Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
File:                     9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft (raw, json)
Hash identifier:          ee81ns/9IVYrJOVeOoz8F8tDvM17pMTl0nLJ1V0Nq7g=
Subject key identifier:   69:FC:8C:92:EA:4B:B8:A2:72:A2:F7:30:73:76:F3:B4:52:22:C9:4E
Authority key identifier: 9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64
Certificate issuer:       /CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
Certificate serial:       1FF98D078963EAA835545549CC72F9490D717B08
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
Manifest number:          3F
Signing time:             Thu 18 Jun 2026 01:08:16 +0000
Manifest this update:     Thu 18 Jun 2026 01:03:16 +0000
Manifest next update:     Fri 19 Jun 2026 04:27:16 +0000
Files and hashes:         1: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: U0YPo5BGNsV6sfhS2oiy7oPSHdSgcRKevuF2NKX91Xo=)
                          2: 9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl (hash: Rs7JnyzEhBWXXlFI9N/qYAh+zYR4XxWKyZU2q9NtvNM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl
                          rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 04:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f9:8d:07:89:63:ea:a8:35:54:55:49:cc:72:f9:49:0d:71:7b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFB791C09C2A2BF53CF54174A8CA1AD677B3564
        Validity
            Not Before: Jun 18 01:03:16 2026 GMT
            Not After : Jun 19 04:27:16 2026 GMT
        Subject: CN=69FC8C92EA4BB8A272A2F7307376F3B45222C94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:e2:91:36:13:76:72:8c:5b:95:7e:e8:d4:
                    e5:e4:09:ec:7c:39:d9:a5:10:7a:74:54:62:d9:32:
                    71:0f:c1:9f:3a:e7:13:92:1e:76:17:bd:15:76:e0:
                    0c:f0:07:20:43:52:b8:30:2f:25:33:21:b0:b0:2d:
                    f9:42:ab:51:86:1d:04:96:5b:fe:a9:54:0e:af:ea:
                    5e:40:50:1e:86:cb:32:b1:8f:83:97:1f:63:38:33:
                    f7:db:c1:be:d5:58:12:65:f7:ef:8f:ef:22:90:44:
                    6e:cb:9b:0c:40:45:d1:e4:89:44:a1:43:d7:50:d2:
                    46:c3:76:e2:88:9b:95:1c:05:51:fa:f2:d6:c3:77:
                    41:d5:28:e1:af:b0:49:bd:16:50:d0:14:fb:7a:cc:
                    91:8d:68:90:29:e6:9b:41:d4:00:1b:2b:64:5b:0f:
                    d5:c3:5b:a1:ad:a3:02:ee:d2:94:1e:05:a6:6d:52:
                    46:46:f1:57:8d:8a:df:50:06:3f:8a:18:78:0f:2b:
                    f8:8f:0e:13:fb:a8:6c:65:26:b8:86:f5:e4:32:4b:
                    b2:16:32:77:31:e7:de:af:19:98:40:90:4d:56:00:
                    fd:64:09:d4:08:02:21:a1:b5:43:93:48:e3:53:40:
                    e1:10:52:e7:2d:84:fe:ba:1e:1c:37:8b:bf:17:4f:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FC:8C:92:EA:4B:B8:A2:72:A2:F7:30:73:76:F3:B4:52:22:C9:4E
            X509v3 Authority Key Identifier:
                keyid:9F:FB:79:1C:09:C2:A2:BF:53:CF:54:17:4A:8C:A1:AD:67:7B:35:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/9FFB791C09C2A2BF53CF54174A8CA1AD677B3564.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:cb:94:e8:eb:8f:10:d4:ce:c6:cd:6a:9e:ba:6f:51:9d:
         9b:14:a2:da:ed:ea:0a:de:59:53:f2:44:ef:80:8b:06:45:93:
         83:33:aa:f5:1c:b4:9f:22:d1:56:70:de:e2:dd:53:d8:da:4d:
         2d:25:f9:0b:29:ed:4a:ab:37:ff:55:03:ae:d0:1a:dc:47:a5:
         15:f3:a7:7f:65:44:9c:6a:16:92:7e:b2:b0:88:e1:6d:d3:a6:
         79:f2:ca:42:16:4d:17:bd:87:99:c0:86:99:5c:18:ca:88:c9:
         88:4d:47:fa:d3:c7:42:e5:7f:77:a2:f9:41:ae:19:a2:0a:7f:
         41:9b:8f:bc:37:ca:6e:ad:13:91:54:ca:e2:76:83:73:68:88:
         4a:13:ec:88:dc:e9:6c:16:48:ff:24:86:cf:19:6b:25:cc:7f:
         64:bc:54:ea:2a:de:bc:15:0f:aa:99:a6:20:e3:ab:2c:36:ac:
         86:82:a1:74:52:4c:0a:2e:85:02:1a:1c:fe:33:12:f5:0b:51:
         4b:75:40:ab:6b:ca:ba:75:3d:35:a5:ee:27:bd:04:3b:06:32:
         aa:a4:c0:ae:87:03:91:3a:1a:8d:80:9a:9f:1b:81:9b:b2:6a:
         05:7e:ac:40:59:f5:35:82:2d:61:90:76:d2:01:c0:c5:f6:c8:
         24:2f:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:51 2026 by rpki-client