Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
File:                     C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft (raw, json)
Hash identifier:          sxD3ASPu1KSnRndW/XhUXHvetFIip+ayrDUobiiSZvo=
Subject key identifier:   7D:53:6C:53:43:F3:92:01:34:35:3F:14:78:6D:E6:80:20:50:E3:61
Authority key identifier: C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7
Certificate issuer:       /CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
Certificate serial:       161D9D560BE3F205A8DD2D2DAF66ECED3C2F3A7C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
Manifest number:          42
Signing time:             Sat 20 Jun 2026 01:57:05 +0000
Manifest this update:     Sat 20 Jun 2026 01:52:05 +0000
Manifest next update:     Sun 21 Jun 2026 04:52:05 +0000
Files and hashes:         1: C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl (hash: G/6i8IcdFh39wZ8mSzXtBpv7qXitabr5w/FDl6g3G0w=)
                          2: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: Kv2Bwd8eSfvsYR5xc9V1CjJ+ZGmosk9p1qlT46CISoA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl
                          rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 04:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1d:9d:56:0b:e3:f2:05:a8:dd:2d:2d:af:66:ec:ed:3c:2f:3a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9E5EB92DA793B8D8BF89C80541899A148DA3FC7
        Validity
            Not Before: Jun 20 01:52:05 2026 GMT
            Not After : Jun 21 04:52:05 2026 GMT
        Subject: CN=7D536C5343F3920134353F14786DE6802050E361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:be:0c:1c:fc:fb:98:74:40:ba:96:9f:89:
                    96:ec:1e:b7:48:fd:0b:eb:ee:85:c3:da:e1:91:66:
                    0c:c2:1f:07:f3:6b:ab:f5:ed:7c:ad:6d:da:b6:63:
                    61:64:fc:65:74:ca:2a:f7:54:b1:c5:1d:ba:34:31:
                    a9:08:ad:20:df:11:db:08:09:f9:da:3c:54:2d:16:
                    33:1c:6c:3a:df:f8:c2:a4:b0:2c:cc:03:16:64:21:
                    75:18:8e:33:01:35:d6:a9:0d:a3:b1:eb:23:c3:4a:
                    fe:60:32:ea:01:0c:24:61:0f:9b:d3:6a:43:0f:a1:
                    c5:ba:d8:e8:d3:c8:c1:c3:08:59:b8:1a:7b:fb:df:
                    81:cd:3a:b7:b2:7d:c7:97:5d:e8:c7:5b:ce:91:9d:
                    48:ed:5f:a1:2f:75:84:b4:10:1a:26:2d:04:1a:6d:
                    05:d5:19:ba:b1:63:e4:cc:25:66:4c:b8:81:3d:cd:
                    72:be:fd:df:71:a6:33:56:1a:d8:08:65:e6:e1:f6:
                    45:82:87:24:55:f8:bc:2f:d5:f3:cd:b6:8b:f6:47:
                    c7:4c:76:40:f1:c7:cf:7f:fd:68:f0:3a:f4:8e:f3:
                    a2:48:7a:00:9b:d9:c2:9e:54:de:b2:fb:9c:f7:a8:
                    a7:03:81:30:da:48:be:a0:ea:32:f1:47:b2:ec:cf:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:53:6C:53:43:F3:92:01:34:35:3F:14:78:6D:E6:80:20:50:E3:61
            X509v3 Authority Key Identifier:
                keyid:C9:E5:EB:92:DA:79:3B:8D:8B:F8:9C:80:54:18:99:A1:48:DA:3F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/C9E5EB92DA793B8D8BF89C80541899A148DA3FC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:47:d3:0a:88:1d:8a:22:23:7c:bd:fd:3a:bc:e2:00:3e:b6:
         cb:c3:a0:e5:90:d5:ea:77:2c:40:ef:7b:52:0b:ce:bf:2a:a1:
         4c:a7:8b:5f:cf:2c:b0:ef:22:bf:c4:91:dc:45:53:c3:a1:e3:
         57:e3:94:99:f7:2f:c2:e7:ce:17:91:96:92:2e:7e:fc:20:e8:
         91:64:cf:02:f0:c0:8a:a5:a7:6d:ac:dd:ad:8f:17:1c:4c:85:
         b9:50:47:9b:64:fb:7d:ab:06:38:61:a9:35:1e:fa:41:50:15:
         4e:e8:b7:eb:5c:c6:23:4e:81:f3:7a:ee:14:81:3e:c4:01:df:
         68:f2:de:e5:25:53:ab:3a:38:44:30:33:16:01:a7:32:3a:c8:
         70:44:c5:69:ff:3d:71:fc:9c:80:91:26:ae:24:7f:7e:8d:a0:
         cd:d7:8b:69:91:54:61:5b:ea:96:f5:d6:2a:ab:48:96:6a:59:
         8f:0e:d9:f0:a2:9f:b7:93:a0:e4:c9:ec:d9:9c:c8:49:bc:bc:
         06:77:6d:83:5a:09:70:48:3b:53:0d:64:01:a1:bb:72:55:98:
         50:d8:db:84:a5:60:4e:9b:88:a0:52:9e:7b:9d:ea:79:8b:98:
         96:6f:23:80:5a:73:00:40:d7:77:9f:40:45:29:fd:8d:ed:a5:
         57:7c:68:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:17:12 2026 by rpki-client