Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.mft
File:                     376E2B876CE3746057689762F04423554EBFEEB2.mft (raw, json)
Hash identifier:          Jvvghtac6/kiX/x07o2rQkA2MTL2RiAbHgLnf91rjF8=
Subject key identifier:   84:9F:4B:C7:B3:2A:A0:9D:60:E7:A4:C3:91:B4:6A:C6:F9:FD:25:53
Authority key identifier: 37:6E:2B:87:6C:E3:74:60:57:68:97:62:F0:44:23:55:4E:BF:EE:B2
Certificate issuer:       /CN=376E2B876CE3746057689762F04423554EBFEEB2
Certificate serial:       3F5BBB3136BA631451B632DCC05867FC033EE490
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/376E2B876CE3746057689762F04423554EBFEEB2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.mft
Manifest number:          B8
Signing time:             Thu 17 Sep 2026 01:55:58 +0000
Manifest this update:     Thu 17 Sep 2026 01:50:58 +0000
Manifest next update:     Fri 18 Sep 2026 03:08:58 +0000
Files and hashes:         1: 376E2B876CE3746057689762F04423554EBFEEB2.crl (hash: N/DFvIO4IZKBmg5yCSTjkv+ZUFszBB26KV9s6Bu3bXA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.crl
                          rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/376E2B876CE3746057689762F04423554EBFEEB2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 03:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5b:bb:31:36:ba:63:14:51:b6:32:dc:c0:58:67:fc:03:3e:e4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=376E2B876CE3746057689762F04423554EBFEEB2
        Validity
            Not Before: Sep 17 01:50:58 2026 GMT
            Not After : Sep 18 03:08:58 2026 GMT
        Subject: CN=849F4BC7B32AA09D60E7A4C391B46AC6F9FD2553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:e5:08:68:7b:cc:07:31:b2:88:b0:ff:8e:
                    a0:66:57:5e:b6:32:9e:6c:dd:e2:38:86:8b:a0:9c:
                    ef:fd:e4:1e:17:ea:9e:ce:9f:14:a4:23:c6:3f:1b:
                    50:c3:44:40:3d:32:b1:4e:61:67:07:5e:47:cd:24:
                    55:c5:37:f5:d2:ee:98:5a:d2:be:5b:23:36:9b:c9:
                    63:7f:13:3a:35:b3:d7:6f:43:f9:fe:4f:0c:5c:8d:
                    00:ad:ca:42:f7:d0:dd:da:63:28:de:59:cb:1d:1a:
                    c7:e4:b9:54:f0:b5:96:4d:cb:e3:8f:c4:a6:36:12:
                    83:a0:4f:dd:6d:8d:29:90:08:03:c0:a7:15:ba:a9:
                    c5:98:e1:2b:4b:82:ba:cc:5b:9b:9b:68:0f:63:b8:
                    eb:16:4d:3d:d6:9d:83:73:1a:73:4b:1e:76:e6:f8:
                    df:36:69:15:0b:bd:18:cf:1c:07:e0:b0:64:f5:1f:
                    af:bb:3d:7f:9a:2f:96:12:ad:e1:25:5f:8d:92:2f:
                    f0:6a:55:72:50:ba:49:54:5d:f1:f5:48:b2:22:7f:
                    4a:23:7e:66:41:be:fc:5d:b5:ca:a6:6f:d4:ed:e1:
                    df:37:b3:e2:9a:a0:96:56:9a:24:f7:f0:ed:9a:2b:
                    3f:e3:6d:3e:3e:31:45:22:2d:74:16:16:a7:53:36:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9F:4B:C7:B3:2A:A0:9D:60:E7:A4:C3:91:B4:6A:C6:F9:FD:25:53
