Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.mft
File:                     C17465888212A3582B210ADEFFA05A3EB2D99CF8.mft (raw, json)
Hash identifier:          gsxsRBamf4edM5ezAH2+dwIH8E2j56TOvHnhH92MXDw=
Subject key identifier:   CE:4C:1A:B3:9B:E2:07:FD:A0:0D:14:1D:C5:A3:96:34:C6:9C:8D:7D
Authority key identifier: C1:74:65:88:82:12:A3:58:2B:21:0A:DE:FF:A0:5A:3E:B2:D9:9C:F8
Certificate issuer:       /CN=C17465888212A3582B210ADEFFA05A3EB2D99CF8
Certificate serial:       295094E72C7177EFED2858E73B08061D84C8D400
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.mft
Manifest number:          B8
Signing time:             Thu 17 Sep 2026 04:08:32 +0000
Manifest this update:     Thu 17 Sep 2026 04:03:32 +0000
Manifest next update:     Fri 18 Sep 2026 04:26:32 +0000
Files and hashes:         1: C17465888212A3582B210ADEFFA05A3EB2D99CF8.crl (hash: m5aYHAsiNlKAc+K1hrMRb1sKII8X4Q5m5Tntk2Vith8=)
                          2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: lzFm6Q75CZcB/+vlMIfl+v5WLGkE1UU/8+RPcBOnazs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.crl
                          rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 04:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:50:94:e7:2c:71:77:ef:ed:28:58:e7:3b:08:06:1d:84:c8:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C17465888212A3582B210ADEFFA05A3EB2D99CF8
        Validity
            Not Before: Sep 17 04:03:32 2026 GMT
            Not After : Sep 18 04:26:32 2026 GMT
        Subject: CN=CE4C1AB39BE207FDA00D141DC5A39634C69C8D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3a:88:42:e1:ae:e3:fc:e4:12:c6:b3:ce:dc:
                    19:bb:af:ab:c4:74:a7:90:5b:cc:c2:9d:e8:26:0a:
                    41:ac:9d:e7:13:d0:26:21:5c:41:93:9f:5d:14:09:
                    a4:88:60:68:83:60:ec:a4:ef:2a:76:95:2a:a8:4f:
                    a3:c0:ea:c5:78:a4:3a:28:e0:03:b9:b7:18:f6:63:
                    a8:63:5b:b1:6f:88:69:09:28:e3:32:b8:64:87:b0:
                    a4:00:e8:19:76:63:03:6f:c9:86:14:aa:71:ca:df:
                    8b:36:60:ce:09:8b:2a:a3:7c:37:31:b3:79:00:76:
                    12:4b:a0:f4:79:60:c5:b6:52:a4:1f:e4:eb:f2:ae:
                    20:03:fb:5f:fa:5e:bb:31:cd:c6:66:d7:ab:1b:ae:
                    f8:61:39:2c:c6:9d:87:27:aa:22:8c:2e:14:eb:70:
                    5d:24:c0:3e:88:74:cf:b8:52:ff:6b:37:0f:e7:99:
                    15:5c:da:fd:28:b4:c8:c6:24:65:54:f6:18:dd:45:
                    3e:8a:6c:86:14:35:ab:a4:cb:fb:fa:88:32:87:38:
                    6a:7a:1b:9a:42:8b:fa:53:ea:57:b1:32:3c:ed:7a:
                    b6:27:74:78:c1:79:30:26:33:41:6f:78:a5:16:6c:
                    80:fc:e3:c1:d0:66:85:8c:af:54:2e:84:f3:ef:1c:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4C:1A:B3:9B:E2:07:FD:A0:0D:14:1D:C5:A3:96:34:C6:9C:8D:7D
            X509v3 Authority Key Identifier:
                keyid:C1:74:65:88:82:12:A3:58:2B:21:0A:DE:FF:A0:5A:3E:B2:D9:9C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:0c:6b:8e:dd:fa:e3:2b:81:37:6a:08:cf:d5:9d:43:12:
         87:9f:5d:da:09:66:f3:1a:8a:0a:4a:2b:37:ad:53:b8:06:39:
         11:75:f2:0b:07:01:6f:7f:ff:5e:ba:d1:31:ad:9d:2c:3a:6b:
         10:c9:61:54:b7:4b:b2:ca:98:77:f4:2c:dd:78:53:b2:17:90:
         a3:9c:83:2c:cf:d2:06:e6:9f:42:0a:20:7f:d3:35:1f:88:91:
         25:56:88:5d:22:6c:10:71:75:88:b2:fa:02:7d:4a:c5:25:e6:
         39:38:f3:95:69:2c:0b:8d:f3:90:ef:a4:e8:c2:70:ff:2a:a5:
         64:0f:81:b2:4d:eb:49:70:06:c6:db:85:06:bd:42:66:9f:42:
         ed:ab:03:d3:ad:83:14:51:f6:10:62:5a:54:5b:1b:39:7f:cc:
         8a:cd:b7:b8:b8:4e:f0:ca:cf:38:a5:36:54:c5:99:df:34:52:
         2b:ed:52:dd:03:25:0c:d0:36:7c:21:ed:56:20:ac:f6:0c:45:
         4e:b2:bf:b9:84:ed:eb:02:50:50:fa:d6:a7:65:85:45:7b:54:
         f7:2c:b1:60:7b:f9:1e:4d:b9:14:d2:68:c1:e6:ae:f2:34:37:
         dd:6a:76:85:d6:73:ee:d0:79:ca:76:7c:ed:dd:2d:ad:1b:70:
         ee:b5:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:56:47 2026 by rpki-client