Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
File:                     D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json)
Hash identifier:          A0AAxh1DX1QsQ8AKnIT240c1+ANxU9OxB4cdE4EJsaQ=
Subject key identifier:   5A:14:47:47:0C:56:0D:D9:0B:46:E7:51:5D:DB:B5:1E:C6:4A:3D:67
Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06
Certificate issuer:       /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06
Certificate serial:       5317C1FC9EC491B4CF4B5BFA76CDE4936925BFC8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
Manifest number:          9A
Signing time:             Tue 25 Aug 2026 22:04:16 +0000
Manifest this update:     Tue 25 Aug 2026 21:59:16 +0000
Manifest next update:     Thu 27 Aug 2026 00:58:16 +0000
Files and hashes:         1: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: P8e816a+qPZzb4c/dClAsfKLyOFg5LOw2v7XW9WUYU8=)
                          2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl
                          rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 00:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:17:c1:fc:9e:c4:91:b4:cf:4b:5b:fa:76:cd:e4:93:69:25:bf:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06
        Validity
            Not Before: Aug 25 21:59:16 2026 GMT
            Not After : Aug 27 00:58:16 2026 GMT
        Subject: CN=5A1447470C560DD90B46E7515DDBB51EC64A3D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:64:be:95:c4:fd:55:92:9e:e8:b6:3b:37:00:
                    c9:b8:ee:c1:7d:e5:81:61:86:34:c3:99:80:50:cd:
                    51:47:fa:53:ca:18:1b:b3:23:f1:8b:8e:17:3c:e3:
                    c6:6c:fe:8c:77:4f:6b:25:05:94:45:82:fe:b9:0d:
                    df:e7:b0:04:ae:5c:83:5a:8e:0a:ab:68:8a:d5:25:
                    1f:4f:46:df:77:27:57:d4:3c:26:b3:a8:45:99:2f:
                    ab:83:28:9d:06:f2:69:42:02:ff:41:4f:28:89:85:
                    b3:15:d4:0d:20:c9:e5:46:1a:48:9e:46:99:96:a5:
                    5b:ed:bd:7f:13:a5:ce:0d:14:c6:a2:27:06:9a:7e:
                    c2:e1:6b:59:da:d4:f8:ff:12:70:7f:78:ba:2b:39:
                    a7:4e:55:4e:4b:8c:f5:4c:d9:92:c3:56:91:60:25:
                    ce:16:8c:10:bd:02:a8:27:6a:bf:7d:6d:28:08:88:
                    eb:70:2d:59:c4:79:08:b5:05:14:00:8e:45:bb:bf:
                    4a:b9:0f:c6:fd:be:53:52:f4:48:42:ce:f6:59:ec:
                    d8:9e:16:38:af:23:8b:53:9e:6c:a2:f7:15:7b:64:
                    d6:22:1a:9a:50:b8:9a:a7:80:c6:63:4c:16:a7:c8:
                    2d:07:74:a4:de:ee:6b:b5:94:eb:38:c6:1a:61:49:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:14:47:47:0C:56:0D:D9:0B:46:E7:51:5D:DB:B5:1E:C6:4A:3D:67
            X509v3 Authority Key Identifier:
                keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f2:a9:0b:a5:2d:3e:cf:c7:98:65:68:74:37:44:32:cc:45:
         27:0d:58:5a:a0:9a:a8:71:91:3f:d5:ba:3a:b0:58:d0:ee:e3:
         c4:20:f8:01:75:36:6d:ef:54:83:74:7b:4a:df:68:06:94:b0:
         67:70:b3:98:9b:fc:45:70:b4:03:be:06:55:31:59:c9:ed:a9:
         8b:7f:ab:a9:06:33:a8:8f:97:b1:6e:47:1e:69:c1:4d:b6:f1:
         ae:f1:de:fe:df:20:1f:a0:0d:4e:7e:82:a1:2f:26:bb:0a:b2:
         a9:24:99:6b:55:46:99:68:07:ed:fc:c3:e9:4e:27:6d:a8:c5:
         ed:7a:de:a6:ac:7f:ff:85:9e:7a:33:a7:7a:47:b9:e1:07:a1:
         c0:9e:f1:18:2b:96:e0:26:32:19:05:5a:78:d1:77:cc:ba:c3:
         01:b9:66:57:39:40:ee:80:a3:63:6e:da:ac:d7:10:0b:b1:17:
         d2:35:3c:a7:50:c4:31:d9:87:05:3a:77:cf:04:8a:1f:64:11:
         b3:6b:bf:13:75:76:e8:a5:12:a8:11:89:3a:1d:2e:86:07:0d:
         99:6d:5c:17:c4:6f:03:fb:9b:91:e4:a3:7d:0a:4e:b6:54:09:
         6c:f4:f8:3e:3e:31:15:3b:56:2a:c4:a4:0a:22:fc:0d:be:73:
         eb:d4:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:10:00 2026 by rpki-client