            X509v3 Authority Key Identifier:
                keyid:37:6E:2B:87:6C:E3:74:60:57:68:97:62:F0:44:23:55:4E:BF:EE:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/376E2B876CE3746057689762F04423554EBFEEB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5f:eb:5f:0b:91:8d:a2:d1:31:48:27:2f:2a:d1:c4:fc:fa:
         cb:ea:d4:d9:d8:4b:c0:d9:05:51:03:98:2e:96:8b:33:c6:fc:
         ce:d8:ed:55:22:b8:7f:8e:b1:22:01:a7:c5:a2:a7:c6:60:22:
         c5:7f:21:44:87:b6:e7:26:f6:88:65:ed:c1:7c:63:c8:0a:98:
         fe:13:a9:e2:05:d0:c5:5d:91:c3:10:d3:0d:d2:0d:b4:97:b7:
         5f:4f:1a:a0:41:69:3f:c6:dc:d2:e4:f2:65:a1:00:40:e5:1d:
         ff:ff:af:27:92:71:3e:ca:3f:bd:4c:26:e8:72:0d:92:b9:bc:
         3c:1a:0c:ee:7b:fc:f4:92:5e:fc:7e:53:06:ff:83:42:b8:47:
         b5:3d:db:cb:59:ad:57:96:70:02:ae:fd:71:59:2d:4e:e4:2c:
         ca:00:3c:08:35:04:ef:36:47:53:b0:20:c8:30:ba:c5:4f:94:
         6e:49:8b:ab:62:94:40:20:dc:19:3a:f6:f5:e8:da:3b:c8:bb:
         1a:0d:1b:ad:fe:7a:85:63:8d:e4:27:e4:7f:6a:e8:f9:78:64:
         d7:e7:ba:70:c1:b1:36:be:d4:b8:7b:90:f5:19:82:8c:d3:eb:
         f2:c3:6f:8b:f3:6a:b3:20:1e:6d:b4:1e:f6:63:72:ad:6b:0a:
         57:35:79:df
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP1u7MTa6YxRRtjLcwFhn/AM+5JAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc2RTJCODc2Q0UzNzQ2MDU3Njg5NzYyRjA0NDIzNTU0
RUJGRUVCMjAeFw0yNjA5MTcwMTUwNThaFw0yNjA5MTgwMzA4NThaMDMxMTAvBgNV
BAMTKDg0OUY0QkM3QjMyQUEwOUQ2MEU3QTRDMzkxQjQ2QUM2RjlGRDI1NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpuUIaHvMBzGyiLD/jqBmV162
Mp5s3eI4hougnO/95B4X6p7OnxSkI8Y/G1DDREA9MrFOYWcHXkfNJFXFN/XS7pha
0r5bIzabyWN/Ezo1s9dvQ/n+TwxcjQCtykL30N3aYyjeWcsdGsfkuVTwtZZNy+OP
xKY2EoOgT91tjSmQCAPApxW6qcWY4StLgrrMW5ubaA9juOsWTT3WnYNzGnNLHnbm
+N82aRULvRjPHAfgsGT1H6+7PX+aL5YSreElX42SL/BqVXJQuklUXfH1SLIif0oj
fmZBvvxdtcqmb9Tt4d83s+KaoJZWmiT38O2aKz/jbT4+MUUiLXQWFqdTNl1nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhJ9Lx7MqoJ1g56TDkbRqxvn9JVMwHwYDVR0j
BBgwFoAUN24rh2zjdGBXaJdi8EQjVU6/7rIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzY1OTk0NzQtZjZiNi00MDg3LWE5N2UtNzg4YjU5NDlkNTdiLzAvMzc2RTJCODc2
Q0UzNzQ2MDU3Njg5NzYyRjA0NDIzNTU0RUJGRUVCMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zNzZFMkI4NzZDRTM3NDYwNTc2ODk3NjJGMDQ0MjM1NTRFQkZF
RUIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1OTk0NzQtZjZiNi00MDg3LWE5
N2UtNzg4YjU5NDlkNTdiLzAvMzc2RTJCODc2Q0UzNzQ2MDU3Njg5NzYyRjA0NDIz
NTU0RUJGRUVCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADRf618LkY2i0TFIJy8q0cT8+svq1NnYS8DZ
BVEDmC6WizPG/M7Y7VUiuH+OsSIBp8Wip8ZgIsV/IUSHtucm9ohl7cF8Y8gKmP4T
qeIF0MVdkcMQ0w3SDbSXt19PGqBBaT/G3NLk8mWhAEDlHf//ryeScT7KP71MJuhy
DZK5vDwaDO57/PSSXvx+Uwb/g0K4R7U928tZrVeWcAKu/XFZLU7kLMoAPAg1BO82
R1OwIMgwusVPlG5Ji6tilEAg3Bk69vXo2jvIuxoNG63+eoVjjeQn5H9q6Pl4ZNfn
unDBsTa+1Lh7kPUZgozT6/LDb4vzarMgHm20HvZjcq1rClc1ed8=
-----END CERTIFICATE-----
Generated at Thu Sep 17 08:36:47 2026 by rpki-client