Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
File:                     27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft (raw, json)
Hash identifier:          NBzWzJOmamMSwTf6l9iO/4D46XrRizrFdO5Vx1j/Yms=
Subject key identifier:   34:97:D4:AB:22:6D:19:A4:CF:39:5F:F9:E0:5F:16:97:30:23:6F:A3
Authority key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
Certificate issuer:       /CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Certificate serial:       7AD896F1364916352B76CC7617565970295EDA05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
Manifest number:          B7
Signing time:             Thu 17 Sep 2026 04:28:58 +0000
Manifest this update:     Thu 17 Sep 2026 04:23:58 +0000
Manifest next update:     Fri 18 Sep 2026 06:38:58 +0000
Files and hashes:         1: 27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl (hash: pp/VJmGRYGK/YjVxh9DJV0XCrXl+MdvCgkv9jlq5mR4=)
                          2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: VH+O4TH4eDJSI25JypJZ7rsLYdNS/p0NBbNxGChAQqQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
                          rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d8:96:f1:36:49:16:35:2b:76:cc:76:17:56:59:70:29:5e:da:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
        Validity
            Not Before: Sep 17 04:23:58 2026 GMT
            Not After : Sep 18 06:38:58 2026 GMT
        Subject: CN=3497D4AB226D19A4CF395FF9E05F169730236FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:0b:0d:f4:55:d9:9a:68:04:8a:1d:12:7f:
                    65:2a:03:23:56:1d:be:06:23:b2:1e:78:c8:d0:7f:
                    ad:14:93:1e:d1:07:0d:26:54:9d:da:64:c6:80:f1:
                    cd:22:d7:73:13:49:d5:ae:3b:c9:f0:93:06:5f:8e:
                    c1:0d:e8:fc:e8:6d:52:d6:8e:43:6d:d6:43:a6:4f:
                    bb:cf:ff:24:13:4b:1e:3d:23:d1:c5:51:b5:bd:5a:
                    00:ed:f2:06:a9:04:22:87:7c:e5:c6:87:6e:d2:e4:
                    d1:9d:c2:3e:d9:60:64:f1:55:82:83:4c:3b:c5:48:
                    35:83:d5:ce:14:4b:70:b7:3a:68:04:09:3f:b4:17:
                    11:75:7d:69:8a:da:ed:a6:17:72:a4:08:fd:2b:44:
                    62:21:55:b3:ef:fe:35:4b:19:92:20:64:0c:e6:10:
                    27:26:3a:be:ff:0c:0a:e0:0c:0f:5c:58:f8:a5:c9:
                    bd:12:f4:c4:93:35:6a:e4:b7:0f:c0:89:4a:78:3b:
                    c2:12:44:63:a7:9a:9c:a3:78:e4:dc:5d:5a:1a:53:
                    cb:24:52:25:45:76:0b:e3:7d:b5:9b:1c:bb:f1:8a:
                    8d:eb:29:f9:ca:0c:e9:27:f2:d2:c8:08:53:69:d2:
                    2d:1f:51:06:b2:74:3f:d3:94:9c:10:75:ed:79:96:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:97:D4:AB:22:6D:19:A4:CF:39:5F:F9:E0:5F:16:97:30:23:6F:A3
            X509v3 Authority Key Identifier:
                keyid:27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:99:1e:5f:9c:11:17:d0:2f:dc:2f:c0:80:04:69:f7:aa:
         ed:a4:9c:56:fd:39:ac:dd:97:3a:db:57:b6:1f:b9:01:2e:a3:
         d4:1a:dd:4c:3d:84:5b:2d:bd:78:23:bc:57:13:f2:62:65:af:
         27:46:85:8e:27:23:8e:46:37:de:11:23:8c:7c:85:cf:81:03:
         b0:bc:f5:5b:1b:bc:f7:b1:4a:e2:2e:72:d9:97:11:3f:67:80:
         b7:24:a8:f7:07:be:9c:87:4e:0b:af:7c:1c:24:62:05:07:39:
         c2:aa:ac:10:a7:31:3e:52:02:8a:04:ac:29:90:89:05:ab:69:
         ab:73:37:94:77:ab:ad:a2:6f:79:09:bb:dd:12:3c:e4:d2:70:
         2e:7e:93:79:de:14:19:3e:be:99:d2:ab:19:0a:ff:ae:33:e3:
         b3:78:3c:47:35:c2:d2:69:3a:39:8b:55:b6:d1:d0:fa:61:fe:
         ea:7a:3b:3b:96:f4:cd:93:0a:91:f1:f5:93:ec:3e:30:95:8b:
         4f:44:ec:59:2a:81:be:3e:a9:6e:d4:34:f9:12:61:ce:00:28:
         ef:e6:97:65:6a:5e:27:8b:80:a0:46:18:da:5a:9f:91:b1:08:
         d5:48:41:8e:f6:32:55:42:a0:bf:8f:a1:f8:44:7f:6a:96:4d:
         b9:12:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:22:47 2026 by rpki-client