Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
File:                     C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft (raw, json)
Hash identifier:          mDzxohCINsIkHIAjqDZlDlhmI/6rJl4vYQnjFSftf18=
Subject key identifier:   AF:03:7B:D2:7F:77:C7:F6:51:04:CB:FA:67:49:1C:7F:BF:00:C9:32
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Certificate issuer:       /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial:       3611F5D3005B1BCD018D8B160CDB455D396D7F21
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
Manifest number:          B8
Signing time:             Wed 16 Sep 2026 20:39:31 +0000
Manifest this update:     Wed 16 Sep 2026 20:34:31 +0000
Manifest next update:     Fri 18 Sep 2026 00:32:31 +0000
Files and hashes:         1: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: WqJlVr9FXIRfRfoifCa2GdwTJsz5m8eNFT1ExD1lr/o=)
                          2: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: g2Ud6J6HCNFfVncrEeujGYDFgaSbLTIo6wU1RvlC+Tc=)
                          3: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: eKAt3iHXo2lgEa5TxrbQhnXVdOLFjM4blG/eTgED9F0=)
                          4: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: YRJhcs0eQNvvPgXOg+gQPByywRt+Knf6CLtlmsMwkjM=)
                          5: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: fi/7+4zEIqvSpKlVqvbMDeqY2YCrGnjUpksCJ4fAKrA=)
                          6: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: ykRVY1EBIN+ucKdlxDLDuc2SEVpBAQD0eYMAZuEgryE=)
                          7: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: RkOZ4BqJISFweILCm3wRYadHRRUC1NJILvlksQQiLxk=)
                          8: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: j1suU85D1/7FjlJvr2yGn6MbcsgwWHNmUCiTqlRJqgg=)
                          9: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: YSFAL2tW6cTVQfgDTgZL8q+MB0PvmVYIYCi98VnDYcA=)
                          10: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: GPynHByObMVja2DkXkj4DTeAw6Zu/eMPLF3FIx9zUPw=)
                          11: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl (hash: RrY4lZ+e/hn00QxfbsJrQjrSU2EYityBAfVfOVSdSO0=)
                          12: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 9h4BjIyizuthkQUuXWWv2bNzQm5B95LJDNd0MLV8X24=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
                          rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 00:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:11:f5:d3:00:5b:1b:cd:01:8d:8b:16:0c:db:45:5d:39:6d:7f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
        Validity
            Not Before: Sep 16 20:34:31 2026 GMT
            Not After : Sep 18 00:32:31 2026 GMT
        Subject: CN=AF037BD27F77C7F65104CBFA67491C7FBF00C932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:66:d5:2d:22:28:ce:cf:6c:e9:ae:c4:c4:
                    21:b1:19:66:43:f4:a2:05:17:06:20:bd:a7:4f:2a:
                    24:b1:64:6f:65:76:62:c0:30:98:4a:3a:d5:61:d6:
                    ea:e8:c2:a5:52:18:e4:4d:53:42:1b:8a:39:54:10:
                    6c:bb:b8:1c:1a:3b:e8:16:53:d8:dc:cb:41:34:2b:
                    dd:18:a6:92:bc:b6:2e:b6:fa:45:9f:3f:ea:50:3f:
                    d7:68:1a:32:c4:aa:14:03:c2:36:41:64:43:a6:00:
                    ea:96:06:a7:d7:d1:ea:4c:78:ca:56:bc:6e:a1:ee:
                    03:d7:a3:61:90:11:ce:c7:60:89:da:01:06:b3:9d:
                    ca:d6:3a:cf:4b:08:a7:cc:84:8c:ac:4a:dc:7f:bb:
                    80:d2:c0:20:a6:21:78:5f:25:8b:e1:c5:ca:05:90:
                    0e:ae:87:18:e9:9f:f8:99:42:13:60:b5:41:e5:09:
                    50:12:fd:ea:4c:e7:e1:76:0b:f2:b0:eb:c5:51:ae:
                    81:69:eb:a5:17:18:f2:0c:18:4b:ed:86:bb:51:ed:
                    24:a6:68:52:7b:25:91:06:14:ad:a4:ae:a4:52:5b:
                    c5:f1:35:d0:34:54:a5:ba:23:c7:01:c6:01:ad:dd:
                    8f:17:98:6d:d4:e7:91:e7:65:e7:35:55:91:c2:cc:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:03:7B:D2:7F:77:C7:F6:51:04:CB:FA:67:49:1C:7F:BF:00:C9:32
            X509v3 Authority Key Identifier:
                keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ca:7d:96:93:3c:e1:e7:40:fd:ed:07:20:a8:42:53:c4:85:
         b8:ee:8a:b0:bd:72:9e:a9:ea:97:98:7e:e5:cd:ac:84:26:90:
         68:55:5a:a7:f9:58:43:fb:1e:c3:8e:d5:d9:42:72:97:3e:2a:
         51:2a:9c:9b:48:8c:b9:3b:67:30:ca:61:94:cd:43:2a:5c:35:
         ea:41:e1:94:b9:63:20:75:02:71:e4:e6:6d:b1:8e:23:4d:51:
         ac:c6:72:da:29:64:71:d1:d1:e3:d3:79:44:3d:11:e2:ec:e0:
         1d:0e:2b:0d:8e:95:9d:94:8c:e9:a7:08:b4:21:ad:c6:e2:86:
         07:4f:0d:02:e1:12:0f:4b:ed:0b:ea:ea:9b:4d:b3:11:73:37:
         2e:7d:db:c7:89:ad:21:da:7b:75:87:a6:fb:53:74:4a:db:8b:
         a2:e3:af:30:c2:69:9c:10:de:8f:f7:7f:91:71:d9:f0:c8:ee:
         ba:96:69:da:ce:4a:ee:cf:b7:f8:ce:06:6f:a7:81:28:f3:40:
         00:e6:62:b5:b3:71:65:fd:3b:59:a5:21:bb:aa:c6:a8:9c:bc:
         9b:79:b8:b2:9e:ad:26:3c:f4:70:df:14:1c:d6:c4:70:24:54:
         cd:45:28:0d:53:f0:38:67:63:f1:04:89:64:31:e5:c2:93:2b:
         4f:35:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:54:23 2026 by rpki-client