Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
File:                     064B9E28C1AE598921210EB5E94CAE9E89533533.mft (raw, json)
Hash identifier:          yaBUQMa34gZchOh+L/7aE8BcIWIKooIy/aNL4+ZSBwY=
Subject key identifier:   A0:BA:B7:9B:14:50:7D:12:2B:D7:18:22:9B:A3:4C:0F:19:E2:68:AB
Authority key identifier: 06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33
Certificate issuer:       /CN=064B9E28C1AE598921210EB5E94CAE9E89533533
Certificate serial:       7F6EC729C5E60479F9F4988F1A80DF05E290CFB9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 07:43:04 +0000
Manifest this update:     Thu 17 Sep 2026 07:38:04 +0000
Manifest next update:     Fri 18 Sep 2026 09:23:04 +0000
Files and hashes:         1: 064B9E28C1AE598921210EB5E94CAE9E89533533.crl (hash: O64Pjl2OMs6SA6Y2IziegfeR7LNJxqUsh47Shf3jLn4=)
                          2: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: rh0sBxj81btPPODPu5P0eEgRgLm8ewf9kn1GsH7FYgE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl
                          rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6e:c7:29:c5:e6:04:79:f9:f4:98:8f:1a:80:df:05:e2:90:cf:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064B9E28C1AE598921210EB5E94CAE9E89533533
        Validity
            Not Before: Sep 17 07:38:04 2026 GMT
            Not After : Sep 18 09:23:04 2026 GMT
        Subject: CN=A0BAB79B14507D122BD718229BA34C0F19E268AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:60:54:5c:41:56:f1:df:a6:99:a0:20:b5:
                    65:cf:9a:0c:18:ca:38:37:64:6a:50:fb:8f:c5:9b:
                    6e:93:11:16:17:67:4b:25:0a:15:80:41:e2:7c:5c:
                    7e:d2:b7:4d:70:02:95:92:aa:9d:58:b6:e4:1b:8b:
                    89:6d:3e:8d:51:fc:ac:a8:61:ae:a4:ca:a3:ba:da:
                    a4:98:df:3a:f5:3c:79:b7:a0:ba:d8:a1:a1:6b:27:
                    1f:90:fb:b6:c9:84:df:2b:65:c5:6a:50:79:9c:ac:
                    e3:e1:a5:9d:92:7e:78:23:1a:cf:8a:52:14:8f:ea:
                    3e:28:a6:4b:cc:c9:9e:be:5c:66:fe:6b:71:4f:4e:
                    b1:6d:52:4e:bb:dd:f3:17:5c:00:1f:46:c0:ee:59:
                    48:0f:65:64:fe:a9:b4:ea:0d:0e:c9:34:06:bb:e8:
                    31:30:97:0c:d1:25:62:9f:57:2b:35:07:e6:05:fe:
                    df:09:f9:36:40:13:32:4f:28:71:cb:f1:20:46:99:
                    a9:34:27:dd:3e:97:a4:93:9d:a8:93:05:c0:e7:ee:
                    72:65:e7:a8:fc:80:50:62:ee:c0:88:20:f8:cd:1c:
                    36:88:bd:60:8f:5d:ca:ac:60:1e:ba:1f:9c:9c:51:
                    5c:56:4d:d7:72:59:fd:f3:74:7c:63:30:c3:03:56:
                    40:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BA:B7:9B:14:50:7D:12:2B:D7:18:22:9B:A3:4C:0F:19:E2:68:AB
            X509v3 Authority Key Identifier:
                keyid:06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:d2:9b:60:27:dd:b6:4a:cb:6e:cf:2f:bc:64:c2:0b:7b:
         17:40:fa:3f:0e:50:d3:80:45:eb:19:10:60:12:b8:eb:d2:45:
         68:b3:45:f3:de:3c:c8:57:da:35:68:49:63:89:db:bd:c6:a2:
         79:5c:2a:b3:38:e5:14:7a:5e:43:8e:21:70:64:ee:d2:db:92:
         a6:5f:76:9e:9c:de:91:eb:c4:3b:09:f8:93:82:4f:ed:96:d8:
         91:f3:d0:0b:da:9a:97:ec:75:ee:97:e0:4e:36:cc:87:87:1d:
         46:7d:b4:9b:1e:fc:dd:53:31:a2:a5:ba:8d:04:e1:ca:70:9d:
         bc:b9:af:58:11:28:69:41:88:d0:02:69:6f:1d:9e:96:12:e0:
         a3:08:56:2f:7c:f5:72:1d:63:fa:65:f3:a0:10:86:11:a8:8a:
         85:27:5d:47:f7:b9:03:59:a8:b8:54:5b:e3:e3:ff:5d:28:82:
         4c:e3:d3:f1:03:44:c1:35:2f:b2:7e:37:4e:29:61:5a:f9:da:
         e9:de:29:51:e9:96:d4:5e:4b:26:a5:25:80:a1:05:d0:ee:2e:
         60:e6:33:d1:eb:15:9e:eb:95:0c:e2:3b:89:34:c0:4c:d3:86:
         0f:ff:ee:e5:da:12:e4:f5:3a:83:08:96:52:c1:83:df:4d:dc:
         75:8a:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:24:56 2026 by rpki-client