19:ea:d1:3c:32:51:e6:a4:db:
                    a7:5c:25:0f:7c:5b:56:da:b6:92:03:25:3a:0e:26:
                    0c:0e:0f:45:c8:ec:f9:b5:1c:85:01:a2:ff:43:30:
                    42:40:d2:11:c2:9c:c4:f8:73:61:9f:ee:36:e0:07:
                    ea:eb:16:2e:22:e0:6a:34:2e:80:f2:0d:6f:84:2b:
                    63:d1:3f:3d:eb:37:ae:60:14:5e:19:cd:e0:95:1d:
                    8f:d9:45:31:3f:31:f0:3a:dc:88:00:b0:4b:25:22:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CF:96:DF:DF:9A:B3:66:E1:A2:97:E7:63:C3:4B:AB:25:3A:18:06
            X509v3 Authority Key Identifier:
                keyid:EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:63:d3:95:9c:7e:29:cf:7b:9b:20:e7:48:90:a9:32:76:9c:
         c6:a6:10:02:43:69:75:82:85:e8:eb:ff:2f:66:7c:c5:ef:72:
         7b:21:45:d2:80:8a:54:86:89:db:fb:45:9b:b8:6b:7a:31:4c:
         d1:94:1c:15:8a:cb:7e:00:fc:64:14:28:e9:37:78:65:18:93:
         52:8b:a5:e3:3c:82:d1:66:33:75:16:72:0f:b6:fb:40:ba:74:
         30:d3:67:c6:16:6e:c5:46:f8:99:3e:40:ff:b7:a3:cd:89:c4:
         92:de:68:0d:be:65:2b:2b:95:a9:bc:8b:0b:16:de:a7:8a:94:
         e0:b4:d2:cc:fe:8b:ca:e2:f2:49:b7:36:82:36:6a:78:e1:f3:
         4b:2d:56:ef:33:27:ef:5c:6e:22:aa:e2:2c:c8:9f:db:11:1d:
         cc:be:53:d1:d4:97:54:1f:2d:80:1f:18:bb:61:65:31:ef:71:
         43:c4:a9:c4:59:be:b6:24:00:1b:3d:75:32:da:6a:40:c9:22:
         4b:47:57:3f:6e:84:43:57:89:a5:44:c3:0e:a9:21:58:1d:86:
         1b:42:71:df:35:a2:69:bb:22:f6:60:1b:e5:19:56:00:8c:09:
         d6:22:07:9e:ff:af:f0:ca:08:02:75:3f:c9:f0:7f:b9:b0:95:
         b9:8f:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 11:30:57 2026 by rpki-client