Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft
File:                     B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft (raw, json)
Hash identifier:          wM7oq0t6lJ5MogrqGj/hEYNwBTXJJm80eSDS7kBcABg=
Subject key identifier:   66:38:F6:A5:D9:4E:DB:7F:CB:FB:37:B6:22:B0:51:47:70:25:39:B3
Authority key identifier: B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC
Certificate issuer:       /CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC
Certificate serial:       0FA7AF4FCED12A29B475419C087ADDEE2DC5F0E4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft
Manifest number:          B8
Signing time:             Thu 17 Sep 2026 03:17:33 +0000
Manifest this update:     Thu 17 Sep 2026 03:12:33 +0000
Manifest next update:     Fri 18 Sep 2026 03:30:33 +0000
Files and hashes:         1: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: c6pFiJSk1UQhVnz9HO0WDm1mZbg2xnGEy69Z/hHQfrI=)
                          2: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: lh47cqtqX+UfhZbQx7DPwZTGhdNBwMPbLmUFIaoV1ag=)
                          3: B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl (hash: lcCcXbmLgYCg8tprOAU2EgERgqxfZT3lbbBzoYGkZIs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl
                          rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 03:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a7:af:4f:ce:d1:2a:29:b4:75:41:9c:08:7a:dd:ee:2d:c5:f0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC
        Validity
            Not Before: Sep 17 03:12:33 2026 GMT
            Not After : Sep 18 03:30:33 2026 GMT
        Subject: CN=6638F6A5D94EDB7FCBFB37B622B05147702539B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:6e:fe:06:35:f2:2a:93:12:3b:04:32:e5:
                    51:90:06:ad:88:46:ce:c3:57:60:f7:eb:5d:57:25:
                    5f:64:93:9c:f8:08:da:75:cb:89:9f:8e:d9:7d:18:
                    be:cc:cc:20:e3:eb:3c:b4:9e:c3:f7:3b:de:87:41:
                    b9:19:21:a4:b1:34:99:1f:e8:af:a7:2b:0b:f2:91:
                    09:9f:f9:b2:14:df:e1:2c:c6:71:ca:a3:e6:fc:53:
                    b6:0b:cf:3e:79:a8:58:3c:e9:ee:ee:ff:01:0d:bb:
                    5a:c3:49:30:14:0e:45:8d:8b:ed:21:e5:53:8b:8c:
                    ee:c8:ec:10:f5:71:b2:46:88:f1:c1:b4:2a:c7:56:
                    ca:96:84:17:1e:b3:f8:9e:47:cb:c2:11:1a:30:83:
                    b2:29:98:19:b5:d3:f1:22:f3:cb:7c:2c:e6:5b:db:
                    95:81:17:87:b5:43:5c:fc:a2:71:4e:1f:3c:5d:a8:
                    d6:d1:cd:c0:1c:aa:f5:b9:5f:22:6a:a2:a2:4c:d6:
                    41:7a:78:b7:df:44:20:1c:46:0d:6c:8c:7d:50:0a:
                    99:6f:01:0a:ea:e2:93:b0:c4:5c:ca:8e:1e:bf:3b:
                    32:fe:14:e4:27:18:43:53:47:e1:c1:45:57:af:ac:
                    c0:5c:51:5b:61:77:47:96:c5:23:94:ff:c2:6b:6a:
                    64:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:38:F6:A5:D9:4E:DB:7F:CB:FB:37:B6:22:B0:51:47:70:25:39:B3
            X509v3 Authority Key Identifier:
                keyid:B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8b:15:d1:c3:28:15:59:29:9d:a1:ad:ab:8a:63:cc:bf:af:
         e7:9c:c3:23:0a:f9:34:e9:86:c4:bf:79:c7:03:d6:41:3a:1f:
         a5:86:9c:b2:ea:b0:e7:4b:54:4c:21:39:f4:fc:c1:b3:f7:bc:
         26:da:aa:75:a2:05:c2:92:e8:c9:1a:46:5c:c1:04:62:76:f2:
         86:a1:06:e8:2b:af:94:30:ec:06:10:44:48:2f:fc:11:33:4b:
         73:d5:51:b9:3a:f2:33:65:93:5b:1b:12:44:5a:cd:cc:6f:74:
         47:e7:4a:ce:dd:d3:73:ff:e0:f9:34:e3:45:4b:1b:a9:16:60:
         2c:46:df:24:40:56:7b:6d:67:a9:fa:b2:7d:36:67:a0:43:60:
         cb:ab:07:42:70:85:ad:cb:be:1c:2e:34:7d:a6:9d:3b:58:01:
         fa:5e:b0:2d:b8:d0:8f:1b:d4:ac:c1:60:2f:fa:12:3f:39:1a:
         74:68:b3:3a:a9:57:37:a7:fd:4c:5a:e3:4d:9e:ee:db:57:7c:
         ff:b4:ba:a1:24:cd:87:17:a0:18:51:22:e0:46:c3:3e:3f:c8:
         b3:d5:13:25:fc:97:24:30:1a:35:2a:28:f9:bb:c5:7b:b0:4f:
         26:93:6e:7f:b7:11:93:8a:e7:19:28:8a:8a:71:ce:52:43:d5:
         c7:d6:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:40:21 2026 by rpki-client