Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
File:                     1029DD535EA34FFB57B387F3086D6C55F6685227.mft (raw, json)
Hash identifier:          F84zDmE8im1tooC7vmFcFQ9TazK8yNdEPKGIkHd6lfU=
Subject key identifier:   77:A7:41:CD:C0:54:D6:3E:1E:56:AF:6A:8E:A8:07:FB:5F:79:5A:97
Authority key identifier: 10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27
Certificate issuer:       /CN=1029DD535EA34FFB57B387F3086D6C55F6685227
Certificate serial:       494A25D0770C3FA0AF609D496B7963B73FB34FCF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
Manifest number:          B9
Signing time:             Wed 16 Sep 2026 15:43:29 +0000
Manifest this update:     Wed 16 Sep 2026 15:38:29 +0000
Manifest next update:     Thu 17 Sep 2026 17:23:29 +0000
Files and hashes:         1: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: QFaIaeqQHBfggokFY9Zd55eDaonsJzUZS5+52YBP+KY=)
                          2: 1029DD535EA34FFB57B387F3086D6C55F6685227.crl (hash: WNjXorasRwsvXz5DWvgjYEKuLFgxAk2No0AQOP/KDWQ=)
                          3: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: jjOCUf6cliEtxrLXbZn2dk07IB2wq2ND31yEFCqIvbc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl
                          rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4a:25:d0:77:0c:3f:a0:af:60:9d:49:6b:79:63:b7:3f:b3:4f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1029DD535EA34FFB57B387F3086D6C55F6685227
        Validity
            Not Before: Sep 16 15:38:29 2026 GMT
            Not After : Sep 17 17:23:29 2026 GMT
        Subject: CN=77A741CDC054D63E1E56AF6A8EA807FB5F795A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:d1:a2:4f:46:20:e2:71:c5:65:05:55:9d:
                    cd:37:3f:4b:69:e5:7c:bc:0b:4e:3f:a2:18:a2:6a:
                    76:31:b2:af:40:dc:10:56:ac:81:75:50:ba:77:2c:
                    68:22:f8:c2:18:d9:7b:90:e8:35:be:a8:c5:ad:c5:
                    4c:47:6d:15:be:8e:d6:87:d4:68:8d:7c:96:ff:25:
                    a3:86:aa:ee:82:cb:31:a6:1f:46:93:40:f0:7f:15:
                    62:04:47:71:34:96:15:8b:f9:b3:ad:fa:55:ea:5b:
                    37:06:e5:30:5c:cd:b9:f0:fc:82:e9:e0:bf:f2:7f:
                    f8:08:91:96:77:d9:c4:49:68:59:a6:97:d0:17:82:
                    c3:38:df:7a:9e:eb:6c:0e:dd:ef:08:5d:8f:10:1d:
                    14:fa:e0:a8:bc:71:b5:9e:3e:dc:e8:13:04:7a:7a:
                    a4:76:67:f1:d7:a8:bf:23:ab:e3:db:e4:01:0a:df:
                    44:96:fc:12:01:ab:77:63:d7:63:3b:17:92:71:76:
                    49:d1:e1:32:4a:b7:17:a6:3c:8f:82:7e:d2:d3:5f:
                    32:44:3a:3a:6b:c2:9b:69:29:12:3d:f5:5a:25:b1:
                    48:69:c6:eb:39:3c:fc:59:e5:ed:fe:fd:7b:da:bb:
                    fc:b0:20:85:de:9a:54:b1:df:57:51:3b:9f:ca:e9:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A7:41:CD:C0:54:D6:3E:1E:56:AF:6A:8E:A8:07:FB:5F:79:5A:97
            X509v3 Authority Key Identifier:
                keyid:10:29:DD:53:5E:A3:4F:FB:57:B3:87:F3:08:6D:6C:55:F6:68:52:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1029DD535EA34FFB57B387F3086D6C55F6685227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/1029DD535EA34FFB57B387F3086D6C55F6685227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:72:6f:ee:be:ca:44:34:47:a0:ce:1e:28:08:a7:42:8b:
         9c:e6:d3:32:59:c0:6e:a0:e6:a6:c5:da:43:4a:92:21:ca:cb:
         61:66:f5:80:54:95:6e:1a:d9:c5:77:89:46:5f:2e:35:23:68:
         e4:95:27:f0:d9:4e:b9:96:d6:a4:5e:a0:17:37:29:f9:58:6a:
         47:94:97:52:ad:87:8c:18:a7:5e:a2:51:c5:4a:07:9b:f3:f6:
         dc:db:18:dc:ba:b7:58:28:87:a7:e8:ac:dc:a4:d0:ce:b3:a5:
         77:69:35:f6:9f:28:d8:c7:2a:c2:0d:85:0c:96:ed:5f:e5:f0:
         34:b6:af:3d:ef:45:74:1e:19:16:43:7a:66:79:b9:4a:76:a8:
         0e:2c:07:4a:c0:c6:01:3b:10:d7:3c:7f:db:8f:e9:9a:c7:f7:
         90:4f:59:fa:73:35:0e:b6:c1:66:83:92:82:67:6c:24:18:a4:
         13:1a:8f:f2:c0:cb:0d:67:58:27:72:13:35:99:d3:21:97:18:
         3d:d2:2f:5b:de:1b:d4:1d:cf:8e:7c:25:21:84:90:a0:f1:34:
         28:bd:db:5a:8d:78:6d:22:98:f5:77:54:3d:d1:ae:4c:f0:4b:
         c8:fd:f9:d5:01:05:9d:93:ac:4c:a3:af:95:0f:63:0f:d2:e5:
         ab:a9:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 06:42:14 2026 by rpki-client