Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
File:                     70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json)
Hash identifier:          7EZrfJ3Z9XhU+qre1LmuWyZgAkuM0T3Ffh4tFxexEx4=
Subject key identifier:   40:09:89:A1:F4:F2:98:12:48:D4:5B:B6:6C:C7:48:43:54:37:1E:A1
Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E
Certificate issuer:       /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E
Certificate serial:       6A38337EB23B9120236A12AACE0AE63F5AF74F00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 10:01:01 +0000
Manifest this update:     Thu 17 Sep 2026 09:56:01 +0000
Manifest next update:     Fri 18 Sep 2026 13:08:01 +0000
Files and hashes:         1: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=)
                          2: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: wSvyYvaAQsPyTFsIvU8GDz6x5W+OidqrZw812uk/p20=)
                          3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl
                          rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 07:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:38:33:7e:b2:3b:91:20:23:6a:12:aa:ce:0a:e6:3f:5a:f7:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E
        Validity
            Not Before: Sep 17 09:56:01 2026 GMT
            Not After : Sep 18 13:08:01 2026 GMT
        Subject: CN=400989A1F4F2981248D45BB66CC7484354371EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:18:f9:7d:fc:c7:23:01:5d:f8:b0:8f:7a:
                    11:67:19:4e:63:b2:52:9b:31:01:6a:79:18:6a:61:
                    9d:d4:7f:90:a7:3f:6f:77:27:c3:88:70:8d:12:99:
                    ed:bb:08:d1:8d:24:d1:aa:80:de:2b:d9:4d:2f:d6:
                    52:ce:2f:62:a3:f5:32:a1:93:c4:3d:17:8a:66:11:
                    44:87:7f:25:6b:b9:c1:f6:ba:8f:de:b3:63:c7:6b:
                    ce:60:f1:3c:49:61:c7:ea:4e:24:00:4d:e6:f4:86:
                    83:bd:e8:f7:52:01:c5:04:5a:6a:7e:08:7b:4f:ad:
                    1b:e4:d6:4f:52:e4:de:ec:b8:8c:b7:f5:d6:db:b9:
                    d4:90:c0:fe:37:11:82:f8:fe:bf:59:93:19:8c:1b:
                    5a:8c:29:2b:97:1b:1d:f1:a7:e3:18:9b:3c:85:63:
                    b7:90:47:ad:5f:74:14:45:ad:f3:fa:32:5d:fb:74:
                    45:5e:53:06:8e:ac:e6:6f:d3:7e:ff:4a:c8:2c:29:
                    90:65:73:62:6f:b4:94:b2:30:cc:1e:0c:22:32:03:
                    a7:56:67:58:e7:b3:ca:40:88:e5:67:2b:19:0b:15:
                    68:9b:e5:74:85:29:9b:fa:7d:83:93:b0:3d:75:21:
                    a3:70:8f:17:f1:ec:59:da:8a:af:82:fe:32:ef:85:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:09:89:A1:F4:F2:98:12:48:D4:5B:B6:6C:C7:48:43:54:37:1E:A1
            X509v3 Authority Key Identifier:
                keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d1:91:46:1e:10:b9:75:e2:a1:e2:55:af:41:98:bb:d4:e8:
         05:45:17:39:d9:26:8b:43:c2:b1:55:f7:11:33:24:3b:10:e3:
         cb:a7:d6:7c:50:32:71:e2:0e:c6:d1:da:c8:70:b3:2f:78:70:
         0a:29:7d:62:55:8d:23:8b:9b:08:eb:6a:24:01:0d:a4:2d:5e:
         f6:8c:11:48:31:8f:ca:81:7d:95:2e:7e:1c:36:98:44:b3:90:
         24:9e:c9:6a:ce:5a:00:a2:c2:0e:5a:e5:09:55:f7:0e:37:a8:
         73:82:08:d7:0d:ba:5f:ad:b2:dd:e3:5a:50:09:7b:ce:c7:40:
         ce:3e:5a:15:92:fd:57:96:77:1f:bc:17:5c:25:be:9a:44:54:
         32:88:3f:57:df:e7:b2:50:b1:23:8d:74:2c:18:e4:22:ab:51:
         69:d7:c5:39:86:24:6f:50:5a:44:96:d0:13:7d:fa:ad:38:0d:
         79:53:7a:6e:b5:b7:d3:8c:a2:ca:97:12:51:ba:3a:af:c3:6a:
         46:4d:ae:e4:95:0b:91:b5:46:b6:05:fc:69:98:6a:7e:cf:e8:
         9e:28:ed:9e:f1:7f:e3:c4:a6:66:6f:94:39:1d:6b:7f:55:c4:
         3b:6a:95:9e:f9:00:f0:d5:8f:4f:b6:c1:e8:12:2e:61:3e:ba:
         46:2d:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:21:30 2026 by rpki-client