Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
File:                     AF6B7BCDACF90BA83205EA298327379BAB489418.mft (raw, json)
Hash identifier:          lG7qRxBmQILkCz934U8H146toknBhLlVLB1bng0vrlA=
Subject key identifier:   59:75:8D:E6:43:62:3F:9E:B8:B6:4B:67:F7:6C:6A:AB:4D:1B:A0:D0
Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
Certificate issuer:       /CN=AF6B7BCDACF90BA83205EA298327379BAB489418
Certificate serial:       0BA541797860101C1094500A4D3727F1048B7003
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
Manifest number:          B0
Signing time:             Thu 10 Sep 2026 21:48:41 +0000
Manifest this update:     Thu 10 Sep 2026 21:43:41 +0000
Manifest next update:     Fri 11 Sep 2026 22:16:41 +0000
Files and hashes:         1: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: qCc2JIEbiwtQdnz7uQXbC2p3w6YwxAaU8dCI6McQWsM=)
                          2: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: sxFoSO5566DvevtkqciXR0xAuQamF9AudcC/0/+/BMA=)
                          3: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: xu1cN52iKwYrST7ZHiU1OG9/BN4NR23in1R/aZa/9/Y=)
                          4: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: EFzx2gdrAoK4dLqP6OWhoqarBZwTNPP8hlTF8ndHsA8=)
                          5: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: Lg4qdsj1osZUt2Wgs1cQh8M+Cq27I8kA05MBhaZ1e2E=)
                          6: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: g0pqFy9DWm0Sz42lbSirSeYkq3Vdx407OgsTjSScBgc=)
                          7: AF6B7BCDACF90BA83205EA298327379BAB489418.crl (hash: ZAFsFPRVeCJy0MCVyj2MG5MmdWoYhauBpWP3euYBHd4=)
                          8: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: oE4Q0cuL75fyXaIHf3JDUpfM+2/K4+wsnH/TeLPodS0=)
                          9: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: y5wzCpmCgccfr9+aDXB1mUmJvFdLQ1aEGTJds2iwsoo=)
                          10: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: BxCzNrTcp0dp4A7C91gDRudiTOOmKrDBcvkaJa1pltE=)
                          11: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: m+sPMgDP6AqfDbfIIzCUcgfgt53+FkXMgNrd1zzKT1I=)
                          12: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: +CIQNtkENDgMFXO899OFs+eQgqEbZwGsuSxbjsO2CJU=)
                          13: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: K8j/ZLU+ci7JWbQ44lPBg2aflFRtCWtRODUltXPnDVo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl
                          rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 11:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a5:41:79:78:60:10:1c:10:94:50:0a:4d:37:27:f1:04:8b:70:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418
        Validity
            Not Before: Sep 10 21:43:41 2026 GMT
            Not After : Sep 11 22:16:41 2026 GMT
        Subject: CN=59758DE643623F9EB8B64B67F76C6AAB4D1BA0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:bb:cd:28:27:8f:9a:25:ca:19:db:27:12:
                    d0:71:d3:09:a9:c4:69:a9:1b:a7:a2:71:39:85:6f:
                    be:cb:3a:d8:2d:3f:b0:e2:24:3b:f7:cf:d4:c6:4b:
                    cf:58:3b:4e:f0:b8:0e:97:e1:c3:d3:54:8f:e9:7b:
                    69:5f:78:98:24:4a:9c:09:0e:0c:40:5d:02:9b:f9:
                    49:a2:87:47:41:38:81:c1:9a:38:10:b9:9b:77:f0:
                    7f:0e:91:b5:d0:48:1e:b5:5a:31:e4:33:52:59:8c:
                    7e:47:60:6f:72:d9:f3:27:f8:63:74:c4:68:67:fb:
                    24:b7:27:0e:8c:26:54:6c:a9:e0:b3:f9:71:ed:e8:
                    06:90:0c:e8:1f:2c:bb:ce:b7:01:e9:3c:2e:4f:99:
                    c0:e4:63:6a:ee:6d:6d:f8:92:77:09:32:a1:0d:80:
                    86:33:51:16:fd:f2:39:75:22:30:57:63:29:44:89:
                    b9:9e:1c:df:1b:26:6f:9f:d5:77:6a:9a:6f:6f:bb:
                    b7:da:b1:fb:5e:a9:79:be:bb:75:0e:ba:d9:1c:69:
                    9b:33:3c:3c:53:da:59:89:24:85:8c:dc:ea:0c:31:
                    8a:d7:6a:4f:9d:35:51:1c:e4:c6:dc:31:6d:21:85:
                    fa:4a:e1:bc:61:5e:e5:64:4c:d4:4d:f8:3d:97:29:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:75:8D:E6:43:62:3F:9E:B8:B6:4B:67:F7:6C:6A:AB:4D:1B:A0:D0
            X509v3 Authority Key Identifier:
                keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:54:4c:6a:1e:79:f0:92:94:25:a5:46:28:63:ba:82:d0:
         a9:2f:2a:b5:38:ed:72:d3:47:d0:d9:74:cc:53:d2:14:91:8c:
         b1:11:7a:6b:ca:c9:62:84:bd:b4:c3:11:0c:c1:cb:cb:9b:a0:
         f0:69:6f:dc:7a:37:f4:b2:3b:e1:24:31:23:d8:2e:16:64:f1:
         8b:bd:46:81:bf:ae:94:d1:fd:e6:87:b4:4f:e8:7d:ca:e6:62:
         76:c2:88:dc:8a:b7:32:d6:75:4b:5a:be:03:fd:6a:e9:68:e4:
         3f:34:8b:92:85:48:ae:0b:ac:c7:f3:a5:2c:bc:bb:fe:da:69:
         e7:f9:01:0d:e0:f5:2a:0b:b3:e5:05:f2:f2:8a:ec:34:26:12:
         bf:2b:c4:a5:09:19:90:2b:0f:4a:d8:68:89:aa:40:ee:08:8d:
         06:8e:91:74:4f:97:09:9b:cd:45:01:91:0e:a1:5d:de:9f:3c:
         51:06:07:df:26:b6:22:fe:be:3e:7e:96:60:29:51:7d:a3:49:
         a5:86:06:ab:e3:e1:ac:1a:23:46:66:ad:58:28:c3:7b:6a:b1:
         ab:e0:58:ed:68:21:89:57:d7:cd:92:ea:63:b9:b9:38:77:b3:
         81:37:5f:df:d6:33:4f:d6:f4:52:97:08:02:4f:31:e5:5b:6e:
         e7:aa:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:11 2026 by rpki-client