Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
File:                     4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft (raw, json)
Hash identifier:          YFRvL7dHih/WWpiz5ftibux19Gx/MsR+r0n9+9Y9KGk=
Subject key identifier:   BE:3F:8F:D1:1D:F8:E1:96:EE:D9:47:B4:AC:D5:32:CA:32:96:9F:A7
Authority key identifier: 4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54
Certificate issuer:       /CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
Certificate serial:       227A927C38E2252DD517B824CBFC8CFB413E5D98
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
Manifest number:          B9
Signing time:             Thu 17 Sep 2026 08:39:16 +0000
Manifest this update:     Thu 17 Sep 2026 08:34:16 +0000
Manifest next update:     Fri 18 Sep 2026 12:38:16 +0000
Files and hashes:         1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: dIbMNlmzPRtmx/pqtJnbGmYAZfEP0PtpQbV8sPyHXmY=)
                          2: 4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl (hash: k5tTr2+Y7Jtkd8A7GjWLILzQnBcvXrhBWbQ7Et5RZMQ=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl
                          rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7a:92:7c:38:e2:25:2d:d5:17:b8:24:cb:fc:8c:fb:41:3e:5d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
        Validity
            Not Before: Sep 17 08:34:16 2026 GMT
            Not After : Sep 18 12:38:16 2026 GMT
        Subject: CN=BE3F8FD11DF8E196EED947B4ACD532CA32969FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:04:39:ba:37:c4:64:24:dd:80:5b:d7:73:
                    6b:db:ca:e5:a0:f3:ca:29:c1:11:17:61:8e:67:52:
                    43:94:7e:69:b6:dd:a3:98:04:0d:99:7c:00:41:85:
                    53:9a:e8:be:55:34:26:e1:71:de:ed:80:51:c7:69:
                    4e:fc:e7:96:cb:f9:4a:d4:40:15:89:66:ae:52:18:
                    27:3f:5a:9a:55:88:60:f4:cd:cd:2a:51:24:5d:b7:
                    73:57:01:2f:78:1e:82:ac:d2:ab:02:ce:17:a6:ac:
                    68:49:e5:ab:bd:71:44:f0:f4:d4:54:34:ad:75:94:
                    26:e4:47:ac:95:06:95:bf:c0:5e:cf:09:73:21:53:
                    8f:44:bd:c9:41:9b:6d:01:82:09:86:67:64:d6:7d:
                    fd:d1:8e:c1:ab:ff:35:19:e5:f0:63:58:b0:48:18:
                    95:cb:4b:f3:96:4f:51:c5:e1:9c:76:25:76:e3:ef:
                    6e:d4:30:b0:5b:96:bf:34:af:b1:c7:a9:43:b7:74:
                    4a:d5:b7:18:43:37:35:f7:f2:84:40:61:31:ed:78:
                    7d:44:31:40:b2:49:f2:08:ed:ec:98:08:79:ea:51:
                    c9:03:41:7d:72:7e:d9:2d:49:14:76:f5:28:2e:a1:
                    2a:7a:e2:4d:51:e6:0f:9e:1d:66:da:85:0f:a6:c9:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3F:8F:D1:1D:F8:E1:96:EE:D9:47:B4:AC:D5:32:CA:32:96:9F:A7
            X509v3 Authority Key Identifier:
                keyid:4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3d:d9:d6:ea:58:1a:55:41:57:6b:9a:e0:86:cb:d8:6e:20:
         2b:0e:12:1e:2c:d2:d6:9e:1b:35:87:f9:52:41:a8:85:8d:3f:
         fd:81:42:ae:3c:8f:ba:0e:d7:d1:4b:c2:33:a3:b7:c3:77:08:
         e8:2f:84:f2:95:33:d2:10:cc:cd:7c:70:ca:9e:4f:69:0d:45:
         cb:05:e0:f3:7f:70:8a:8f:9e:90:f6:f5:5f:6a:b1:33:6f:37:
         f9:63:4d:d0:ad:54:28:9c:c6:dd:5d:6f:27:3a:37:75:03:43:
         45:e8:81:f6:74:d4:f1:cc:ac:ad:60:07:c9:35:3b:80:0f:09:
         5f:c0:02:a7:e0:fa:44:ea:ab:1f:06:7e:2d:cc:82:55:54:f5:
         2c:0c:d6:54:5f:cb:e6:58:fe:fb:9a:a5:88:0d:a5:df:fc:07:
         98:cd:b1:16:8f:cd:e4:2e:e8:73:60:ea:65:82:40:3d:9d:3d:
         41:c8:9b:ac:5e:74:57:9e:b1:f0:a2:51:50:2b:dc:bc:0f:3c:
         21:c5:b5:77:dd:10:29:2e:62:94:24:38:0e:0e:4a:f9:e9:31:
         e8:89:0c:03:07:36:2f:a4:49:44:33:f0:f5:c7:ea:4a:50:af:
         d8:fa:17:ef:35:f1:98:94:c6:2a:81:33:57:0d:8a:3f:e6:ec:
         1a:1c:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:43:39 2026 by rpki-client