Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
File:                     3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json)
Hash identifier:          dtpZcR6UfZRJ1Sb2mjUyoW4gZrK+8G/r4svVQazM+mo=
Subject key identifier:   13:AC:83:ED:72:B4:C4:D1:30:2E:37:EC:C6:30:BD:16:00:9E:F1:2D
Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C
Certificate issuer:       /CN=3B53322385FC84075D5F59542B2C6639361DE40C
Certificate serial:       7A6CEFB28E6E42060353BA72970F3B2922AE24C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 03:32:48 +0000
Manifest this update:     Thu 17 Sep 2026 03:27:48 +0000
Manifest next update:     Fri 18 Sep 2026 05:59:48 +0000
Files and hashes:         1: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: xDNmME8PrF5t9sq84B/wzRIbNxC10f3ekrHwDX/fyaI=)
                          2: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=)
                          3: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl
                          rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 05:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6c:ef:b2:8e:6e:42:06:03:53:ba:72:97:0f:3b:29:22:ae:24:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C
        Validity
            Not Before: Sep 17 03:27:48 2026 GMT
            Not After : Sep 18 05:59:48 2026 GMT
        Subject: CN=13AC83ED72B4C4D1302E37ECC630BD16009EF12D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:f1:b8:d2:25:c7:76:5a:6a:5a:11:e6:ce:
                    30:5a:93:11:e1:73:d1:22:26:b5:5a:21:dd:b8:51:
                    42:0a:5f:be:ff:f2:9d:34:f1:9b:5f:16:8f:c2:f9:
                    7c:52:d2:fb:e1:27:f7:22:ed:d4:d1:04:96:22:e4:
                    bd:3e:59:d2:c4:1c:b4:87:db:b4:96:7c:e1:d7:5f:
                    46:89:c7:c3:68:c0:d1:64:aa:56:9c:55:85:27:74:
                    28:49:93:8d:e3:3c:32:9e:ff:9f:22:e4:d8:59:96:
                    e8:e3:72:b4:29:39:27:22:33:13:25:b0:f1:f8:09:
                    f1:2f:54:3c:80:52:8a:97:e5:4d:4c:73:ba:60:88:
                    f0:c1:b1:3d:74:e1:df:8f:86:36:5a:50:6f:36:12:
                    79:3b:b8:ed:0f:d5:c6:a3:61:46:d7:e6:4a:fe:99:
                    25:08:0f:ec:83:a8:4f:fe:93:82:f5:32:7e:3c:1f:
                    32:79:ab:97:0f:e6:6d:1a:2f:0c:5c:b9:e5:b9:ca:
                    c2:55:2b:ce:3c:84:94:84:9b:37:3e:56:2d:a0:cb:
                    5f:4b:c6:66:ab:95:f8:ad:42:6d:d2:56:a3:f6:15:
                    99:4e:5a:2f:ac:36:e0:43:26:fb:b3:ed:1c:d6:cf:
                    c1:7c:a3:64:92:0f:e8:3d:08:5e:fe:44:87:91:dc:
                    32:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AC:83:ED:72:B4:C4:D1:30:2E:37:EC:C6:30:BD:16:00:9E:F1:2D
            X509v3 Authority Key Identifier:
                keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d8:9d:78:05:4c:b3:3c:90:88:68:33:a3:6a:0f:ff:aa:bd:
         7a:84:06:da:d9:9c:49:b3:29:47:64:d1:49:06:e6:12:ff:ec:
         4e:08:71:16:9e:37:ac:d8:8d:03:0e:9d:8d:2c:dc:ea:54:0a:
         c8:e0:10:1d:23:87:bc:b2:59:a5:7f:84:01:f6:1e:a5:0c:6c:
         16:23:bb:b4:0f:cd:c1:d8:fd:a3:ad:2b:b4:99:22:ff:3b:6f:
         5d:63:11:f8:20:cd:70:a7:70:41:05:35:1e:86:9c:c1:94:3c:
         a9:54:fa:fd:e4:8e:12:9a:48:3d:cb:65:fb:a5:d7:72:83:9f:
         74:c9:0d:6e:ab:ab:21:e9:21:30:b7:f2:83:fa:cb:e5:39:c6:
         9b:3f:5e:39:5c:59:1a:4f:8d:39:9e:5e:26:db:58:bb:2a:e6:
         1e:28:66:c0:73:21:b3:8d:b4:c0:b0:67:c5:10:1d:3c:c3:3b:
         5c:be:7f:34:10:4a:2a:23:63:25:f0:65:e5:97:c4:ea:aa:6e:
         e0:35:34:c2:51:53:27:88:4c:39:91:63:2e:c0:f6:3a:19:8a:
         96:d4:ea:37:20:19:d8:6d:02:60:75:1b:0d:34:5e:48:af:cc:
         fb:97:61:4c:c5:dc:72:ae:8c:1e:ea:bb:be:8d:b4:f3:24:bd:
         e2:af:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:44:38 2026 by rpki-client