Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
File:                     5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft (raw, json)
Hash identifier:          llE5dc5z45Za3Xis1wpbaOHGFK8ZJgXSs/9P1RcxtLg=
Subject key identifier:   06:F5:01:23:7E:0A:DC:2A:A1:71:3A:4C:B6:11:5B:15:4B:52:E1:03
Authority key identifier: 5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8
Certificate issuer:       /CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
Certificate serial:       35C9EF70624DED9402C4ED14956EBFEB91C46EE4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 02:36:38 +0000
Manifest this update:     Thu 17 Sep 2026 02:31:38 +0000
Manifest next update:     Fri 18 Sep 2026 06:05:38 +0000
Files and hashes:         1: 5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl (hash: vHKzuQy5icyA6lpGFyi0c9I10V9TzVxIAod/1H1efOY=)
                          2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: 9PTwvaeRVFt7vMjuuHgRNVKrWXlVE2+CW1qlg4q1SF0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl
                          rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c9:ef:70:62:4d:ed:94:02:c4:ed:14:95:6e:bf:eb:91:c4:6e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CF0751D0900892735B67CFC77F2BAC17A3BB1D8
        Validity
            Not Before: Sep 17 02:31:38 2026 GMT
            Not After : Sep 18 06:05:38 2026 GMT
        Subject: CN=06F501237E0ADC2AA1713A4CB6115B154B52E103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:32:eb:32:06:95:bb:07:80:94:55:de:eb:
                    dd:19:32:9b:0b:bd:5e:4b:06:96:a3:97:e3:f9:77:
                    56:17:87:31:97:d4:64:c3:b3:fa:8a:14:e8:33:21:
                    bc:87:df:94:1d:64:95:48:18:e4:81:98:43:65:90:
                    f6:8b:de:6b:4d:3d:3e:bc:fa:80:88:d5:26:7e:f2:
                    6c:81:22:92:53:b5:20:6e:a4:a1:f9:8f:57:24:16:
                    07:0b:a6:8a:a6:5a:1b:46:c4:af:65:01:ca:11:21:
                    2f:c3:1c:7a:de:e4:09:a2:e2:38:b6:72:a2:ad:ad:
                    5b:b8:bd:1d:4c:6c:ca:fb:04:d4:a6:18:e2:c6:96:
                    63:37:04:68:17:dc:c2:e2:83:bb:35:d0:e6:da:14:
                    5e:30:76:ce:16:cb:14:67:a0:4b:9d:e6:17:f9:45:
                    cb:cc:0d:f9:45:de:56:5d:8d:09:56:0a:c4:c5:ad:
                    f3:38:f2:a3:bc:2e:b0:43:c8:64:b9:88:5f:9b:49:
                    c6:fd:b4:a4:fb:8e:72:a0:74:e3:43:7c:42:c7:df:
                    22:80:41:01:92:fb:17:7e:21:77:7e:5a:62:1a:9e:
                    42:5a:20:c0:85:e6:52:80:7c:b3:d8:d4:60:6c:85:
                    e2:51:9f:6b:3f:1a:0a:f2:97:95:2d:bb:4b:1d:36:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:01:23:7E:0A:DC:2A:A1:71:3A:4C:B6:11:5B:15:4B:52:E1:03
            X509v3 Authority Key Identifier:
                keyid:5C:F0:75:1D:09:00:89:27:35:B6:7C:FC:77:F2:BA:C1:7A:3B:B1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/5CF0751D0900892735B67CFC77F2BAC17A3BB1D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:24:63:27:09:7e:21:da:4f:b7:89:7a:8a:6d:39:b0:6d:
         a6:3a:42:b8:88:01:15:fe:fc:95:ff:9d:7d:46:1d:32:b1:26:
         68:e4:8f:0c:54:07:83:00:9d:89:62:cf:2c:40:57:f7:33:e8:
         f6:75:c2:76:23:47:02:cf:84:aa:37:ba:64:8d:02:0c:3c:55:
         9f:2a:a5:ff:58:60:34:53:da:88:6d:af:07:60:ff:11:2c:89:
         ef:b9:9b:66:a1:bb:90:40:61:01:47:08:78:e1:ed:fb:77:5e:
         11:a6:94:f3:e3:4f:40:4b:b1:c2:62:2c:04:b3:86:f0:6c:5b:
         70:bd:9a:d4:c3:1c:55:ed:68:ba:de:d9:31:f5:c3:19:22:a7:
         4a:18:a5:b0:be:89:b7:7c:05:a0:b5:1d:5d:aa:91:33:1b:d6:
         b9:3e:a3:b2:85:3d:43:7e:d9:a8:1c:3a:9d:44:3b:52:c5:10:
         fc:6d:ff:1f:c2:c5:da:c8:89:c7:99:3a:e9:c2:50:a6:10:90:
         7f:b7:b8:9c:f9:c4:aa:16:e2:8d:60:22:90:d0:33:0c:0e:98:
         3d:38:60:b0:40:df:4a:0b:2d:04:34:3e:fa:1f:85:ea:e0:06:
         89:dd:ae:4f:8d:0c:3f:05:0a:d6:8d:8e:8a:d8:98:a2:16:3a:
         7b:5d:9b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:46:33 2026 by rpki-client